We use cookies to improve your experience and analyze site traffic. By clicking "Accept", you consent to our use of cookies. See our Privacy Policy for details.

Attending Frankfurt Book Fair? We’re taking meetings 7–9 October.Book your meeting(opens in a new tab)
Security

Security & Compliance

Enterprise-grade protection for your publications and your readers’ data.

Data Protection

Your content and your readers’ data are protected at every layer.

🔒

Encryption in transit

All data transmitted between readers and ZenFlip is encrypted using TLS 1.2 or higher. No unencrypted connections are accepted.

🗄️

Encryption at rest

Publication files stored on AWS S3 are encrypted using AES-256 server-side encryption. Your content is protected even at the storage level.

🌐

Global CDN delivery

Publications are served through Vercel Edge Network, delivering content from the nearest edge location for fast, secure access worldwide.

Access Controls

Control who can view your publications and how they access them.

🔑
Password protection

Require a password before readers can view a publication. Change or remove passwords anytime. Available on Creator plans and above.

📧
Email-gated access

Require readers to submit their email address before viewing. Captured leads appear in your dashboard and, on Business and above, can trigger Zapier webhooks.

🏢
SSO / SAML

Enterprise single sign-on for team access. Authenticate through your existing identity provider. Available on Enterprise plans.

👥
Team roles

Assign roles and permissions to team members. Control who can publish, edit, or view analytics. Available on Business plans and above.

Accessibility Standards

Built natively to WCAG 2.2 AA — no third-party accessibility overlay.

♿

WCAG 2.2 AA target

ZenFlip is built to WCAG 2.2 AA — one version ahead of the WCAG 2.1 AA standard referenced by ADA Title II (deadline: April 24, 2026 for entities serving 50,000+ people). A VPAT (WCAG 2.2 AA edition) documents our support for each criterion.

🇪🇺

European Accessibility Act

The EAA has been in force since June 2025, requiring accessible digital products across EU member states. EN 301 549, the harmonised European standard, bases its web requirements on WCAG — and ZenFlip is built to WCAG 2.2 AA.

📋

Published accessibility statement

We maintain a versioned accessibility statement at /legal/accessibility.

Reader Privacy

Respect your readers’ privacy while still getting the analytics you need.

🛡️

No reader fingerprinting

ZenFlip does not use cookies, browser fingerprinting, or any personally identifiable tracking for reader analytics. All engagement data is aggregate.

📊

Aggregate analytics only

Analytics show page-level engagement patterns — views, time-on-page, heatmaps, geographic regions. Individual reader identity is never tracked or stored.

⚖️

GDPR-aligned design

ZenFlip is designed with GDPR data minimisation principles. We collect only what is necessary for the service to function and for publishers to understand content performance.

See our analytics features for details on what engagement data we collect, or read our GDPR policy.

Frequently Asked Questions

Is ZenFlip GDPR compliant?
GDPR compliance is shared: you are the data controller for your readers, and ZenFlip acts as your processor. What we provide: a Data Processing Agreement, Standard Contractual Clauses (Commission Decision 2021/914) covering transfers to India and our US sub-processors, a published sub-processor list, encryption in transit (TLS 1.2+) and at rest (AES-256), and data export or deletion on request. Reader analytics write nothing to the reader's device: for an anonymous reader a randomly generated viewer ID is held in memory for a single visit and discarded when the tab closes. We record coarse location, browser and device type alongside it. That engagement data is pseudonymous personal data under GDPR — you remain the controller for your readers — but because nothing is stored on their device, the ePrivacy consent rule for cookies and similar storage does not apply to it. On Business and Enterprise plans, events from readers signed in to your library are also linked to their reader account so you can measure repeat readership; that linked data identifies an individual rather than being pseudonymous, it relies on the login they already have rather than any new device storage, and it can be disabled per publication.
Does ZenFlip support SSO?
Yes. SSO via SAML is available on Enterprise plans. Contact our sales team for configuration details.
Where is data stored?
Publication files are stored on AWS S3. The application is served globally via Vercel Edge Network. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
Can I password-protect a flipbook?
Yes. Password protection is available on Creator plans and above. Set a password in your publication settings — readers must enter it before viewing.
Is ZenFlip built to accessibility standards?
Yes. ZenFlip is built natively to WCAG 2.2 AA, with no third-party accessibility overlay — one version ahead of the WCAG 2.1 AA standard referenced by ADA Title II (deadline April 24, 2026). A VPAT (WCAG 2.2 AA edition) is available, and we publish a versioned accessibility statement.

Publish with confidence

Start free. Enterprise security available when you need it.

Start free →Accessibility featuresAccessibility statement
Security & Compliance | ZenFlip