Technical Overview
A modular agent platform built for regulated industries
Policy-as-code governance. Immutable audit trails. Multi-provider LLM support. Deployed on your infrastructure.
Architecture
Modular by design
CompleteFlow separates agents, channels, governance, and infrastructure into independent layers. Add new agents without touching the platform. Swap LLM providers without changing agent code. Deploy the same agent to Teams, web, or API.
Stack
What's under the hood
Agent Framework
- ✓ PydanticAI
- ✓ Type-safe tool definitions
- ✓ Multi-turn conversation support
LLM Providers
- ✓ Anthropic Claude
- ✓ OpenAI / Azure OpenAI
- ✓ Open-weight models (Llama, Mistral)
Policy Engines
- ✓ Open Policy Agent (OPA)
- ✓ Cedar (tool-level auth)
- ✓ Rego policies in version control
Data Layer
- ✓ PostgreSQL 16 + pgvector
- ✓ Async SQLAlchemy
- ✓ Alembic migrations
Observability
- ✓ OpenTelemetry tracing
- ✓ Per-agent cost attribution
- ✓ Azure Monitor / Logfire
Integrations
- ✓ Microsoft 365 / Teams / Copilot
- ✓ SharePoint & OneDrive (Graph API)
- ✓ Tavily web search
Agent Builder
From idea to production agent in minutes
Define agents through YAML manifests or the guided builder UI. Connect data sources, set governance rules, test against real data in a sandbox, and deploy to your infrastructure — all with full audit logging from day one.
Define the task
Describe what your agent should do. Connect data sources — SharePoint, email, APIs — and set guardrails. Choose your model tier and provider.
Test and refine
Run your agent against real data in a sandboxed environment. Review outputs, check reasoning traces, and tune behaviour before going live.
Deploy with governance
Push to production on your infrastructure with full audit logging, OPA policy evaluation, human-in-the-loop controls, and cost monitoring.
Governance
Every AI decision. Logged. Explainable. Reviewable.
Designed to support FCA Consumer Duty, SRA obligations, MiFID II reporting, and DUAA 2025 ADM safeguards. Not bolt-on compliance — governance is built into the agent execution pipeline.
Immutable audit trail
Two configurable levels: minimal (summary, model, tokens, cost, policy decisions) and maximal (full prompt and response). Every record timestamped with user attribution and agent version. Default 7-year retention.
Policy-as-code
OPA evaluates agent-level access control via Rego policies that live in version control and run in CI. Cedar handles fine-grained, tool-level authorisation with formal verification. Every policy decision is logged.
Human-in-the-loop
Agents escalate to humans when confidence drops below configurable thresholds. Review queues surface low-confidence outputs for approval, rejection, or correction — and corrections feed back into agent improvement.
Role-based access control
Inherits your Microsoft Entra ID roles and permissions. Agents access only what the requesting user can access — no parallel permission system. OPA enforces who can invoke which agents.
Cost tracking & attribution
Per-agent, per-user LLM cost attribution with token-level granularity. Track spend by model tier, provider, and department. Set usage quotas and budget alerts per team.
Reasoning traces
Every agent output includes the chain of tool calls, data sources consulted, confidence scores, and the decision path that led to the result. Exportable for regulatory review.
Enterprise Features
Built for production at scale
Multi-provider LLM
Swap between Anthropic, OpenAI, Azure OpenAI, and open-weight models without changing agent code. Model registry maps tiers to providers.
Channel abstraction
Agents are channel-neutral. Deploy the same agent to Teams, Copilot Chat, web UI, or API — the channel adapter handles formatting and auth.
Delegated OAuth
Agents inherit the requesting user's Microsoft 365 permissions via delegated tokens. No separate credential store. No over-provisioned service accounts.
Per-agent configuration
Every agent has its own config: model tier, rate limits, timeout, content length limits — all tuneable via environment variables without code changes.
Conversation persistence
Multi-turn context preserved across sessions. Agents remember prior interactions and can pick up complex workflows where they left off.
State machine pipelines
Agent workflows are modelled as state machines with validated transitions. Each state change is logged, making complex multi-step processes auditable and recoverable.
Vector search (pgvector)
Built-in similarity search with HNSW indexes for retrieval-augmented generation across your internal document corpus.
Container-native deployment
Docker Compose for development, Azure Container Apps for production. Hub-spoke VNet with private endpoints. IaC with Bicep.
Agent versioning
Version-controlled agent configurations with rollback capability. Promote agents through dev, staging, and production environments with full traceability.
Webhook notifications
Notify external systems — Slack, email, SIEM — when agents complete tasks, escalate to humans, or trigger policy violations.
A/B model evaluation
Compare model performance before swapping in production. Run parallel evaluations across providers and tiers to optimise for accuracy, cost, and latency.
SSO & identity
Native Microsoft Entra ID integration. Extensible to Okta, Google Workspace, and SAML 2.0 identity providers for broader enterprise deployment.
Deployment
Your infrastructure. Your rules.
Private Cloud
Deploy on your own Azure, AWS, or GCP tenancy. Container-native with Azure Container Apps or ECS. Hub-spoke VNet with private endpoints. Data never leaves your environment.
CompleteFlow Cloud
Hosted and managed by us on UK private cloud infrastructure. We handle ops, updates, and monitoring. You get the fastest path to production with UK data residency guaranteed.
On-Premises
Full air-gapped deployment on your own hardware. Docker Compose or Kubernetes. Open-weight models only. Maximum isolation for the most sensitive workloads.
Integrations
Connects to your existing systems
Native Microsoft 365 integration via the M365 Agents SDK. Graph API access to SharePoint and OneDrive with delegated user permissions. Extensible to any system with an API.
Plus any system with an API or web interface. Custom integrations scoped during pilot.
FAQ
Technical questions
What models does CompleteFlow support? +
How does the policy engine work? +
How does the audit trail work? +
Where does my data go? +
How do agents access our documents? +
What happens when an agent isn't confident? +
Can we run this without Microsoft 365? +
See the platform in action
Book a 30-minute technical walkthrough tailored to your industry and infrastructure requirements.
Book a Technical Demo