Where data goes
Case details and workflow records are stored in a Cloudflare D1 database. Uploaded documents and raw email messages are stored in Cloudflare R2 object storage. Traffic to GoalFlow is encrypted over HTTPS.
Privacy
A controlled public site and intake process.
This public site explains New Avenues Federal and directs visitors to the right page. GoalFlow intake is controlled, logged, and intentionally narrow.
Encryption and access
Data is encrypted in transit and stored on encrypted cloud services. Internal staff access is protected by Cloudflare Access. Client case access is limited to approved contacts.
Upload screening and restricted material
GoalFlow screens uploads for allowed formats, suspicious file signatures, active content in PDFs, and macro indicators in Office files. CUI, ITAR, export-controlled, and unknown-sensitive material should not be submitted through public intake.