Trust and security
Your code protected. Your people in control.
Here’s what FlashTeams keeps, who can reach it, and where your people make the call.
Agent querySoftware DNA
“Where is tax added to an invoice?”
- 01OrganizationFrom the signed-in session
- 02Software DNAYour organization’s own schema
- 03Products2 of 3 allowed
- 04ContentsStructure only
- 05RecordQuery logged
Answerbilling / invoice.ts / addTax()
01/ Your code
Structure, not contents.
- Software DNA stores your software’s structure, not your file contents.
- Reading source code is off by default. An administrator turns it on, and each FlashBrain session still asks before it reads a file.
- Databases are read for structure, never rows. SQL Server works with a login that can’t select data, and Supabase is read through a read-only endpoint.
Software DNAStructure only
billing/invoice.tsFile
addTax()callsrateFor()total()readsinvoices
File contents not stored
invoicesTable
idcustomer_idamounttax_rate
Rows never read
Source readingOff until an admin turns it on
Then FlashBrain asksRead billing/invoice.ts?DeclineApprove
02/ Access
Each organization on its own. Each product checked.
- Each organization’s software DNA lives in its own schema, and your organization always comes from your sign-in, never from the request.
- Agents, Flash Swarm and Product Center only reach the products a person is allowed to see. Anything else is removed from the answer.
- Every query against your software DNA is logged.
Which organization?Decided by sign-in
Requestorg: org-bIgnored
Sessionorg: your-orgUsed
your-orgorg-borg-c
One schema per organization
Products in the answer
BillingPaymentsHR portalRemoved
03/ Credentials
Secrets locked. Keys kept apart.
- Repository tokens, IBM i passwords and database passwords we hold for you are encrypted, and the key is kept outside the database.
- Our own services sign in to their cloud and database with keyless workload identity, not stored keys.
- Forms sent through this website are stored separately from the product database.
Credentials we hold for youEncrypted
DatabaseEncrypted
Repository token••••••
IBM i password••••••
Database password••••••
Encryption keyKept outside the database
Our servicesFlashTeamscloud and databaseWorkload identity, no stored keys
Website formsStored apart from the product database
04/ AI agents
Agents work inside the limits you set.
- Flash Swarm runs with spending limits, defined boundaries and points where a person approves.
- Factory Floor automations have permissions, spending limits and your choice of which agents can act.
- Engineers review changes before they’re accepted.
Flash Swarm: Add team billingLimits set by your team
Spending limitUnder the limit
Boundarybilling/api/
- Agents workInside the limits
- ApprovalA person decides
- ReviewAn engineer checks
- AcceptedAfter review
Factory Floor: nightly dependency check
BuilderTesterReleasePermissions and spending limit set
Where we stand
- Certifications
- [Compliance status to be confirmed]
- Security contact
- [Security contact to be confirmed]
Bring us your security questions.
We’ll walk your team through how FlashTeams handles your code, data and access.