v3.2.1

Core Architecture

The platform is built on a modular microservices architecture designed for horizontal scaling, fault tolerance, and low-latency global delivery.

🗄️ Content Repository

Schema-flexible document store with JSONB indexing, version control, and branch-based content workflows.

⚡ API Gateway

Unified ingress layer handling authentication, rate limiting, request validation, and protocol routing.

🌍 Edge CDN

Multi-region edge caching with automatic purging, stale-while-revalidate, and geographic routing.

🔄 Workflow Engine

State-machine powered content pipelines with approval gates, scheduled publishing, and rollback capabilities.

🖼️ Media Processor

On-the-fly image/video optimization, format conversion, CDN distribution, and EXIF stripping.

👥 Admin Console

Role-based dashboard with real-time collaboration, audit trails, and configurable content modeling.

Request Data Flow

All content requests follow a standardized pipeline ensuring security, performance, and consistency.

Client App
API Gateway
Edge Cache
Content Store
Response

Technical Specifications

Parameter Specification
ProtocolsREST, GraphQL, gRPC (beta)
AuthenticationOAuth 2.0, API Keys, JWT, OIDC
Payload Limit10 MB (JSON), 50 MB (Media uploads)
Rate LimitingConfigurable per project (100-10,000 req/min)
Data FormatJSON:API compliant, GraphQL SDL, CSV/Excel import
CDN Regions42 global edge locations, auto-purge on publish
Uptime SLA99.99% Enterprise, 99.9% Pro
Webhook RetriesExponential backoff (5 attempts, max 24h)

SDKs & Integrations

Native client libraries and pre-built connectors for popular frameworks and services.

🟨 Node.js 🐍 Python 🐹 Go 🐘 PHP 💎 Ruby ⚛️ React ▲ Next.js 🌐 SvelteKit 📱 Flutter 🍎 iOS/Swift

Quick Start Example

Retrieve published content using the REST API with optional filtering and pagination.

JavaScript / cURL
# GET /api/v3/posts?status=published&limit=20 const res = await fetch('https://api.flowcms.io/v3/posts', { headers: { 'Authorization': `Bearer ${FLOW_API_KEY}`, 'Content-Type': 'application/json' }, method: 'GET' }); const data = await res.json(); console.log(data.data); // Array of content entries

Security & Compliance

Enterprise-grade security built into every layer of the platform.

SOC 2 Type II Certified
GDPR & CCPA Compliant
AES-256 Encryption (Rest/Transit)
Role-Based Access Control (RBAC)
Audit Logging & Export
IP Allowlisting & Geo-restrictions