Trust
Security and privacy
The safest data is data we never receive. FlowtheraSI is designed so your prompts, files and model output stay on machines you control.
How the products protect you
Private network by default
The server listens only on the machine itself until you choose to expose it. Remote access requires encryption and a strong API key.
Agents need your approval
Tools that run commands or change files work inside limits you set, and destructive actions wait for your approval.
Secrets stay out of prompts
Files such as environment files and keys are never placed in a prompt unless you allow it.
Logs without your content
Audit events record who did what and when, without the text of prompts or answers by default.
Verified models
Model files are checked against their published fingerprints before they are loaded.
Signed installers and updates
Installers and updates are signed, and a failed update rolls back.
What our cloud stores
- Your account: email, name, organisation
- Licences, devices and billing records
- Server health, only if you switch reporting on
- Messages you send us through this website
What it never stores
- Your prompts or questions
- Your files, code or documents
- Model output
- Your external AI provider keys
Reporting a security problem
If you find a vulnerability, email [email protected] with the details and steps to reproduce. Please give us reasonable time to fix it before sharing it publicly. We will acknowledge your report and keep you informed.
Certifications
We do not currently hold SOC 2, HIPAA or similar certifications. We will say so here when that changes, and not before.