# Flowie — Complete Product Guide > The world's first agentic Finance & Procurement orchestration platform. > Last updated: 2026-05-03 Flowie is a B2B SaaS platform that connects ERPs, suppliers, and clients into one intelligent network. Large Action Models (LAMs) reason on a real-time typed knowledge graph (Astral) and execute typed actions across finance and procurement workflows — from purchase requests to payments, invoicing to compliance. Flowie replaces brittle middleware (Pagero, Tradeshift) and bolt-on automation (Coupa, SAP Ariba, Esker) with a single agentic operating brain. Sit on top of any ERP. Plug into every partner. Stay ahead of every mandate. Pay per document, not per spend percentage. ## Company - **Founded:** 2022, Paris, France - **Category:** Agentic Finance & Procurement Orchestration - **Network size:** 600M+ companies addressable - **Customers:** Eiffage, Stellantis Finance & Services, Accor, Séché, Groupe RG, and more - **Certifications:** ISO 27001:2022, GDPR-native, CyberVadis-assessed, France PA-certified (DGFIP, December 2025), Peppol-certified - **Hosting:** EU only — Google Cloud Frankfurt + Belgium - **Website:** https://get-flowie.com (EN) · https://get-flowie.com/fr (FR) ## The Astral operating brain Astral is Flowie's central knowledge graph — a typed, real-time, versioned data layer that hydrates from every ERP, partner, document, and transaction in your stack. It's the operating brain the agents reason on AND the operating brain the LAMs act through. **Three layers:** 1. **Knowledge** — typed entities (Supplier, Invoice, Contract, Payment), typed relationships, real-time entity resolution, versioned state, self-evolving schema. 2. **Reasoning** — LLMs grounded in the graph (no free-text guessing), MCP-compatible (open agent protocol), full provenance trail. 3. **Action** — Large Action Models with typed grammars (no free-form output), dry-run preview, governance + reversibility, full audit trail. Full deep-dive: https://get-flowie.com/platform/astral ## Products ### Procure-to-Pay **Intake-to-Pay** — A request lands. The agent finds the right supplier and contract. A PO writes itself. The invoice matches in seconds. Approvals route on their own. Payment executes on time. Your team only touches the exceptions worth their time. Read more: https://get-flowie.com/platform/intake-to-pay **Sourcing** — Publish RFQs to your supplier network in minutes. AI evaluates responses — cost, quality, risk, delivery. Select winners. They're already on Flowie. Transactions start immediately. Read more: https://get-flowie.com/platform/sourcing **AP Automation** — Invoices arrive. AI reads every line. Matches POs instantly. Approvals flow to the right person. Payments execute automatically. Exceptions surface once a week. Read more: https://get-flowie.com/platform/ap-automation **Contract Lifecycle** — Contracts upload automatically from email. AI extracts clauses, flags unusual terms, suggests legal improvements. Route to legal for 30-second review instead of weeks. Read more: https://get-flowie.com/platform/contracts **Spend Management** — AI categorizes every purchase automatically. Spots duplicate spending instantly. Flags tail spend opportunities. Uncovers 2-5% savings without effort. Read more: https://get-flowie.com/platform/spend-management **Expenses** — Employee submits expense from phone. AI validates. Manager approves instantly. Payment hits their account next day. One frictionless workflow. Read more: https://get-flowie.com/platform/expenses ### Order-to-Cash **Order-to-Cash** — Customer orders arrive. Invoice generates instantly. Payment posts automatically. Collections start immediately if overdue. DSO drops 20-30%. Read more: https://get-flowie.com/platform/order-to-cash **Payments** — Pay suppliers in their currency. Clients in yours. Batch payments execute in seconds. Fraud blocks the sketchy ones. Real-time settlement tracking. Read more: https://get-flowie.com/platform/payments **Finance & Treasury** — Real-time cash across all entities and ERPs. Automated treasury operations. Expenses approve themselves. Month-end close in 3 days instead of 20. Read more: https://get-flowie.com/platform/finance ### Network **Partner Management** — Send invite to suppliers. They land on Flowie instantly. Documents upload automatically. Identity verified in real-time. One platform, all relationships. Read more: https://get-flowie.com/platform/partner-management **Partner Risk** — KYB verified automatically. KYC compliance checked weekly. Sanctions lists updated daily. Risk scores change in real-time. One dashboard shows your entire portfolio health. Read more: https://get-flowie.com/platform/partner-risk **Multi-Entity Management** — Subsidiaries, business units, geographies — all in one. Consolidated visibility in real-time. Entity-specific rules. Period closes coordinated. Intercompany transactions automated. Full audit trail. Read more: https://get-flowie.com/platform/multi-entity ### Agentic AI **Astral (Knowledge Graph)** — A unified knowledge graph that maps every supplier, contract, invoice, payment, and entity across your stack into one canonical operating brain. AI agents reason on it. Large Action Models execute through it. The operating brain that makes Flowie a finance OS, not a finance assistant. Read more: https://get-flowie.com/platform/astral **AI Agents** — Beyond chatbots. Beyond RPA. Beyond copilots. Goal-driven autonomous agents — pre-trained on millions of finance documents, grounded in Astral's knowledge graph, authorized to take real-world action with policy guardrails. Read more: https://get-flowie.com/platform/ai-agents **Model Context Protocol** — Your agents see Slack messages, PDFs, email, ERP data — everything. They read, reason, and act on real information. Model Context Protocol = open, extensible. Read more: https://get-flowie.com/platform/mcp **Agent Skills** — Marketplace of reusable skills. Approval logic. Risk detection. Spend rules. Combine them. Deploy new behaviors without code changes or redeploys. Read more: https://get-flowie.com/platform/skills ### The Platform **Integrations** — 90+ pre-built connectors across 10 categories. Sit on top of any ERP — SAP, Sage, Odoo, Dynamics, NetSuite, Cegid, Workday, Pennylane. Punch out to any catalog — Amazon Business, Lyreco, Manutan, Grainger, Würth, Dell Premier. REST API for the rest. Custom integrations ship in 2-4 weeks. Read more: https://get-flowie.com/platform/integrations **Orchestration Builder** — Visual designer — no code required. Conditional logic, multi-step approvals, agent orchestration, notifications. Test in sandbox. Deploy instantly. Read more: https://get-flowie.com/platform/orchestration-builder **Analytics & Reporting** — Dashboards for cycle time, DSO, approval rates, spend by category, compliance status. 50+ pre-built KPIs. Build custom ones in minutes. Drill down into any metric. Export to Tableau or Power BI. Read more: https://get-flowie.com/platform/analytics ## Pricing Two tracks: RUN the platform on any tier — free or paid. Add BUILD services if you want our team in the room. Optional, à la carte. **RUN — three tiers:** - **Free** — €0 forever. 25 documents/month, basic processing, 15-day full-feature trial. - **Growth** — Pay-per-document. Configure 4 document packages (Invoices, Orders, Contracts, Form submissions), orchestration level (Basic / Workflows / Workflows + AI Agents), trade partners. Bidirectional rule: documents from another Flowie user are FREE. - **Enterprise** — Custom. Unlimited document volume, multi-entity, dedicated CSM (€15K/yr included). **BUILD — optional implementation services:** - 01 Conception & Design (Week 1-2) - 02 Parametering & Integration (Week 2 - Month 1) - 03 Onboarding & Training (Month 1-2) - 04 Hypercare (Month 2+) Calculator and full breakdown: https://get-flowie.com/pricing ROI calculator: https://roi.get-flowie.com ## E-Invoicing & Compliance Flowie is registered with the French DGFIP as a **Plateforme Agréée (PA, ex-PDP)** since December 2025, certified for Factur-X, UBL, and CII formats. Flowie is a certified Peppol Access Point. The platform handles ViDA's three pillars (DRR mandatory July 1, 2030 / Platform Economy / Single VAT Registration) and operates across 60+ countries with live or upcoming mandates. **Key country coverage:** **France** — France's e-invoicing reform is the most ambitious B2B invoicing transition in EU history. From September 1, 2026, every French VAT-liable company — without exception — must be able to RECEIVE structured electronic invoices through certified channels. From the same date, large ... Read more: https://get-flowie.com/e-invoicing/france **Italy** — Italy operates the most mature e-invoicing mandate in the European Union. Since January 1, 2019, all VAT-registered businesses must issue and receive structured invoices in the FatturaPA format through the Sistema di Interscambio (SDI), the centralized clearance platform run b... Read more: https://get-flowie.com/e-invoicing/italy **Germany** — Germany's B2B e-invoicing mandate is phased over four years under the Wachstumschancengesetz. All German VAT-registered businesses must be capable of receiving structured e-invoices since January 1, 2025. Issuance becomes mandatory January 1, 2027 for companies with prior-year... Read more: https://get-flowie.com/e-invoicing/germany **Spain** — Spain runs two parallel e-invoicing tracks. Verifactu, the certified billing software regime under Royal Decree 1007/2023, becomes mandatory January 1, 2027 for corporate income tax payers. The Crea y Crece B2B e-invoicing mandate (Law 18/2022) is expected to apply to large co... Read more: https://get-flowie.com/e-invoicing/spain **Belgium** — Belgium's mandatory B2B e-invoicing regime took effect January 1, 2026, requiring all Belgian VAT-registered companies to issue and receive structured electronic invoices over the Peppol network. Peppol BIS 3.0 is the default transport and format. A three-month tolerance perio... Read more: https://get-flowie.com/e-invoicing/belgium **Poland** — Poland's mandatory B2B e-invoicing system, the Krajowy System e-Faktur (KSeF), launched its first phase on February 1, 2026 for approximately 4,200 large taxpayers (turnover above 200M PLN in 2024). All other VAT-registered businesses must onboard by April 1, 2026, and micro t... Read more: https://get-flowie.com/e-invoicing/poland **Saudi Arabia** — Saudi Arabia's Zakat, Tax and Customs Authority (ZATCA) operates the Fatoorah e-invoicing system in two phases. Phase 1 (Generation) has been mandatory for all VAT-registered businesses since December 4, 2021. Phase 2 (Integration and Clearance) rolls out in waves: Wave 23 cov... Read more: https://get-flowie.com/e-invoicing/saudi-arabia **United Kingdom** — The United Kingdom announced at Budget 2025 that VAT invoices must be issued as e-invoices from April 1, 2029. The HMRC and Department for Business and Trade ran a public consultation from February to May 2025, and stakeholder workshops have continued through 2026. A full impl... Read more: https://get-flowie.com/e-invoicing/united-kingdom **India** — India's GST e-invoicing regime has been live since October 1, 2020 and is administered through the Invoice Registration Portal (IRP) network operated under the Goods and Services Tax Network. The turnover threshold has been progressively reduced to 5 crore INR (50,000,000 INR)... Read more: https://get-flowie.com/e-invoicing/india **Brazil** — Brazil operates the most complex e-invoicing regime in the world, segmented across four document types managed by SEFAZ (state tax authority) and federal entities: NF-e for goods (live since 2008), NFS-e for services, CT-e for freight, and NFCom for telecommunications. The nat... Read more: https://get-flowie.com/e-invoicing/brazil **Australia** — Australia operates a voluntary Peppol-based e-invoicing framework jointly governed by the Australian Taxation Office (ATO) and the Digital Transformation Agency (DTA). Peppol-based e-invoicing has been mandatory for all federal Commonwealth government agencies since July 1, 20... Read more: https://get-flowie.com/e-invoicing/australia **Mexico** — Mexico operates the longest-running mandatory e-invoicing regime in the world, managed by the Servicio de Administración Tributaria (SAT). The Comprobante Fiscal Digital por Internet (CFDI) has been mandatory for all VAT-registered businesses since April 1, 2014, with version ... Read more: https://get-flowie.com/e-invoicing/mexico **Japan** — Japan operates the Qualified Invoice System (適格請求書等保存方式, QIS) administered by the National Tax Agency (NTA), mandatory since October 1, 2023 for any business that wants to claim consumption tax (JCT) input credit. Only Qualified Invoice Issuers (registered with the NTA) can is... Read more: https://get-flowie.com/e-invoicing/japan **United Arab Emirates** — The United Arab Emirates is rolling out a Decentralised Continuous Transaction Control and Exchange (DCTCE) system based on the Peppol 5-corner model, run jointly by the Ministry of Finance and the Federal Tax Authority (FTA). Mandatory e-invoicing begins January 1, 2027 for l... Read more: https://get-flowie.com/e-invoicing/united-arab-emirates **United States** — The United States has no federal e-invoicing mandate. The Digital Business Networks Alliance (DBNAlliance) operates the U.S. Open Exchange Network, a voluntary Peppol-aligned exchange framework launched as the North American counterpart to the European Peppol network, with par... Read more: https://get-flowie.com/e-invoicing/united-states Full mandate tracker (95+ countries): https://get-flowie.com/e-invoicing ## Solutions By persona: - **For Finance / CFO** — Real-time cash visibility across ERPs, entities, borders. E-invoicing compliance guaranteed (PDP-certified). Fraud detection built-in. Month-end close in 3 days. M&A integration in weeks. Total control. Total peace of mind. (https://get-flowie.com/solutions/cfo) - **For Procurement / CPO** — Unified sourcing from RFQ to PO. Smart supplier selection (cost, quality, risk). Intake-to-pay workflows without delays. Real-time spend visibility. Approved vendors on speed dial. Procurement at scale. (https://get-flowie.com/solutions/procurement) - **For AI & Data Teams** — 8 pre-built agents for finance and procurement. Zero ML training data prep. Zero model fine-tuning. Deploy to production in days. Enterprise governance (audit logs, RBAC, data lineage) included. Agents that work out of the box. (https://get-flowie.com/solutions/ai-data) - **For CTO/CIO** — 30+ ERP integrations. Sits on top of SAP, Sage, Odoo, everything. Zero rip-and-replace risk. Deploy in weeks. Consolidates 80% of point solutions. Standards-based (MCP). ISO 27001:2022 certified. Zero custom code required. (https://get-flowie.com/solutions/it) By company size: - **Enterprise** — Multi-entity, multi-geography, multi-ERP — all in one platform. Dedicated CSM. Custom integrations. Full audit trails. RBAC, CyberVadis, GDPR. 24/7 support. Scale to 10,000+ transactions/day. Predictable growth. (https://get-flowie.com/solutions/enterprise) - **Mid-Market** — Deploy in 4-8 weeks (vs. 18 months for legacy). Pre-built templates. 50% less consulting. Grow from 100 to 1,000 transactions/day smoothly. Self-serve + expert support. No bloat. Pure value. (https://get-flowie.com/solutions/mid-market) - **SMB** — Free tier forever (unlimited invoices, 1 supplier). Start with invoice processing. Add suppliers as you scale. Zero setup fees. Zero annual contracts. Pay as you grow. AI-native from day one. No bloat. (https://get-flowie.com/solutions/smb) By partner type: - **Accounting Firms** — White-label finance ops for your client portfolio. Onboard SMBs in hours. Multi-client dashboards. AI co-pilot for staff accountants. Compliance from day one. Grow your book of business without growing your headcount. (https://get-flowie.com/solutions/partners/accounting-firms) - **Consulting Firms** — Accelerate Finance & Procurement transformation projects with Flowie's orchestration platform. Pre-built playbooks. Multi-client project hub. Co-marketing programs. Drive client outcomes faster — and earn more on ever... (https://get-flowie.com/solutions/partners/consulting-firms) - **Private Equity** — Roll out unified Finance & Procurement across 5, 50, or 500 portfolio companies. Standardize KPIs. Spot anomalies before exits. Compress holding-period transformation. Drive multiple expansion through operational exce... (https://get-flowie.com/solutions/partners/private-equity) - **Venture Capital** — Recommend Flowie to your portfolio companies. Series A through pre-IPO. AI-native, multi-ERP, scales from 10 to 10,000 transactions/day without re-platforming. Free tier for early-stage. White-glove for growth-stage. (https://get-flowie.com/solutions/partners/venture-capital) - **Technology Partners** — API-first, MCP-native, open standards. Build integrations to ERPs, banks, BI tools. Develop agents in our marketplace. Distribute to 20,000+ companies. Standards-based, no lock-in. Tier-based revenue economics. (https://get-flowie.com/solutions/partners/technology-partners) ## Integrations 90+ pre-built connectors across 10 categories: - **ERPs** — SAP S/4HANA, SAP Business One, SAP ByDesign, Sage (X3/100/1000/50), Cegid, Cegid XRP Flex, Microsoft Dynamics 365 + AX, Odoo, NetSuite, QuickBooks, Xero, Pennylane, Ivalua, Coupa, Infor, IFS, and more - **Banks & Treasury** — BNP Paribas, Société Générale, Crédit Agricole, HSBC, ING, Deutsche Bank, Barclays, Santander, JP Morgan, Nordea - **CRM & Sales** — Salesforce, HubSpot, Microsoft Dynamics CRM, Pipedrive - **HR & People** — Workday, BambooHR, Personio, Lucca - **Productivity** — Slack, Microsoft Teams, Gmail, Outlook, Google Drive, OneDrive, Notion - **Identity & SSO** — Okta, Azure AD, OneLogin, Google Workspace - **Data & Analytics** — Snowflake, BigQuery, Power BI, Tableau, Looker - **Legal & Contracts** — DocuSign, Adobe Sign, Conga, Ironclad - **Risk & Compliance** — EcoVadis, D&B, Creditsafe, Sanctions.io, Sovos, Pagero - **Punchout & Catalogs** — Amazon Business, Lyreco, Unite/Mercateo, Manutan, Bruneau, Raja, Office Depot, Staples, W.W. Grainger, Fastenal, RS Components, CDW, Insight Enterprises, Computacenter, Würth, Hilti, Bunzl, Henry Schein, Fisher Scientific, Avantor/VWR, MSC Industrial, Mouser Electronics, Digi-Key, Dell Premier, HP Business **Standards we speak:** - APIs & events: REST, GraphQL, SOAP, Webhooks, SSE, gRPC, OAuth 2.0, OpenAPI 3.0 - Files & EDI: SFTP, FTPS, AS2, AS4, EDI X12, EDIFACT, Tradacoms, VDA, CSV, XML - Procurement catalogs: cXML PunchOut, OCI 5.0/4.0/Classic, BMEcat, CIF, xCBL, Hosted catalog - E-invoicing networks: Peppol BIS 3.0, ChorusPro, ViDA-ready, UBL 2.1, CII/Factur-X, FatturaPA, SAF-T, JPK Full catalog: https://get-flowie.com/platform/integrations ## Compare with alternatives **Flowie vs Coupa** — Coupa is a mature procurement-led BSM suite with deep Strategic Sourcing capabilities, a long Fortune-100 install base, and a broad SI partner ecosystem. Flowie is the modern alternative built for 2026 — agentic Finance + Procurement orchestration, multi-ERP from day one, AI agents across the whole F&P lifecycle, configuration-first deployment, transparent per-document pricing. The matrix below lays out where each platform leads — including where Coupa still wins. Read more: https://get-flowie.com/compare/coupa **Flowie vs SAP Ariba** — SAP Ariba pioneered enterprise procurement — deep, mature, with decades of category management depth and tight integration into the SAP ecosystem. Flowie is the multi-ERP agentic alternative built for 2026: 30+ ERPs natively, AI agents across the whole F&P lifecycle, configuration-first deployment, native French PDP compliance. The matrix below shows where each platform leads — including where Ariba still wins. Read more: https://get-flowie.com/compare/sap-ariba **Flowie vs Esker** — Esker is a 40-year-old French S2P + O2C automation veteran — best-in-class OCR, mature AR / cash collection workflows, and a deep French enterprise install base. Flowie is the agentic Finance + Procurement orchestration platform built for 2026: AI-native architecture, autonomous agents across the F&P lifecycle, multi-ERP without harmonisation, and a B2B network that grows itself. The matrix below shows where each platform leads — including where Esker still wins. Read more: https://get-flowie.com/compare/esker **Flowie vs Pagero** — Pagero is the global e-invoicing & tax compliance specialist — 130+ country footprint, deep regulatory certification, established transaction network. Flowie is the broader agentic Finance + Procurement orchestration platform: full F&P lifecycle (intake, approvals, AP, AR, treasury, sourcing) with AI agents and EU-first e-invoicing native. Different scopes, different fit depending on your stack — the matrix below shows where each platform leads. Read more: https://get-flowie.com/compare/pagero **Flowie vs Zip** — Zip is the procurement orchestration leader — Gartner Visionary 2026, modern AI-first, polished intake-to-procure. Flowie is the broader agentic Finance + Procurement orchestration platform: same modern AI-native architecture, plus AP, AR, Treasury, Expenses, native French PDP, and 30+ ERP integrations beyond procurement. Different scope, different geographic strength — the matrix below shows where each platform leads. Read more: https://get-flowie.com/compare/zip All comparisons: https://get-flowie.com/compare ## About Flowie Finance was supposed to be solved by now. Instead, we built ERPs that don't talk to each other, then added connectors, dashboards, RPA, and now "AI assistants" that watch but don't act. Flowie's thesis: the back office is software that should run itself. The way to do that is not to replace ERPs but to add an agentic operating brain ON TOP that connects, normalizes, reasons, and acts. Six beliefs that shape how we build: 1. The back office is software, not service. 2. Don't replace the ERP — make it disappear behind the workflow. 3. AI is operating brain, not feature. 4. Honesty is moat. 5. Open beats closed (MCP, Peppol, EN 16931). 6. Europe-first. Full story: https://get-flowie.com/company/about ## Trust & Security The Flowie Trust Hub (live as of Phase 3c) is the canonical surface for security, privacy, and compliance documentation. Three pages anchor it: ### Trust Center — https://get-flowie.com/trust GDPR-compliant. ISO 27001:2022 certified. EU-hosted on S3NS sovereign cloud (a Google + Thales partnership operating under French law and meeting ANSSI SecNumCloud requirements) — primary Paris, disaster-recovery Belgium. AI providers process descriptive text only (line-item descriptions, supplier names, document titles) — never financial amounts, IBANs, or account numbers. All three AI providers (OpenAI, Mistral AI, Anthropic) are contractually bound to zero retraining on customer data. DPA template (May 2025 revision) available in EN + FR; no customer goes live without a signed DPA. GDPR Article 33 breach notification within 72 hours. ### Sub-Processors — https://get-flowie.com/trust/subprocessors Nine named third parties. All under signed DPAs. SCCs in force for every non-EU transfer. | # | Sub-processor | Category | Primary location | DR location | DPA | SCCs | |---|--------------|----------|------------------|-------------|-----|------| | 1 | GCP via S3NS | Infrastructure | France (Paris) | Belgium | Signed | N/A — EU-hosted | | 2 | Auth0 (Okta) | Authentication | Belgium | — | Signed | N/A — EU-hosted | | 3 | SendGrid (Twilio) | Email | United States | — | Signed | Yes (under SCCs) | | 4 | Sentry (Functional Software) | Monitoring | United States | — | Signed | Yes (under SCCs) | | 5 | Intercom | Support | United States | — | Signed | Yes (under SCCs) | | 6 | Fivetran | ETL | United States | — | Signed | Yes (under SCCs) | | 7 | OpenAI | AI | United States | — | Signed | Yes (under SCCs) | | 8 | Mistral AI | AI | France | — | Signed | N/A — EU-hosted | | 9 | Anthropic | AI | United States | — | Signed | Yes (under SCCs) | Material changes (additions, replacements, scope expansions) communicated to data controllers at least 30 days in advance. Last reviewed per processor: 2026-05-05. ### Security — https://get-flowie.com/security Independent third-party validation: - **ISO/IEC 27001:2022** — certificate #122245, issued by Prescient Security; scope covers Flowie SaaS platform and supporting infrastructure. Annual surveillance audits. - **Cybervadis Mature** — 878/1000 (industry benchmark 654; assessed 2024-10-04). - **French Plateforme Agréée (PA)** — certified December 2025 under XP Z12-014 for the French e-invoicing mandate. - **Peppol BIS Billing 3.0** — pan-European e-invoicing interoperability. ISMS inventory: - **14 BSI-style policies** — HR security, physical security, operations security, access control, incident response, business continuity, secure development, third-party management, cryptography, GDPR compliance, information security, asset management, risk management, data management. - **13 numbered ISMS documents** — 00 through 12, including the Statement of Applicability. - Full document set available under NDA for qualified enterprise evaluations. Cryptographic standards (NIST-aligned): - **At rest**: AES-256. - **In transit**: TLS 1.2 minimum, TLS 1.3 preferred. - **Asymmetric**: RSA 2048-bit minimum, ECC 256-bit minimum. Operational controls: - Annual independent penetration test against production. - Continuous automated scanning via Detectify. - MFA enforced on all production access. - JML (Joiner-Mover-Leaver) procedure tied to HR contract events for access provisioning + revocation. - Severity 1 incidents trigger immediate customer notification and 24/7 war-room response. - For personal-data incidents, GDPR Article 33: 72-hour authority notification. Audit pack available under NDA: Stage 1 + Stage 2 audit reports, finding sheets, internal audit report (2023), Detectify scan report, Cybervadis executive report (878/1000), pentest summary, GDPR DPA, ISMS policy excerpts. ### SLA — https://get-flowie.com/sla Two-tier service-level commitment for the Flowie SaaS platform. Both tiers contractually binding; nothing aspirational. **Uptime targets:** - Standard plan — 99.9% uptime measured 24/7/365 (no business-hours distinction). - Enterprise plan — 99.95% during business hours (Mon-Fri 09:00-18:00 CET, excluding French public holidays under Art. L.3133-1 of the French Labour Code, excluding scheduled maintenance windows) AND 99.9% outside business hours. Availability formula: `((Total minutes in month - Downtime minutes) / Total minutes in month) × 100`. Downtime = the core platform unavailable or returning errors for >50% of requests over a rolling 5-minute window. Partial degradation (slow processing, non-core features down) is NOT downtime. Scheduled maintenance windows announced 7+ days in advance and within the 4h/quarter cap are excluded from downtime calculations. **Scheduled maintenance:** ≤4 hours cumulative per calendar quarter. 7 calendar days advance notice via email + status page. Out-of-business-hours scheduling preferred wherever operationally possible. Emergency maintenance (active security/data-integrity work) does NOT count against the cap; notification within 30 minutes, post-incident summary within 5 business days. **Service credit schedule (% of monthly recurring fee):** | Availability in affected month | Standard credit | Enterprise (BH) credit | |---|---|---| | 99.9% to <99.95% | Not applicable (at threshold) | 5% | | 99.5% to <99.9% | 5% | 10% | | 99.0% to <99.5% | 10% | 25% | | 95.0% to <99.0% | 25% | 50% | | Below 95.0% | 50% | 50% | Aggregate monthly cap: 30% of monthly fees in any single calendar month, applied per affected service. Unused credit does not roll over. **Sole remedy + carve-outs:** Service credits are the customer's sole and exclusive contractual remedy for SLA breach, with explicit carve-outs for: death or personal injury caused by Flowie negligence; fraud or fraudulent misrepresentation; regulatory non-compliance damages where Flowie's PA infrastructure is the proximate cause (including damages from defects causing a customer to miss a legally mandated French e-invoicing transmission deadline — Art. 1231-5 risk); breaches of confidentiality or data protection law. **Credit claim flow (4 steps, 30-day window):** 1. Identify the incident — reference incident ID from status.flowie.fr (linked under /uptime) or from a support ticket opened during the outage. 2. Submit within 30 days — email `support@flowie.fr` with subject `SLA Credit Request — [Month Year] — [Incident ID]` within 30 calendar days of the last day of the affected month. Late claims not processed. 3. Flowie validates within 10 business days — verifies downtime against monitoring data, issues confirmation or detailed rejection rationale. 4. Credit applied — line-item deduction on next invoice. Non-transferable, no cash value. **Support response times (matrix):** | Priority | Definition | Standard | Enterprise | |---|---|---|---| | P1 — Critical | Core platform unavailable / data processing halted in production. Financial deadline at risk. | 2h / 24×7 | 1h / 24×7 | | P2 — High | Significant functionality impaired; workaround exists but is operationally costly. | 4h / business hours | 1h / 24×7 | | P3 — Medium | Non-critical feature unavailable; workaround available. | 1 business day | 4 business hours | | P4 — Low | Question, configuration request, minor cosmetic issue. | 3 business days | 1 business day | Response time = ticket creation → first substantive engineer response (not ack-of-receipt). Resolution time governed by per-customer Enterprise Support Agreement, not this SLA. P1 + P2 Enterprise tickets handled 24×7 regardless of French public holidays. **Force majeure (Art. 1218 French Civil Code) — three cumulative conditions required:** Externality (beyond Flowie's reasonable control), Unpredictability (could not have been reasonably anticipated at contract signing), Irresistibility (makes performance impossible, not merely harder). Examples that qualify: nation-state cyberattacks affecting critical infrastructure, governmental sanctions prohibiting service delivery, declared pandemics materially preventing engineering operations, sustained internet backbone failures across multiple independent transit providers. Examples that do NOT qualify: routine DDoS within Flowie's existing mitigation envelope, supplier price increases, routine hardware failures covered by resilience architecture, staffing difficulties. **SLA modifications:** 60 calendar days' written notice. Materially adverse changes (uptime target reductions, response time increases, credit % reductions, narrowing of carve-outs) entitle the customer to terminate within 30 days with full prorated refund of pre-paid fees. Customer-favorable changes take effect immediately, no action required. **Governing law + dispute resolution:** French law, exclusive jurisdiction of Tribunal de Commerce de Paris. Customers domiciled outside the EU may alternatively submit disputes to ICC arbitration in Paris (English or French at customer's election). 1 arbitrator under €500,000; 3 arbitrators at or above €500,000. ### Uptime — https://get-flowie.com/uptime Live operational-transparency surface for the Flowie SaaS platform. Read together with /sla, which sets the contractual commitments — /uptime is the verification layer. **Methodology:** - Monitoring tool: BetterUptime synthetic transaction monitoring. - Probe interval: every 5 minutes. - Probe locations: 3 geographically distributed. - Check type: end-to-end transaction execution (NOT a connectivity ping). - Downtime threshold: a service is down when it is unavailable or returns errors to >50% of users for >5 consecutive minutes, agreed across all 3 probe locations. **Excluded from downtime calculations:** Scheduled maintenance windows (≤4h cumulative per quarter, ≥7 days advance notice, preferably Sundays 02:00–04:00 CET); force majeure events outside Flowie's reasonable control; degradation caused by customer-side configuration / customer-controlled infrastructure / third-party services not under Flowie's operational control. **What's monitored (4 services):** - API gateway — SLA target: 99.9% (Standard) / 99.95% BH, 99.9% OBH (Enterprise). - Web application — same target. - E-invoicing endpoints — same target. - Integrations layer — same target. **Status surface:** Embedded BetterUptime status page at `https://flowie.betteruptime.com` shows: real-time component status, live + historical incident records with impact scoping and resolution timelines, scheduled maintenance announcements with ≥7-day lead time, rolling 90-day uptime history per service tier. The status page is independent of Flowie's production infrastructure — it remains accessible during platform incidents. **Incident history:** Past 90 days publicly. Enterprise customers may request records beyond 90 days via their Customer Success Manager. **Severity classifications:** S1 critical (customer notification + war-room); S2 high (accelerated response); S3 medium (tracked); S4 low (normal change management). GDPR Article 33 personal-data-breach notifications operate on a separate 72-hour regulatory timeline, independent of operational incident severity. **Subscriptions:** Email and Slack notifications via BetterUptime. Maintenance: ≥7 days advance notice. Incidents: ≤5 minutes after monitor trigger for S1 + S2. Resolution: when service is confirmed restored. ## Quick links - [Talk to sales](https://get-flowie.com/contact) - [Pricing calculator](https://get-flowie.com/pricing) · [machine-readable pricing](https://get-flowie.com/pricing.md) - [Live demo (15 min)](https://get-flowie.com/demo) - [Self-serve product tour](https://get-flowie.com/explore) - [Trust Center](https://get-flowie.com/trust) · [Sub-processors](https://get-flowie.com/trust/subprocessors) · [Security](https://get-flowie.com/security) · [SLA](https://get-flowie.com/sla) - [Status / uptime](https://flowie.betteruptime.com/) - [Blog (EN)](https://get-flowie.com/blog) · [Blog (FR)](https://get-flowie.com/fr/blog) - [Press](https://get-flowie.com/company/press) · [Careers](https://get-flowie.com/company/careers) - [Developer Hub](https://get-flowie.com/developers) · [API reference](https://docs.get-flowie.com/reference) · [OpenAPI 3.1 spec](https://get-flowie.com/openapi.json) · [Auth (auth.md)](https://get-flowie.com/auth.md) - [Sitemap](https://get-flowie.com/sitemap.xml) · [Concise reference (llms.txt)](https://get-flowie.com/llms.txt) · [Agent guide (agents.md)](https://get-flowie.com/agents.md) ## For AI agents Flowie publishes machine-native surfaces so agents can read and act efficiently: - **MCP server (read-only):** [`https://get-flowie.com/mcp`](https://get-flowie.com/mcp) — Model Context Protocol over Streamable HTTP, no auth. Tools: `search_flowie`, `fetch_flowie_page`, `get_flowie_overview`. Discovery card: [`/.well-known/mcp/server-card.json`](https://get-flowie.com/.well-known/mcp/server-card.json). - **Markdown of any page:** append `.md` to a URL (e.g. [`/platform/ai-agents.md`](https://get-flowie.com/platform/ai-agents.md)) or send `Accept: text/markdown`. - **Public REST API:** OpenAPI 3.1 at [`/openapi.json`](https://get-flowie.com/openapi.json); base URLs `https://back.p2p-flowie.com/exchange` (production) and `https://back.flowie.ink/exchange` (sandbox); Bearer-token auth. - **Authentication:** [`/auth.md`](https://get-flowie.com/auth.md) (agent walkthrough) and [`/.well-known/oauth-protected-resource`](https://get-flowie.com/.well-known/oauth-protected-resource) (RFC 9728 metadata). Bearer JWT (Auth0) or `flw_` Exchange API key in the `Authorization` header. - **Developer hub:** [`/developers`](https://get-flowie.com/developers) — every developer resource at predictable URLs; human API reference at [`docs.get-flowie.com/reference`](https://docs.get-flowie.com/reference). ## Examples ### Call the MCP server (search the site) ```bash curl -s https://get-flowie.com/mcp \ -H 'Content-Type: application/json' \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/call", "params":{"name":"search_flowie", "arguments":{"query":"France e-invoicing mandate","limit":3}}}' ``` ### List the MCP tools ```bash curl -s https://get-flowie.com/mcp \ -H 'Content-Type: application/json' \ -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' ``` ### Fetch a page as Markdown ```bash curl -s https://get-flowie.com/platform/intake-to-pay.md # or, equivalently: curl -s https://get-flowie.com/platform/intake-to-pay -H 'Accept: text/markdown' ``` ### Call the Flowie Exchange API (send a document, sandbox) ```bash curl -s https://back.flowie.ink/exchange/v1/documents/send \ -H 'Authorization: Bearer flw_test_...' \ -H 'Content-Type: application/json' \ -d '{ "recipient": { "vat": "FR12345678901" }, "type": "invoice", "format": "factur-x" }' ``` ### Resolve a company by VAT (sandbox) ```bash curl -s 'https://back.flowie.ink/exchange/v1/companies/resolve?vat=FR12345678901' \ -H 'Authorization: Bearer flw_test_...' ``` See the full API reference at [docs.get-flowie.com/reference](https://docs.get-flowie.com/reference), and how to authenticate at [get-flowie.com/auth.md](https://get-flowie.com/auth.md).