Skip to Content
ArchitectureOverview

Architecture overview

FlowState is a multi-tenant service on AWS. Each client works in its own tenant, which is isolated from every other tenant (see Security).

How the parts fit together

FlowState architecture on AWS. Your team uses the web app, the FlowState card in HubSpot and Claude through MCP. In Europe (Frankfurt), Amazon CloudFront, Amazon API Gateway, Amazon Bedrock AgentCore, Amazon Cognito, AWS Lambda and Amazon SES run the app, and Amazon DynamoDB, Amazon S3, AWS KMS with a per-tenant key and AWS Secrets Manager hold your tenant's encrypted data. AI requests go to Amazon Bedrock in six European regions: Frankfurt, Stockholm, Milan, Spain, Ireland and Paris. FlowState connects to HubSpot, AWS Marketplace, Slack, Stripe, email and AWS Partner Central. Partner Central events arrive in US East (N. Virginia) through Amazon EventBridge and an encrypted Amazon SQS queue, and AWS Lambda passes them on to Frankfurt; nothing is stored there.

What FlowState does

  • Pipeline analysis. FlowState reads your HubSpot deals on a schedule, and in real time through HubSpot webhooks. It analyses them with AI to find stalled deals, data-quality gaps, win/loss patterns and rep performance. You see the results in the web app, and you can ask about them from Claude.
  • AWS co-sell (APN). For AWS Partners, FlowState creates the AWS Partner Central opportunity for a deal when a rep submits it from the FlowState card in HubSpot, or when a template you set to auto-submit does so. After that, changes in HubSpot flow to Partner Central, and AWS status changes come back to the HubSpot deal as properties and timeline notes.
  • AWS Marketplace private offers. FlowState creates and releases private offers for a deal from the Marketplace tab of the FlowState card.

Where it runs

Your data is stored in the EU, in the AWS Frankfurt region (eu-central-1). Two parts process data elsewhere without keeping records there:

  • AWS delivers Partner Central events only in the US East region, so FlowState receives them there and passes them straight on to Frankfurt. Events wait in an encrypted queue there only until they are processed.
  • AI analysis uses Amazon Bedrock. AI requests are processed in European AWS regions only: Frankfurt, Stockholm, Milan, Spain, Ireland or Paris. The result is stored in Frankfurt.

Integrations

IntegrationHow FlowState connectsWhat it is used for
HubSpotOAuth app you install in your HubSpot accountReads deals, receives change webhooks, writes APN status back, hosts the FlowState card
AWS Partner CentralAn IAM role you create in your AWS account; the app gives you the templateCreates, submits and updates co-sell opportunities
AWS MarketplaceAn IAM role you create in your AWS account; the app gives you the templateCreates and releases private offers
SlackA Slack app you create from a manifest FlowState providesOverdue-deal alerts and a Monday digest, as direct messages or in a channel
Claude (MCP)A custom connector in ClaudeAsk about and act on your FlowState data in plain language
EmailSent by FlowStateAccount, billing and integration notices
StripeStripe Checkout and the Stripe billing portalSubscription billing

Identity and access

You sign in with email and password or with Google. Within a tenant, your role (owner, admin, member or viewer) decides what you can see and do. See Roles and Permissions.

ArchitectureOverview