Introduction
Transparency and accountability are cornerstones in today's business world. Through these principles, business can help promote a culture where social responsibility is in the center through healthy and sustainable operations, both for people and the environment.
At Flowcase, our commitment to sustainability and responsible business conduct is at the core of our operations. As we strive to align with the Future-Fit Business Benchmark, we are also closely following the Norwegian Transparency Act, which is based on OECD Guidelines for Multinational Enterprises.
The Norwegian Transparency Act aims to promote businesses' respect for fundamental human rights and decent working conditions in connection with the production of goods and the provision of services, and to ensure the public's access to information about how businesses handle negative consequences for fundamental human rights and decent working conditions. The Future Fit Framework is a methodology and tool designed to measure KPI and steer towards goals for an environmentally restorative, socially just and economically inclusive future. Together it represents a significant step and a framework for strengthening the relationship between business, the environment, and society.
The Transparency Act covers larger businesses domiciled in Norway and that offer goods and services in or outside Norway. Larger businesses are businesses that are covered by the Accounting Act Section 1-5 or that on the balance sheet date exceed the limits for two of the three following conditions: Sales revenue over NOK 70 million, balance sheet total over NOK 35 million, and an average of more than 50 employees in the financial year. The parent company shall be considered a larger enterprise if the conditions are met for parent and subsidiary companies viewed as a single entity. Flowcase is not covered by the Act, however, we strive for a Future Fit Business and emphasize the importance of transparency towards stakeholders, customers and the public.
This report highlights our journey towards building a sustainable future while ensuring full compliance with global and local regulations. By adopting internationally recognized standards for transparency, ethical practices, and environmental responsibility, we aim to create long-term value for our customers and stakeholders, and contribute meaningfully to the global sustainability and responsibility agenda.
Foreword from our CEO
In an era of rapid change, transparency, accountability, and adaptability are more important than ever. These values are not only essential for achieving the UN Sustainable Development Goals but also for building the trust and resilience that modern businesses depend on. As a SaaS company supporting professional service firms with CV, resume, and case study management, we recognize the opportunity our technology provides to streamline processes, reduce inefficiencies, and contribute to more sustainable business practices.
At Flowcase, we are committed to integrating sustainability into our core operations and decision-making. By working with the Future-Fit Framework and adhering to the Transparency Act, we ensure that our practices are both responsible and forward-looking. We believe that openness creates a safer and more predictable environment for our employees, suppliers, customers, and society as a whole.
Sustainability is not a journey we take alone. We are grateful to our customers, suppliers, business partners, and stakeholders for their continued trust and collaboration. Together, we can drive meaningful change and contribute to a fairer, more sustainable future.
A word from our colleague
"After five years at Flowcase, I have witnessed an incredible journey. A key factor for me from day one, has been their focus on their employees well-being. The flexible work hours, the perks and not least the constant focus on nurturing a healthy, inclusive and fun place to work, is something unique and I have never experienced this in any previous jobs."
Pernille Christensen, Customer Success Lead
About Our Business and Operations
Flowcase’s journey began in 2012 when Erling Linde set out to rethink how professionals create CVs and resumes. After hearing feedback from IT consultancy colleagues, Erling had an idea. He joined forces with Nicolai Nielsen, our UX-focused co-founder, and worked closely with customers and consultants to create a customer-centric tool.
Today, we're the top CV, resume, and case study management tool for professional service companies worldwide, with a diverse team of 37 people from 8 countries and growing fast. We're committed to making work life better for everyone in your company.
Our day-to-day business operations consist mainly of virtual business operations, relying on robust digital processes. Physical components like offices, IT hardware and customer engagement events play a role in our physical presence.
Flowcase has offices in Norway, Denmark, United Kingdom and Canada. We deliver services both to public and private entities all over the world. More than 100,000 users across 35+ countries trust Flowcase (formerly known as CV Partner) to streamline their work with our service.
It is important to recognize the typical risks associated with our industry in order to enable proactive monitoring and prevent potential harm or negative consequences.
By being aware of these inherent risks, we apply the precautionary principle and integrate risk management into our operations. This ensures that attention is directed toward areas requiring deeper evaluation and mapping as part of our due diligence.
Please continue reading to learn how Flowcase actively mitigates these risks.
Our Supply Chain
Our supply chain primarily consists of IT tools and services that support our business and operations. Based on our total yearly procurement expenditure, approximately 80% of our suppliers have been reviewed with respect to human and labor rights as well as environmental performance. Ancillary spend, such as one-time purchases and non-recurring costs, is excluded from this calculation to ensure focus on our most material supplier relationships.
Efforts and Actions
Privacy and Security
As a SaaS company providing solutions for storing and managing employee resumes, CVs and case studies for bids and proposals, we process data on behalf of our customers. To ensure both information security and privacy, we have implemented and maintain a robust information security and privacy management framework.
- Certifications and Standards
We are certified in ISO/IEC 27001 (Information Security Management System), ISO/IEC 27017 (Cloud Security), and SOC 2 Type II, demonstrating our commitment to the highest standards of data protection, information security and operational integrity. - Legal and Regulatory Compliance
Our platform and operations are designed to support compliance with regional privacy, infosec and data laws, adapting to the legal frameworks relevant to where our customers operate. We maintain a close watch on regulatory developments to ensure ongoing compliance. - Privacy and Security by Design
Data protection and security principles are embedded into the design and architecture of our services, ensuring that security and privacy are not add-ons but core features of our system during the whole lifecycle. - Ongoing Monitoring and Improvement
We use dedicated tools and internal processes to monitor compliance, assess risk, and track our performance against both legal obligations and best practice. Regular audits and security assessments help us identify and respond to emerging risks. - Customer Trust and Transparency
We provide clear documentation and support to our customers on how data is processed, stored, and protected. Our contractual terms are aligned with data protection best practices, and we offer transparency into our security and privacy posture. Our Privacy Notice is available on our website, and additional information about our privacy and security commitments, including our ISO and SOC 2 certifications and reports, are available on request on our Trust Page: https://trust.flowcase.com/.
Responsible AI
As we continue to develop and integrate AI-driven features into our SaaS platform, we recognize the importance of ensuring that artificial intelligence is used responsibly, ethically, and in alignment with evolving regulatory standards and best practices. To support this, we have established a framework of policies and processes that guide the responsible design, development, and deployment of AI across our organization.
We are committed to the principles of trustworthy and human-centric AI, as articulated in the EU AI Act, which classifies AI systems by risk and sets requirements accordingly. For more information about our Responsible AI framework, please visit our Trust Page: https://trust.flowcase.com/.
Environment
We are committed to a sustainable future and to continuously reducing our environmental impact.
Our operations are inherently energy-light compared to traditional industries, relying primarily on electricity to support day-to-day activities. The main areas of energy consumption are office energy use, such as heating and cooling systems, lighting, and general office equipment,as well as IT infrastructure, including employee workstations and networking hardware.
In Norway, where our headquarters are located, electricity is almost entirely sourced from renewables, with renewable resources accounting for approximately 98% of power generation in 2020.
We do not use water directly in the delivery of our services or products. Water consumption is limited to normal office use, such as plumbing and sanitation.
The main waste stream generated by our business is household waste. We practice waste separation to ensure that paper and cardboard, food waste, glass, metals, and other recyclable fractions are properly managed. Printing is minimal, and at end-of-life, IT hardware is handled through specialized providers to ensure secure data destruction and environmentally responsible recycling of components.
Human Rights, Employment and Workers Rights
We are committed to upholding the highest standards of human rights and fair employment practices across all our operations. Our Code of Conduct reflects not only compliance with applicable local labor laws but also a proactive commitment to creating a safe, fair, and inclusive workplace for everyone.
- Respect for Workers’ Rights
We fully respect and comply with local labor laws, including workers’ freedom of association and the right to collective bargaining. We actively encourage dialogue and ensure that employee concerns are solicited, fairly assessed, and transparently addressed without fear of retaliation. - Fair and Equitable Employment
All employees are provided with fair employment terms and compensated with at least a minimum living wage. We are committed to supporting a healthy work-life balance and maintaining equitable practices across all aspects of employment. - Flexible and Modern Ways of Working
We recognize that flexibility is essential for a balanced and future-ready workforce. By offering flexible schedules and remote working opportunities, we help employees better align their personal and professional lives. This flexibility not only strengthens engagement, but also reduces environmental impacts by lowering commuting needs. - Non-Discrimination and Equal Opportunity
We actively celebrate diversity and uphold a strict non-discrimination policy across all aspects of employment, including recruitment, hiring, promotion, compensation, and all other employment conditions. We value all employees regardless of race, gender, color, origin, ethnicity, religion, belief, age, disability, sexual orientation, gender identity or expression, political opinion, or social background. By valuing people for their unique backgrounds, perspectives, and talents, we cultivate an inclusive culture that drives innovation and resilience. - Health and Wellbeing
Employee health is a top priority, encompassing both physical and mental wellbeing. Through proactive health initiatives, comprehensive health and travel insurance, and a culture of care, we provide employees with the security and resources they need to feel supported. - Employee Voice and Engagement
We actively listen to our employees through regular surveys and open dialogue. Feedback is used to drive improvements and shape our practices transparently. This ensures that employees feel valued, involved, and empowered in shaping the future of our workplace. - Learning and Development
In employee-manager meetings, development and continuous learning are central topics. By encouraging ongoing growth and offering training opportunities, we ensure that our people can evolve alongside the company and remain future-fit in a rapidly changing world. Lifelong learning builds both personal resilience and organizational adaptability. - Grievance and Reporting Mechanisms
We provide clear and confidential mechanisms for raising concerns, ensuring that every employee has access to fair, safe, and transparent processes. A culture where issues can be addressed openly and responsibly strengthens trust and accountability. - Transparency and Accountability
We hold ourselves accountable through clear communication, openness about progress, and a willingness to confront challenges honestly. Transparency builds trust - not only within our teams, but also with the wider communities and stakeholders who rely on us. - Commitment Beyond Compliance
While we comply with the laws in every country where we operate, we strive to go further by applying the most progressive and worker-friendly standards across our global operations
Business Ethics
At Flowcase, we see business ethics as the foundation of how we operate. They are the moral principles and values that guide our decisions and interactions, ensuring that honesty, integrity, fairness, and accountability are embedded in everything we do. Going beyond compliance with laws and regulations, we aim to build trust with stakeholders, strengthen our reputation, and contribute to long-term sustainability.
Our approach to business ethics is reflected in our Code of Conduct. It provides clear guidance for responsible behavior and is rooted in internationally recognized standards such as the UN Global Compact principles and the benchmarks of Future-Fit businesses.
We ensure ethical business conduct by focusing on the following key principles:
- Integrity and Honesty
We act truthfully and transparently in all business dealings, maintaining open communication with employees, customers, suppliers, and partners. - Fairness
We are committed to treating all stakeholders equitably and justly. - Accountability
We hold ourselves and our partners responsible for actions and decisions. Suspected breaches of our Code of Conduct are taken seriously, investigated, and addressed with corrective measures where necessary. - Respect
We foster a workplace culture that values diversity, inclusion, and human rights. Discrimination, harassment, or bullying are not tolerated, and concerns can be raised without fear of retaliation. - Responsibility
We recognize the broader impact of our operations on society and the environment. This includes safeguarding data privacy, reducing our environmental footprint, and working with suppliers who share our values.
By embedding these principles into our operations, we aim to ensure that our growth is not only profitable but also sustainable and responsible, contributing positively to people, communities, and the environment.
Financial
At Flowcase, we view financial integrity as a cornerstone of responsible business conduct. We are committed to managing our financial affairs transparently and in full compliance with applicable laws and regulations in Norway and in all jurisdictions where we operate. Our approach to taxation reflects our broader commitment to accountability, sustainability, and long-term value creation for stakeholders.
We adopt a low tolerance for tax risk and do not engage in transactions driven primarily by tax planning purposes. Instead, we ensure that all tax considerations are firmly grounded in commercial substance and aligned with both the letter and spirit of the law. Where appropriate, we utilize available statutory tax reliefs, such as research and development credits, provided these measures are consistent with our reputation, our corporate values, and our social responsibility commitments.
To ensure robust governance, our finance team works closely with external tax advisors to maintain compliance and to stay current on changes in legislation. The Group CFO has oversight responsibility for the tax strategy and provides an annual report to the Board of Directors. This report covers compliance with statutory obligations, effective management of tax costs, utilization of appropriate reliefs, and monitoring of tax risks.
We recognize that transparency and trust are central to sustainable growth. Accordingly, we maintain open and constructive relationships with tax authorities in all countries where we operate. This cooperative approach allows us to manage risks effectively, meet reporting obligations on time, and ensure that we contribute our fair share to the societies where we do business.
Through this strategy, we aim to balance prudent financial management with our responsibility to stakeholders, regulators, and the communities we serve, supporting long-term resilience and sustainable value creation.
Consumer Interest
As a SaaS provider serving B2B clients who manage employee CVs for proposal work, we recognize that safeguarding consumer interest goes beyond compliance and security; it includes delivering fair, transparent, and value-driven solutions that empower our customers and support their long-term success.
We design our platform with a deep understanding of our customers’ operational realities. Proposal teams depend on our tools to represent their employees accurately, efficiently, and competitively. Ensuring that our solution is reliable, intuitive, and flexible is key to respecting and advancing their interests.
Key Areas Where We Uphold Consumer Interest:
- Usability and Accessibility:
We continuously invest in user-centered design to ensure that our platform is intuitive, easy to use, and accessible across roles, skill levels and disabilities. This reduces friction, increases adoption, and supports productivity. We strive for WCAG A/AA compliance. - Transparency in Product Capabilities:
We are clear about what our platform can and cannot do. We avoid overpromising or creating dependency through opaque or lock-in mechanisms. All features are accompanied by clear documentation and support. - Fair Pricing and Predictability:
Our pricing models are designed to be fair, scalable, and transparent, reflecting the value we deliver without hidden costs. We aim to build trust and long-term relationships with our customers rather than short-term commercial gain. - Support and Responsiveness:
We offer timely, high-quality real human support that respects our customers’ time and operational pressures. Our feedback loops also ensure that customer insights influence product development and service improvements. - Continuous Improvement:
Our commitment to product development is driven by customer needs, not just market trends. We actively engage with our users to evolve our features in a way that enhances their efficiency, accuracy, and competitiveness.
By embedding these principles in how we operate and evolve our services, we uphold the broader consumer interest, ensuring that our customers are not only protected, but genuinely empowered by our technology
Reporting Mechanisms
Our reporting mechanisms underscore our commitment to conducting business with honesty and integrity, and to creating an inclusive environment where employees can raise concerns without fear of retaliation or negative consequences. The policy applies to all employees and stakeholders, and encourages the reporting of concerns. The objectives of the reporting mechanisms include assuring employees that their concerns are taken seriously, informing them of reporting channels, and demonstrating our commitment to listening.
To ensure that these commitments are followed up in practice, the management and board are directly involved in the development, implementation and execution of our strategies and action plans. This happens through strategic discussions and decision-making processes, where management reviews and approves the strategic goals and priorities. In this way, Flowcase’s commitments to be responsible and sustainable are integrated into the overall strategic framework. Overall, our commitments to respect people, society and the environment are integrated throughout our business, from basic strategic thinking and action plans to daily operations.
Supply chain
We recognize that our responsibility extends beyond our direct operations and into our supply chain. To ensure that our business partners uphold the same standards that we set for ourselves, we maintain strict policies and procedures governing third-party relationships. Before engaging with any supplier or third party, we require a thorough due diligence, assessment and review process, including an approval process.
Relevant factors are considered when a supplier or vendor are reviewed, including:
- The extent of purchases we make by each supplier/industry is mapped.
- Known industry risks for each supplier are assessed. For example, a textile supplier will have an inherently higher risk due to known risks in the industry.
- Geographical risk is also assessed. Does the supply chain enter countries with weak human rights protection or poor working conditions? This may also include countries with high levels of corruption or political instability.
- Product risk is also an important factor in the rough sorting. Does the supplier use production processes or products that may be linked to human rights violations? This may include the use of hazardous chemicals, forced labor or child labor in the production process.
- Risk at the business level is assessed by looking at the supplier's governance, history of respecting human rights, labor rights, anti-corruption standards, environmental standards and culture around responsible business.
- Raw material and product risk is assessed to see if the supplier uses raw materials that may be linked to human rights violations. This may include the use of raw materials linked to deforestation, water pollution or exploitation of indigenous people.
- Finally, other known risks that may have previously been reported through whistleblowing systems and/or grievance mechanisms related to production or the supply chain are considered.
Through this review process, we review the supply chain to map potential risk areas and hotspots. Where potential risks are found, we ensure the suppliers have implemented measures to mitigate the occurrence of any negative effects. This approach not only helps us mitigate negative impacts but also strengthens our long-term partnerships and promotes more sustainable practices throughout the value chain.
Our commitment does not end at the onboarding stage. Suppliers are subject to ongoing monitoring and reassessment at defined intervals, with the frequency and depth of review determined by the type of supplier and the nature of the services or goods provided. This ensures that our supply chain partners continue to meet our expectations and adapt to evolving sustainability requirements.
The delivery of our products relies on third-party technology providers, particularly data center services that host and process our solutions. We recognize that data centers have a significant environmental footprint, particularly in terms of electricity consumption and water usage. For this reason, we place high expectations on our technology suppliers to operate responsibly and in alignment with our sustainability standards.
Our suppliers have made strong commitments to reducing the environmental impact of their operations. This includes large-scale investments in renewable energy, with the aim of powering data centers entirely through clean energy sources. Furthermore, our providers are increasingly focused on water stewardship, working toward more efficient water usage and, where possible, contributing to water replenishment in the communities where they operate.
In addition to environmental considerations, we hold our suppliers to strict standards regarding information security, data privacy, and the responsible use of emerging technologies. As our products and services depend on the secure, ethical and compliant management of data, we require that all suppliers demonstrate compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and other relevant frameworks in the markets where we operate.
We also ensure that suppliers maintain information security controls that meet or exceed our own, such as ISO 27001, ISO 27017 and SOC 2. This includes robust safeguards for the confidentiality, integrity, and availability of data, as well as comprehensive measures for risk management, incident response, and continuous improvement of security practices.
Looking ahead, we recognize the growing importance of artificial intelligence in shaping digital services. We therefore expect our suppliers to commit to the responsible development and deployment of AI technologies, in line with evolving regulatory requirements such as the EU AI Act, and to engage only sub-processors that are ISO 42001 certified and undergo regular third-party audit assessments. This includes ensuring transparency, fairness, accountability, and human oversight in AI systems, with the goal of protecting fundamental rights and promoting trust in technology.
By partnering with suppliers that share our values, we ensure that the services underpinning our products are delivered in a way that minimizes carbon emissions, conserves resources, safeguards data, respects privacy and responsible AI development. This approach enables us to extend our environmental and ethical responsibility beyond our direct operations and contribute to a sustainable and ethical environment and future.
Through these measures, we aim to foster long-term, responsible partnerships that support our broader sustainability goals while minimizing risks and safeguarding ethical business practices.
Questions or comments?
We welcome dialogue and collaboration as part of our commitment to transparency. If you have questions, concerns, or suggestions on how Flowcase can further contribute to responsible business practices, please contact us at security@flowcase.com
