Annual independent ISO audits of the female health app’s dual certification program returned zero findings across its information privacy and security management systems, reaffirming Flo’s commitment to consumer data privacy standards.
LONDON, Aug. 25 2026 /PRNewswire/ — Flo Health, the #1 female health app used by more than 300 million people worldwide, has completed its annual ISO 27001 and ISO 27701 audits, which returned zero findings. This means independent auditors identified no areas for improvement in the company’s privacy and security management systems.
ISO 27001 and ISO 27701 are the internationally recognized standards for information security and privacy management systems. These audits map to GDPR compliance, which is the most rigorous global privacy regulation. An independent third-party auditor returned with clean audits, which confirm Flo continues to exceed the highest level of privacy and security requirements.
As consumers increasingly rely on digital health services, and become more aware of how their personal and health information is collected and used, independent verification of privacy and security practices is essential to building trust and providing assurance that sensitive data is protected to the highest standards.
Privacy and security is the cornerstone of how Flo builds and operates its products. In 2022, the company became the first period tracking app to achieve ISO 27001 for its information security program. Two years later, Flo expanded its commitment and became the first and only period tracking app to earn the ISO 27701 certification, the global standard for privacy information management.
Unlike a one-time assessment, maintaining both certifications requires ongoing independent oversight, including annual surveillance audits and full recertification every three years. This means each year, Flo is required to demonstrate it is both maintaining and improving both its privacy and security management systems.
Flo’s latest audits were completed with zero findings, meaning independent auditors identified no nonconformities or areas for improvement. The results reaffirm that the policies, processes, and technical safeguards governing how Flo collects, stores, processes, and protects users’ personal and health information continue to meet rigorous international standards.
“Women deserve to feel confident that their most sensitive health information is protected by privacy and security practices that have been independently validated,” said Sue Khan, VP of Privacy and Data Protection Officer at Flo Health. “Achieving zero findings across both of our annual ISO surveillance audits reflects the maturity of our privacy and security programs and our continued commitment to responsible data stewardship, transparency and accountability.”
Certifications are only one part of how Flo Health earns and keeps user trust. The company builds privacy and security-by-design principles directly into product development, allows users to manage their privacy settings within the app, and is clear that it never has and never will sell its users’ personal data. Flo’s dual ISO certifications cover the information security and privacy management systems behind the app’s core functionality.
The company has also convened an independent Privacy and Security Advisory Board and integrated post-quantum cryptography into its Anonymous Mode feature. Anonymous Mode has earned recognition from Fast Company and TIME, and won the Privacy Innovation Award from the International Association of Privacy Professionals (IAPP). Flo also open-sourced the Anonymous Mode technology to raise the privacy bar across the digital health industry.
More information on Flo’s security and privacy certifications is available at flo.health/privacy-portal/certification.
About Flo Health
Flo is the most popular women’s health app globally and the #1 OB-GYN-recommended app for period and cycle tracking, according to a survey of 500 U.S. OB-GYNs. Over 300 million people have downloaded Flo, and 60 million people use it monthly. With more than 120 medical experts, Flo supports women throughout their reproductive lives, providing cycle and ovulation tracking, personalized health insights, and a fully closed community. Flo is available in more than 20 languages on iOS and Android. For more information, visit flo.health.
View original content:https://www.prnewswire.com/news-releases/flo-healths-gdpr-compliance-and-privacy-security-protections-stand-up-to-independent-iso-scrutiny-302858966.html
SOURCE Flo Health
