FAQ

Frequently asked questions

Common questions about SecureFlow — how it works, plans and pricing, data privacy, and how to get started answering vendor security questionnaires faster.

What is SecureFlow?

SecureFlow is a hosted AI platform for B2B SaaS teams that need to answer vendor security questionnaires quickly. You upload your company's documents (policies, architecture notes, past answers) into a knowledge vault, import a customer SIG-style or custom CSV/Excel questionnaire, and the AI drafts cited responses for every row — then you review, approve, and export a CSV. No coding, no API keys, no IT setup required.

How do I sign up? Do I need a credit card?

Go to the Register page and sign up with your email address and a password, or click Continue with Google for one-click sign-in using any Google account. No credit card is required on the Free tier.

Do I need my own OpenAI API key?

No. SecureFlow is a fully hosted platform — the AI is built in. You never configure or paste an API key anywhere. Just sign up and start generating answers.

How do plans, billing, and usage limits work?

SecureFlow has three plans. Free: $0/month, 25 AI-generated rows per month, no credit card needed. Starter: $19.99/month, 2,000 AI rows per month, team roles, cancel any time. Custom/Enterprise: unlimited rows, custom SLA — contact us. Each row processed by Generate drafts or Regenerate row counts as one AI credit. Usage resets on the first of each calendar month (UTC). Workspace admins can view usage and upgrade from the Billing page inside the app.

What happens if I hit my monthly limit?

The app shows an error and links you to the Billing page. You can wait for the next month's reset (usage resets on the 1st UTC), upgrade from Free to Starter, or contact us for a Custom plan. Already-generated drafts, edits, and exports are unaffected — only new AI generations are blocked.

Who can subscribe or change the payment method?

Only users with the ADMIN role on that workspace can start Stripe Checkout or open the Stripe Customer Portal to update cards or cancel. Editors and Viewers can use the product within their permissions but cannot change the subscription.

Is there a free plan?

Yes. The Free plan is $0/month with 25 AI-generated rows per month — no credit card required and no time limit. Upgrade to Starter ($19.99/month) when you need more volume, or contact us for a Custom plan.

Is there a tutorial for how SecureFlow works?

Yes. Open the Tutorial page (/tutorial) for a full step-by-step guide: create your account (email or Google), upload documents to the knowledge vault, import a questionnaire, generate AI drafts with citations, review and approve each row, and export CSV. No technical knowledge needed.

Will AI answers be accurate enough for customers?

Outputs are drafts, not final answers. SecureFlow is designed for human-in-the-loop review: every answer should be checked by whoever owns security, privacy, or legal at your company. Citations point back to your uploaded documents to speed verification — not to replace it.

What file types can I upload to the knowledge vault?

PDF, Word (.docx), plain text (.txt), Markdown (.md), and CSV. Each file is chunked, embedded, and indexed so the AI can retrieve the most relevant passages when drafting answers.

Which questionnaire formats are supported?

You can import CSV or Excel (.xlsx). During import you pick the column that holds the question text — common for SIG, CAIQ, and custom vendor risk templates. Header rows are detected and skipped automatically.

Is my data used to train foundation models?

No. SecureFlow does not train foundation models on your data. Document text and questions are sent to the AI provider (OpenAI) only for embedding and completion at request time. Review OpenAI's enterprise data policies for your compliance needs.

What is the difference between SecureFlow and other AI tools?

Most general-purpose AI tools (like ChatGPT) are not built for vendor security questionnaires. They lack a built-in questionnaire import workflow, they can hallucinate controls your company does not actually have, and they give you no way to trace which source document justified each answer. SecureFlow is purpose-built: you upload your own documents, it answers only from those documents, and every answer has a citation. You import questionnaires as CSV or Excel and export a finished file — the whole workflow is handled in one place.

Can I use this for SOC 2 or ISO certification?

SecureFlow helps draft questionnaire narratives; it is not a certification body and does not guarantee compliance. Always align answers with your actual controls, auditors, and counsel.

Where are your Privacy Policy and Terms?

Our Privacy Policy, Terms of Service, and Legal Disclaimer are published on this website (see the footer). They describe data handling, cookies, AI subprocessors, and limitations of liability. Have your counsel review them before you rely on SecureFlow for production customer submissions.