A complete view of how data moves through FlowCoach — what's accessed, what's sent, what's stored.
| Layer | What happens | What's stored | Security control |
|---|---|---|---|
| ADO → Browser | Read-only OData query using SM's session token | Nothing | Scopes: vso.analytics + vso.work only |
| Browser | Metrics computed, SM reviews | Session memory only | PII fields excluded at compile time |
| Browser → Backend | PII-free JSON payload sent to Vercel | Nothing | 10KB limit, CORS locked, rate limited |
| Backend → Anthropic | Numeric metrics forwarded | Audit log entry (no results) | Token never forwarded, piiSentToAI validated |
| Anthropic → Backend | Coaching text returned | Anthropic deletes < 30 days | No PII in, no PII out |
| Backend → Browser | Signal report displayed | Session memory only | Discarded on session end |
Questions about our data flow? Contact support@flowinsight.ai