Frequently asked questions
Straight answers about FlowBase — what's live, what isn't, and how we handle your data.
Is this ready for production?
The core platform is live: authentication, organizations, projects, API keys, and all the trust/risk engines on the homepage (Documents/OCR, Matching, Identity, Geo, Risk, Compliance, Biometric, Contact Intelligence) are real, callable endpoints today — not a roadmap. Some pieces are still explicitly labeled: Identity/Compliance registry checks and Contact Intelligence's bureau lookup use clearly-marked mock providers pending licensed data access, and payments use a mock provider pending a live Razorpay integration.
Do I need a credit card to sign up?
No. Create an account with just an email — you get a sandbox project instantly.
How does sign-in work? Is there a password?
No password. Every sign-in and signup uses a 6-digit code emailed to you, valid for 10 minutes, single-use, with a short cooldown between requests and a limit on incorrect attempts.
Will you claim a document is "verified authentic"?
No. Document OCR returns a confidence score and per-field checksum validation for PAN/Aadhaar/GST, and a separate tamper-risk score built from real EXIF/PDF metadata analysis and a JPEG compression-inconsistency check — none of that is an authenticity verdict. It's an in-house heuristic signal, not a commercial forensic tool, and we say so on every result.
Where does compliance/PEP/sanctions data come from?
We do not scrape or maintain our own watchlists. The compliance screening architecture is built to integrate licensed data providers with full source provenance on every match — it ships with a mock provider until a real one is connected.
Is my organization’s data isolated from other customers?
Yes. Every request is scoped by your authenticated organization ID, taken from your session — never from a client-supplied parameter — so one tenant can't read another's data.
How is sensitive data handled?
Sensitive fields (PAN, phone, email) are masked by default in the dashboard. Data retention is configurable and aligned with India's DPDP framework rather than assumed indefinite. See our Privacy Policy for details.
How is pricing structured?
The billing infrastructure is live — plans, subscriptions, usage tracking, and invoices are real — but the actual price points shown today are explicit placeholders, not a final pricing decision, and payments run through a mock provider until a live Razorpay integration is connected. Contact us if you want to talk about early access.