KRUVFlowBridge: unattended data workflows
Connect any two databases and run SOPs end to end, built in the browser with no code. Approvals only where the data needs a decision, and every action in a tamper-evident audit log.
SOPs today depend on people, not process
Data-fix SOPs are run step by step by operators, which makes them slow, uneven and hard to audit.
Run by hand
Operators execute each SOP query by query, every time.
Execution varies
Each person runs the steps a little differently.
Credentials shared informally
Database logins pass between people outside a controlled store.
Hand-offs untracked
Approvals and team-to-team hand-offs leave no record.
A developer for every SOP
Automating a new SOP means writing and maintaining custom code.
FlowBridge connects any two databases
A middleware web app that runs SOP workflows end to end, built in the browser with no code.
End-to-end SOPs
Read, compare, map and write data across both systems in one run.
Conditions
Continue only if a check passes; stop cleanly when nothing needs doing.
Approvals
Pause for a person only when the data needs a decision.
Notifications
Email or webhook updates when a run needs attention or finishes.
Every run follows one path
People step in only where the data needs a decision; everything else runs on its own.
A manual start, webhook, cron schedule, inbound email or ITSM callback starts the run.
Queries, filters, comparisons, mapping lookups and writes run in order, with a checkpoint after each step.
Only when needed: a person reviews data, fills a column or approves. Otherwise the task auto-skips.
Email or webhook notification, and every action is written to the hash-chained audit log.
SOPs are built from ready-made steps
Drag to reorder in the visual builder. Every save raises the workflow version number.
Data
Parse list, filter rows, query database (read-only, always rolled back), compare datasets (missing, in both, extra), mapping lookup (most specific match wins), fetch from API, export to Excel.
Logic
Continue only if…, wait until… (poll with a timeout).
Human
Approval or task with an editable column and auto-skip rules.
Actions
Write to database (all-or-nothing per step), HTTP request, create ITSM ticket (ServiceNow, TDX, REST), attach file, notify by email or webhook.
Runs start and finish without anyone watching
Triggers
Manual, webhook (API key or HMAC-signed, de-duplicated), schedule (5-field cron, UTC), inbound email (IMAP over TLS, regex extraction) and ITSM webhook that starts or resumes a run.
Approvals auto-skip
A human task skips itself when its rule is met, for example every value is already filled or a ticket already exists.
Wait steps poll
Re-check a query, a ticket status or an inbound callback on an interval, with a timeout.
Checkpoint and resume
Progress is saved after every step. After a restart the run resumes from its last checkpoint.
10 database engines and your ITSM tools
Every database connection uses verified TLS. Credentials are typed in at run time or kept as admin-managed, encrypted saved connections.
Databases
Integrations
Authentication
TLS options cannot be overridden; plaintext connections are refused in production.
Example: a 16-step SOP in one unattended run
A multi-step data-setup SOP shipped as a template workflow, from an alert email to a validated result.
- Reads the record IDs from an alert email and checks which already exist in the target database
- Finds what is still missing, and stops cleanly if nothing is missing
- Pulls supporting details from a second database and applies business-rule filters and mapping lookups
- Asks the source team for approval only if values are blank (otherwise auto-skips)
- Builds a triage Excel file, creates the ITSM ticket and attaches the file
- Polls the target database hourly (up to 72 hours), validates the result and notifies when complete
Clear roles, recorded decisions
Least-privilege access on every route; each role includes the rights of the one below it.
Super admin
Users and encryption key rotation.
Admin
Workflows, mappings, connections, integrations, triggers, notification settings and audit.
Operator
Run workflows and approve tasks.
Viewer
Read-only access.
Approvals
Each decision stores who decided, the decision and the timestamp. Decisions are atomic: only one can win.
Audit log
Append-only and hash-chained, with a verify check that detects tampering. Covers logins, role and configuration changes, credential use, runs and approvals, including auto-skips.
Security built in, mapped to SOC 2 and OWASP
27 implemented controls, each mapped to the SOC 2 Trust Services Criteria and the OWASP Top 10 (2021).
Data protection
Verified TLS on every database connection. AES-256-GCM at rest for saved credentials, with key rotation. Secrets never returned by the API and scrubbed from errors. Read-only enforced at the database for query steps.
Access
TOTP multi-factor authentication. 8-hour sessions, revoked on logout, password or role change. httpOnly cookie with CSRF protection. Account lockout and rate limiting.
Application
Security headers (HSTS, CSP and more). SQL injection blocked with bound parameters. Signed or key-authenticated webhooks. Append-only, hash-chained audit log.
This is an engineering self-assessment. A formal SOC 2 audit and an external VAPT come next.
Simple to host
Web service
FastAPI backend (Python API, workflow engine and scheduler) with a plain HTML/JS frontend and no build step. Health check at /healthz.
Data
Neon Postgres for the app database, with verify-full TLS. Customer databases and ITSM tools are reached over verified TLS or HTTPS.
Roadmap
First real runs
Run the workflows against live Snowflake, Databricks and TDX endpoints.
External assurance
Independent SOC 2 audit and a VAPT penetration test.
Admin MFA enforced
Require MFA for every admin once all admins have enrolled.
Always-on hosting
A paid, always-on instance or worker so schedules and waits never sleep.
Builder enhancements
Step test with sample data, schema pickers and if/else branching.
Onboard the next SOPs
Move further SOPs onto FlowBridge.
Book a 20-min FlowBridge discovery
Bring one SOP you run by hand today. We will map it to FlowBridge steps and show what an unattended run would look like.
Booking calendar
Email us or use WhatsApp to book a 20-minute call.