System Requirements
StockFlow is a browser-based SaaS application. For most users, any modern browser on a reasonably fast internet connection is all you need. This page documents the detailed technical requirements for teams operating at scale.
Browser support
| Browser | Minimum version | Notes |
|---|---|---|
| Google Chrome | 110+ | Recommended. Best performance. |
| Microsoft Edge | 110+ | Chromium-based Edge only |
| Mozilla Firefox | 110+ | Fully supported |
| Apple Safari | 16+ | Supported on macOS and iOS |
| Opera | 95+ | Supported but not officially tested |
| Internet Explorer | Any | Not supported |
Recommendation: Keep your browser updated to the latest stable version. StockFlow uses modern JavaScript APIs that may not be available in older releases.
Operating system
StockFlow is browser-based and has no OS dependency for standard use. The native mobile app requires:
| Platform | Minimum version |
|---|---|
| iOS | 14.0 |
| Android | 10 (API level 29) |
| macOS (App) | 12 Monterey |
| Windows (App) | Windows 10 (build 19041) |
Network requirements
Standard use
- Minimum bandwidth: 2 Mbps download / 1 Mbps upload per user
- Recommended bandwidth: 10 Mbps download / 5 Mbps upload per user
- Latency: under 200 ms to the nearest StockFlow data centre
Barcode scanning (USB or Bluetooth scanner)
Barcode scanning sends a lightweight POST request per scan. Even a 1 Mbps connection handles 200+ scans per minute without issues.
Large CSV imports
Bulk imports of more than 10,000 rows are processed asynchronously. The upload requires a stable connection for the initial file transfer but the processing continues on our servers even if you close the tab.
API access
All API calls go over HTTPS. There is no VPN requirement. For Enterprise customers with IP allowlisting requirements, StockFlow supports static egress IP addresses on request.
Data limits by plan
| Limit | Starter | Growth | Enterprise |
|---|---|---|---|
| Products (SKUs) | 500 | 10,000 | Unlimited |
| Warehouses | 1 | 10 | Unlimited |
| Users | 3 | 25 | Unlimited |
| API calls per month | 10,000 | 250,000 | Unlimited |
| File storage (images, docs) | 5 GB | 50 GB | Unlimited |
| CSV import rows per file | 1,000 | 25,000 | 500,000 |
| Report history | 90 days | 2 years | Unlimited |
Security requirements
TLS
StockFlow enforces TLS 1.2 minimum on all connections. TLS 1.0 and 1.1 are rejected. Modern browsers handle this automatically.
Firewall rules
If your organisation uses an outbound firewall, allow traffic to:
*.stockflow.io — HTTPS (443)
api.stockflow.io — HTTPS (443)
cdn.stockflow.io — HTTPS (443)Content Security Policy (CSP)
StockFlow delivers a strict CSP header. If you embed StockFlow inside an iframe (e.g. in a custom portal), add app.stockflow.io to your frame-src directive.
Accessibility
StockFlow meets WCAG 2.1 Level AA across all core workflows. If you use assistive technology such as a screen reader and encounter an issue, contact [email protected].
Data residency
By default, all data is stored in the United States (us-east-1). Enterprise customers can request data residency in:
- 🇪🇺 European Union (eu-west-1, Frankfurt)
- 🇬🇧 United Kingdom (eu-west-2, London)
- 🇦🇺 Australia (ap-southeast-2, Sydney)
- 🇸🇬 Singapore (ap-southeast-1)
Data residency changes require at least 5 business days and a signed addendum to your contract.