Security
Your firm's work stays your firm's.
How Arqiflow decides who sees what, what the agent may do, how the apps on your computer sign in, and what happens to your data. Only what is true of Arqiflow today.
Your firm's data
Your work is reached only through Arqiflow's server, which checks who is asking every time.
- Projects, tasks and everything else live in a database schema that only Arqiflow's server can read. Browsers never reach the database directly.
- Files are kept in a private store that only the server reaches. Each download is checked against who is asking.
- Every request carries the person's sign-in, which the server checks, and reaches only their own firm.
Signing in
Email and password, Google or Microsoft.
- Passwords are handled by our sign-in provider, Supabase Auth. Arqiflow never stores them.
- A sign-in is checked against the provider's signing keys on every request, and expires.
Who sees what
Arqiflow refuses only two things: what someone may not see, and a decision someone may not take.
- Owners, managers and discipline leads see every project. Members see the projects they are on.
- Guests see only the projects they are on, change nothing and see no money.
- What people cost is seen and set only by owners and managers. The record says a cost was set, never the amount.
- Project money is for owners and managers. A firm can let project leads see their project's totals.
The agent
Your agent has your access, no more.
- It sees the projects you see and may do what you may do. Your access is checked again at every step, and the agent stops if you leave the firm.
- Your chats with your agent, and what it remembers about you, are yours alone. An owner cannot read them.
- Every step it takes is recorded with the person it worked for.
- It works only through Arqiflow's own tools, with no other access to your computer or the web. What it reads for a task is used to do that task.
Connected apps and keys
Connecting an outside AI app takes your sign-in and your Allow.
- Apps connect through a standard sign-in (OAuth with PKCE). Nothing is connected until you press Allow, and the Allow page cannot be shown inside another site.
- Settings lists every connected app and key. Disconnect one at any time. Removing someone from the firm ends their connections.
- Keys are shown once and kept only as a fingerprint. Access tokens last an hour.
- The number of new apps and token requests from one address is limited.
The desktop app and Arqiflow for Revit
The apps on your computer sign in through your browser, like any connected app.
- The saved sign-in is encrypted for your Windows user on that computer.
- Your agent reaches your own Revit, and no one else's.
- Activity (the apps and websites in front of you, and for how long) is off unless your firm turns it on and you agree to a plain notice. Guests are never recorded. It is deleted with the person when they leave the firm.
Payments
Arqiflow never sees your card.
- Plans are paid through Creem, which sells Arqiflow to your firm and handles the card and the tax.
- What Creem tells Arqiflow about a payment is checked to have come from Creem.
A record of the work
You can always see what happened, and who did it.
- Each project keeps a record of who did what, the agent included.
- Docs and Knowledge pages keep every version. Files keep their versions, and a removed file can be brought back.
- When a plan ends, the firm becomes read-only: everyone can still sign in, see everything and download their files. Nothing is deleted.
A question about security?
Ask us anything your firm needs to know before it moves in.
Bring your next project into Arqiflow.
Run your own projects and people in it free for 14 days, with no card. The agent comes with a plan.