FAQ
FAQ for the Qefro AI Workspace Platform as implemented on app.qefro.com / api.qefro.com.
Product
What is Qefro?
An AI Workspace Platform: configure once in the Admin Console, deploy Customer AI (website widget + WhatsApp) and Employee AI (Internal Portal) with shared knowledge, RBAC, and Business Actions.
What is an AI Workspace?
A scoped AI environment with its own knowledge, instructions, Business Tools, and conversations. See What is an AI Workspace?.
What is Customer AI?
External assistants on the website widget and WhatsApp. See Customer AI vs Employee AI.
What is Employee AI?
Internal assistants on the branded Internal Portal for organization members with RBAC. See Employee AI.
What is the Internal Portal?
The employee experience hosted on
your-company.qefro.com or a custom domain. See Internal Portal.What are Business Actions?
Runtime, authorized calls to Business Tools (your APIs) during a conversation. See What are Business Actions?.
How do Business Actions call APIs?
Configure a Business Tool (REST or OpenAPI), then the assistant invokes it under workspace scope with SSRF controls and logs. See Connect REST APIs.
How does RBAC work?
Owner, Admin, and Member roles; Teams grant Members access to specific workspaces. See RBAC.
Do I host the vector DB?
Not on Qefro cloud — RAG infrastructure is managed for you.
Does Qefro replace my CRM?
No. Business Tools call your systems of record.
What is identify()?
Widget API to forward your end-user JWT/session into REST Business Tools. See Identity Forwarding and REST configuration.
Business Tools
REST or SDK?
REST for existing HTTPS APIs and OpenAPI specs. Backend SDK for OTP, login, and multi-step workflows. See REST vs SDK.
Why does the assistant only answer from docs?
Usually missing workspace on the widget, no tools enabled, or tools filtered by auth level. Bind workspaceId and verify tools in Test Tool.
Does identity forwarding work with SDK?
Raw JWT/session forward is REST only (END_USER_IDENTITY). Backend SDK receives identity attributes and uses lookup + authorize.
Can Internal Portal run Business Tools?
V1 Portal is knowledge-only for live tool execution. END_USER_IDENTITY is Widget/WhatsApp. Playground supports most tools for testing.
Sync Tools did nothing?
Pass workspace_id and auto_register:true. Sync without workspace only updates connection metadata.
Plans
Is there a free plan?
No permanent free plan. Every new organization gets a 14-day free trial with full premium access (fair-use limits). After the trial, upgrade to Starter, Growth, or Enterprise — or the tenant becomes read-only with data preserved.
When is WhatsApp available?
During the trial and on all paid plans (Starter and above).
Security
Is Qefro SOC 2 certified?
SOC 2 Type II is on the roadmap. Use the Security overview and Compliance pages for questionnaires — do not infer certification from marketing.
How are tenants isolated?
Every API request resolves an organization. Knowledge, tools, installs, and billing are tenant-scoped, then workspace-scoped. See Tenant isolation.
How are secrets stored?
Tool, SDK, and channel credentials are AES-256-GCM encrypted at rest. Widget tokens are publishable channel keys. See Encryption and Secrets.
Does Qefro train models on my data?
Product intent is to power your tenant’s assistants, not to train public foundation models on your corpus. Confirm contractual language in your DPA. See Data handling.
How do I report a vulnerability?
Email [email protected] with subject “Security vulnerability”. See Vulnerability disclosure.