Enterprise · version 2026-10-14

Enterprise terms

Pre-release. These terms are a working version under review by counsel. They describe how the service operates today. Organizations that need final contractual terms or a signed data processing agreement should contact us before rollout.

1. The service

PromptFlowEngine Enterprise scans prompts on your users’ devices, applies your policy, and reports metadata-only security events to your organization’s console and, if you configure it, to your API. The protections available differ by tool; the coverage table on the Enterprise page is part of these terms.

2. Your responsibilities

• Only verify domains you control, and only enroll people you are entitled to monitor.
• Tell employees, before enrollment, what is monitored and why, as required by the law that applies to you (for example GDPR, works-council agreements, or local employee-monitoring law).
• Keep enrollment keys, webhook secrets, and admin access confidential, and revoke them when no longer needed.

3. Data processing

We process security events as your processor, only to provide the service, as described in Enterprise data handling. We do not receive prompt text or detected values, and we do not use your data to train models or for advertising.

4. Fees and seats

Fees follow the published per-employee pricing for the band your plan is in. Until you subscribe, up to 25 people can connect. Subscriptions are billed in advance through Stripe and can be cancelled from the billing portal; access continues to the end of the paid period.

5. Limits

Detection is deterministic pattern matching. It will miss some sensitive data and flag some harmless text. It reduces risk; it does not guarantee that sensitive data never reaches an AI service. The service is not certified under ISO/IEC 27001 or SOC 2.

6. Ending the service

An owner can export and then delete the organization at any time. Deletion is immediate and removes all organization data.