Security & data
The questions you should ask any AI vendor — answered plainly.
No badges, no absolutes — just how the system actually works. Each answer has a plain-English version and the technical detail behind it.
Isolation
Can another customer see our data?
No. Each customer's workspace is a separate tenant, and separation is enforced inside the database itself — not just by application code.
Technical detail · Every tenant-scoped table is protected by Postgres row-level security. Every query runs inside a tenant context, and a cross-tenant isolation test suite blocks releases in CI if any table is reachable across tenants.
AI providers
Where do our documents go when the AI answers?
Model requests go through a single gateway to vetted cloud providers, with zero-data-retention hosting in Western jurisdictions as the default. Your documents are not used to train anyone's models.
Technical detail · All model access runs through one LiteLLM gateway — application code never talks to a provider directly, so the provider list stays small, auditable and swappable. Provider terms are documented per deployment; commercial guarantees always match the signed terms, not this page.
Accuracy
Will it invent facts?
Grounded answers cite the document and page they came from, so you can check any claim in one click. When the vault has no answer, Flowgrid says so rather than improvising.
Technical detail · Retrieval runs over your own vault; answers carry source excerpts, and drafting workflows are transcribe → verify → draft → paste, with a human review step before anything leaves the workspace. Flowgrid never submits documents to a funder or client on your behalf.
Cost & oversight
What is the AI doing, and what does it cost?
Every AI call is recorded with its usage and cost, visible in the workspace. There is no unmetered background AI activity.
Technical detail · Cost telemetry is captured per call at the gateway. Roles and per-module entitlements control who can use which capability, and workspaces are provisioned by the platform operator — there is no open signup.
Your data, your exit
What if we leave?
Your documents and records are yours. Exports are standard formats — PDF, PowerPoint, CSV — and we will agree return and deletion of your data as part of your terms.
Technical detail · Retention and deletion commitments are set out in your agreement. Ask us anything specific before you sign — we would rather answer it now.
Anything else?
Ask us the awkward question
Due diligence questions are welcome — data flow diagrams, subprocessor lists, retention specifics. If we can’t substantiate an answer, we’ll tell you that too.