Azure DevOps Analytics OData (your tenant) Cycle time, throughput, WIP, types, dates NOT: titles, names, descriptions Read-only queries SM's Browser FlowCoach Hub ✓ Computes metrics locally ✓ SM reviews and adds context ✓ Session memory only PII-free payload Vercel Backend flowcoach-ado.vercel.app ✓ Validates payload (10KB limit) ✓ Rate limits (60/hr per org) ✓ Logs audit entry (no results stored) Numeric metrics only Anthropic Claude AI Coaching Engine ✓ Generates coaching insights ✓ No training on your data ✓ Deleted within 30 days Coaching text only Signal Report SM's Browser ✓ SM reads coaching insights ✓ Shares via Copy for Teams Session ends = data discarded Nothing is stored. Ever.

Data Flow Summary

LayerWhat happensWhat's storedSecurity control
ADO → Browser Read-only OData query using SM's session token Nothing Scopes: vso.analytics + vso.work only
Browser Metrics computed, SM reviews Session memory only PII fields excluded at compile time
Browser → Backend PII-free JSON payload sent to Vercel Nothing 10KB limit, CORS locked, rate limited
Backend → Anthropic Numeric metrics forwarded Audit log entry (no results) Token never forwarded, piiSentToAI validated
Anthropic → Backend Coaching text returned Anthropic deletes < 30 days No PII in, no PII out
Backend → Browser Signal report displayed Session memory only Discarded on session end

Questions about our data flow? Contact support@flowinsight.ai