Your data, under your control. And an AI that proposes, not decides
Here we explain plainly where your data lives, who can see it and exactly what the AI does with your invoices.
Security and data
What we do today, with a link to the legal text where it is detailed.
Servers in the EU
Most of your data stays in the European Union. Only AI reading, which is optional, and Stripe payments can involve data leaving it.
Read the legal textYou decide about your data
For what you store for your activity you are the controller and we act as processor under the GDPR.
Read the legal textData separated by account
Each account sees only its own data. One account's data cannot be reached from another, and you can export or delete it whenever you like.
Roles and permissions
Owner, admin, collaborator and read-only. Permission is checked on every request: a role change or removal takes effect immediately.
Passwords and cards
Passwords are stored with irreversible encryption and we do not store your card number: Stripe handles payments.
Read the legal textSub-processors in plain view
We publish which providers process data for us, for what and in which country.
Read the legal text
The legal texts are drafts awaiting review by a lawyer and may change before launch.
How the AI works and what a person reviews
Invoice reading combines our own reader, checking rules and, only if enabled, an AI. A person always decides.
- 1
It reads on our server
Our own reader extracts supplier, tax ID, dates and amounts from the PDF or photo.
- 2
Rules check
Amounts that add up, valid tax ID, consistent dates and duplicates. Whatever fails is flagged.
- 3
The AI helps, only if enabled
If the invoice is not resolved and whoever holds the data enabled “Allow AI”, a second pass with an AI provider proposes the data. It is optional and decided by the company or firm.
- 4
A person decides
The AI proposes and never approves on its own. Someone on your team or at your firm approves, and you confirm the figures that matter.
What a person reviews
- Whatever the rules flag as doubtful
- The category suggested for each expense
- The figures that matter, before approving
What the AI does not do
- It does not approve or book on its own
- It does not file taxes with the tax agency (AEAT): forms are drafts you review and file
- It does not mark invoices as paid by itself
- It does not promise accuracy: it can be wrong, which is why there are rules and review
The privacy policy details what is sent to the AI provider and when. Privacy
Frequently asked questions
Where is my data stored and what about GDPR?
On servers in the EU, separated by account. We process data under GDPR and you will find the legal notice, privacy policy and list of sub-processors in the site footer. If you cancel, your data is kept.
How does the AI work with my invoices?
The reader extracts supplier, tax ID, dates and amounts, and rules check that they add up. The AI proposes and never approves on its own: doubtful items are flagged for you to review and you confirm the figures that matter.
Does the AI book invoices on its own?
No. The AI proposes, rules check amounts, tax IDs and dates, and duplicates are flagged. You approve; you always confirm the figures that matter.
Do the invoices comply with Verifactu?
They are designed for the Verifactu format: chained hash and QR on every invoice. We do not yet send the records to the tax agency (AEAT) and FlexiFlow is not a certified system: we explain this clearly in each module.
How do I cancel?
From the plan page in your account, whenever you want and with no lock-in. Your data is kept and you can subscribe again and pick up where you left off.
Another question? Talk to us
Want to check it with your own data?
Create a free account, no card, and see the review on your own invoices.