Your documents stay yours.
In your document
Referred by Mary Wanjiku Otieno, community health worker, 0722 481 906. Client is 17, living with HIV, ID no. 31204477.
What is sent
Referred by [name], community health worker, [phone]. Client is 17, [health detail], ID no. [number].
Who can see your work
Only the people in your workspace. A small number of Afrant staff can reach the systems that hold the data, in order to run and repair the service.
- One workspace cannot read another
- The database itself checks this on every query, not only the screens, so that a fault in a page does not show you another organisation's files.
- Roles
- Owner, admin, editor and viewer. Viewers can read and change nothing. Give each person the lowest role that lets them work.
- No passwords to steal
- You sign in with a link sent to your email. It works once and lasts an hour.
- Invitation-only
- An account can only be created for an email address that holds an invitation.
- Everything is recorded
- Whatever a person or the assistant changes is in the activity log, with who and when, and can be undone.
- Documents are not instructions
- Text inside an uploaded file or an email is treated as information. The assistant is built not to act on a sentence in a document that says “ignore your rules”.
The AI and your documents
The AI reads your documents to build the fact sheet, answer questions and draft. Three controls limit what it sees.
Masking
Email addresses, phone numbers and identity numbers are masked by fixed rules before any text is sent. Names, addresses and health details are then found and masked in the copy used for search and drafting.
A switch on every file
Open a file and turn off Send to AI. The file stays in your library for people to read, and the AI never receives it.
Only for what you asked
Text goes to the AI to produce the answer or draft you requested. Afrant does not use your content to train AI models.
Where it is kept, and who handles it
Your database and files are stored in the European Union. These companies process data for Afrant.
| Company | What it does | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | European Union (Ireland) |
| Vercel | Hosts the website and the app | United States and its global network |
| Anthropic | The AI that reads documents, answers questions and drafts text | United States |
| Voyage AI | Turns passages of your documents into a search index | United States |
| Inngest | Runs scheduled jobs, such as checking for new calls | United States |
| Sentry | Reports software errors. Errors only; no screen recording | United States or European Union |
What is not in place yet
You should know this before you decide.
- No security certification. Afrant is in pilot and holds none.
- Masking can miss things. It is a safeguard, not a guarantee.
- Sign-in depends on your mailbox. Anyone who can read your email can sign in as you, so protect it with a strong password and a second step.
What you can do
- Give each person their own account. Do not share sign-ins.
- Give people the lowest role that lets them do their work.
- Keep case files and client records out, or switch off Send to AI for them.
- Do not upload records you are not permitted to share with a service provider.
Common questions
Is it safe to put our organisation's documents into Afrant?
Your documents are visible only to the members of your own workspace, are stored in the European Union, and are sent to the AI only to produce the answer or draft you asked for, after personal details Afrant recognises have been masked. No system is free of risk, so do not upload records you are not permitted to share with a service provider.
Are our documents used to train AI?
Afrant does not use your content to train AI models. Text is sent to the AI providers named in the privacy notice only to produce what you asked for.
What about beneficiaries' personal details?
Email addresses, phone numbers and labelled identity numbers are masked by fixed rules before text is sent to the AI. A second pass finds names, addresses and health details and masks them in the copy that is searched and drafted from. Masking is automatic and can miss things, so keep case files out, or switch off Send to AI for any file that holds them.
Where is our data stored?
The database and uploaded files are stored in the European Union (Ireland). Some companies that process data for Afrant, including the AI provider, are in the United States. The privacy notice lists each one and what it does.
Can we take our data out, or have it deleted?
Yes. Any document exports to Word or PDF and every uploaded file can be opened as you uploaded it. An owner can ask for the workspace to be deleted, which deletes its content.
Does Afrant have a security certification?
No. Afrant is a young product in pilot and holds no certification such as ISO 27001 or SOC 2. This page says what is in place today.
The full terms are in the privacy notice.
See it on your own documents.
Afrant is in pilot and opens one organisation at a time. It is free during the pilot, and there is a sample workspace to explore before you upload anything.