A person approves what an agent sends out.
Anything an agent drafts for the outside world waits for a person to approve it. Hoppflow keeps approvals and external agent actions in a tamper-evident record.
- Agent-drafted external actions wait for approval
- Access checked again before sending
- Significant actions on the record

What happens when an agent drafts something to send.
Five steps, in order. The one in the middle is you, and you can try it yourself.
- PermissionsDraft and prepare
- Tool accessCRM and email
- Role scopeRevenue operations

- Renewal follow-upReviewHigh risk
Your renewal, and the pricing we discussed
Send the renewal follow-up
Following our call, I have kept your current rate for the coming year and included onboarding for the new colleagues. The terms are attached.
- Call notes, Mar 3
- Current contract
The account asked for updated terms before its renewal date. Account notesCurrent terms and renewal historyLast edited by operations lead52s ago
Waiting for you34s ago
- Weekly customer updateReview
What shipped, and what is next
- Kickoff inviteReview
Thursday, half an hour, agenda attached
- Standup summaryReview
Three blockers, one needs a decision

How Hoppflow handles your data.
Roles define access.
Who can do what
Roles define who can see, run, and approve supported parts of a Hoppflow workspace. Supported company-brain retrieval paths apply each person's access rules.
What the company brain may read
Connecting a supported tool does not make its contents searchable by default. Indexing is a separate choice, except that a calendar shared with the workspace supplies meeting events.
Security, privacy and agent governance.
How is Hoppflow different from a chat assistant connected to our files?
A chat assistant reads the files you point it at and answers from them. Hoppflow keeps the layer underneath: recorded decisions with their reasoning, the dates when recorded facts applied and when Hoppflow learned them, supported retrieval paths that apply each person's access rules, and a record of significant actions. Access is what the assistant gives you. That layer underneath is what Hoppflow adds.
Can an agent do something nobody approved?
Anything an agent drafts for the outside world, such as an email or an update to a connected tool, waits in one queue until a person approves it. A person can review and edit the supported draft before approving it. Hoppflow checks access again before a supported external action is sent, so removing access can stop work already under way.
How do we know an answer is right?
You do not take it on trust, and Hoppflow does not claim an answer is true. A company-brain answer names the record it came from, or says that it has no source rather than filling the gap. A source supports attribution. It does not prove the claim is correct. In research reports, a figure its source does not support loses its citation.
Who can see what?
Roles define who can see, run, and approve supported parts of a Hoppflow workspace. Supported company-brain retrieval paths apply each person's access rules. One Hoppflow workspace cannot retrieve another workspace's company data through the supported product paths.
How much work is it to set up?
Less than a rollout and more than nothing. You bring the material one use case needs rather than the whole company, you answer a short set of questions about how the business runs, and a founder sits with you while you run the first real question and check its sources, its permissions and its dates. After that you choose one thing to repeat each week.
What happens when a fact changes?
The old version stays readable. Recorded decisions and facts carry two dates, when they applied and when Hoppflow learned them, so on supported record types a replacement is marked as a replacement rather than deleted. Hoppflow treats a live connected-tool result as current only until its recorded expiry, then drops the result rather than quoting it as current.
Can we take an agent's access away?
Yes. Disconnecting a supported integration revokes Hoppflow's ongoing access to that account. Hoppflow checks access again before a supported external action is sent, so removing access can stop work already under way, and a held or failed action is recorded as such rather than filed as done.
What record is kept of what an agent did?
Hoppflow keeps approvals and external agent actions in a tamper-evident authorization record, so a later change to that stored record can be detected. Hoppflow also keeps a record of significant actions that a reviewer can inspect. When an external effect fails, is held, or is unclear, Hoppflow records it as such instead of filing the work as done.
Which tools does Hoppflow connect to?
Hoppflow supports connected accounts across email and chat, documents and files, engineering and tracking, meetings and scheduling, sales and support, and business data, on every plan. Hoppflow confirms each provider you need before a pilot. Connecting a supported tool does not make its contents searchable by default: indexing is a separate choice, except that a calendar shared with the workspace supplies meeting events.
How is Hoppflow different from a wiki?
A wiki holds what somebody wrote down, and keeps holding it after it stops being true. Hoppflow keeps recorded decisions with their reasoning, and recorded facts carry the dates when they applied and when Hoppflow learned them, so a replaced fact stays readable beside the one that replaced it.
How is Hoppflow different from search inside our chat tool?
Search inside a chat tool finds the message. It does not hold the decision that came out of the thread or the reasoning behind it. Hoppflow keeps recorded decisions with their reasoning, and answers across documents, meetings and records rather than one tool's history.
Enterprise terms are set in conversation.
Enterprise pricing, seats and limits are set with Hoppflow in conversation, before you sign anything.
Found a security issue? Report it responsibly at security@hoppflow.com.
Bring your security questions to a founder.
Book a conversation with a founder and go through what your team needs to check.