Technology
A shared framework. Connected applications.
The no-code/low-code Flowtion Studio provides the technological foundation for ready-made products and customer-specific processes.
Technology foundations
Java, Quasar and Microsoft SQL Server.
Flowtion has a layered architecture: most business logic runs in the database, while the Java application layer and Quasar interface support presentation and user interaction.
Java
The Java application layer serves the user interface and runs selected background procedures and scheduled tasks. Its platform-independent foundations allow the application layer to operate on both Linux and Windows Server.
Business benefit: a widely used technology foundation for maintaining and extending the system.
Quasar Framework
Built on Vue.js, Quasar provides consistent interface components and responsive layouts. It supports interfaces that adapt to desktop and mobile screens while sharing a common development foundation.
Business benefit: consistent interaction patterns across office and field work interfaces.
Microsoft SQL Server
Most business logic runs directly in the database, close to the data. On customer infrastructure, SQL Server Express is available for lighter workloads, Standard for growing capacity needs, and Enterprise for enterprise requirements. Cloud deployments can also use Azure SQL Database.
Business benefit: plan capacity and capability upgrades while retaining the same database platform.
SQL Server editions have different capacity limits and features. We select the appropriate edition based on workload, data volumes and operational requirements. Changing editions requires planning, compatibility checks and, where applicable, a separate licence.
Flowtion Studio framework
Flowtion Studio is a no-code/low-code framework. Data structures, screens and workflows can be configured through the interface without programming; the system generates the database structure automatically from these settings. Conditions and business rules can use short SQL expressions, while complex logic can be extended with SQL and Java components. The workflow engine directs process steps according to roles, permissions and control points. We normally perform configuration, but trained customers can also modify it.
Studio as a standalone product →System integration
Flowtion connects to existing ERP and specialist systems through database and service-based interfaces. Integration design defines the data to be exchanged, interface behaviour and the responsibilities of each system.
Studio can also serve as middleware for controlled, logged and fault-tolerant system connections. Failed component calls can be retried at configurable intervals; after a specified number of failures, the process requests administrator intervention. Data Exchange solutions can organise different types of data from multiple sources into a unified data mart.
Middleware and Data Exchange examples →On-premises or Microsoft Azure
Flowtion can be deployed on customer infrastructure or in Microsoft Azure. The server side can run in Azure, with SQL Server or Azure SQL as the database. Deployment requirements are defined according to business usage, system connections and operational expectations.
AI service layer
Built on Microsoft Azure AI Document Intelligence, the AI layer supports business document processing and the use of extracted data. Its first completed application processes bank statements, and the solution can be extended to other document types according to requirements.
Explore AI solutions →Information security
Certified information security management.
NQA has certified the information security management system of Flowtion Business Solutions Kft. to ISO/IEC 27001:2022 for IT system operations, development and customer support.
Certificate number: 213860 · Valid until 21 November 2027.
From business requirements to an approved specification, a tested solution and a planned go-live.
Our services →BusinessDesk, FieldOps and Studio: a server licence plus named or concurrent user licences, which can be combined. Connect and Data Exchange: a server licence only, with unlimited users. Both on-premises and cloud deployments support a one-time licence fee with annual software maintenance or a monthly subscription.
IT security
Regular security testing and ongoing improvement.
IT security is a key consideration in the development and operation of Flowtion. We regularly assess the product’s security, including penetration testing by ethical hackers to identify risks and inform security development priorities.
Testing from an attacker’s perspective
Penetration testing assesses application behaviour through potential misuse scenarios. Areas examined include authentication, access control, session management, input validation and application configuration.
Documented assessment methodology
The January–February 2026 assessment focused on OWASP Top 10 risk areas. Findings were assigned CWE categories and CVSS v3.1 severity scores, together with technical descriptions and remediation recommendations.
A controlled test environment
The documented assessment used a test instance functionally equivalent to production, populated with non-live user data. Testers received system documentation and both standard and elevated access to examine different usage scenarios.
Continuous review and remediation
We have corrected the issues identified during the assessment. Security checks and necessary fixes are carried out on an ongoing basis, with findings incorporated into product development and operations. We also review system changes from a security perspective and check the measures implemented.
Application security assessments and an ISO/IEC 27001:2022 information security management system cover distinct, complementary areas. Certification applies to the organisation’s management system; penetration testing examines the specified application environment.