The ArrowFlow platform

One platform. Every onboarding.

A master console for ArrowTech, a workspace console for each business, and a conversation engine that speaks the WhatsApp Cloud API fluently.

Built on the official WhatsApp Business Platform

No unofficial gateways and no browser automation. ArrowFlow talks to Meta's Cloud API and signs everything it sends.

Official Cloud API

Messages travel through Meta's WhatsApp Cloud API. Every incoming webhook is checked against your app secret.

Learn more
Signed webhooks

Submitted, approved and rejected records post to your platform with an HMAC-SHA256 signature you can verify.

Learn more
Sealed secrets

Tokens and API keys are encrypted with AES-256-GCM. Document links are signed and expire.

Learn more
Under the hood

How a message becomes a verified client.

Client on WhatsApp
Taps a link, answers, uploads
WhatsApp Cloud API
Meta-hosted, signed webhooks
ArrowFlow engine
Validates, branches, stores
Review queue
Approve, reject, request again
Your platform
Signed webhook with every answer
Flow builder

A canvas made for WhatsApp.

Drag blocks, connect paths and configure each step in a side panel. The builder checks Meta's limits as you work and blocks publishing until the flow is valid.

12 block types, from quick replies to multi-screen native forms
Live character counters for buttons, lists and form labels
One-click validation that points to the exact block to fix
StartKeyword START
ConsentAccept / Decline
Full nameText, 3-80 chars
Age 18+Condition
ID documentPDF or photo, 2 max
KYC form4 native screens
Simulator

Preview exactly what clients will see.

The simulator runs the same engine that powers live conversations. Tap buttons, open lists, fill native forms and upload files before anything goes live.

Pixel-faithful chat with buttons, lists, location and forms
Watch variables fill in and follow the active block on the canvas
Switch language to check every translation in context
9:41
DC
Demo Capital
Business account
Today
Native forms

WhatsApp Flows, without writing Flow JSON.

Design multi-screen forms with text inputs, date pickers, dropdowns, radio groups, consent checkboxes and photo or document pickers. ArrowFlow compiles them to Flow JSON 7.3 and registers them with Meta when you publish.

Up to 30 files per picker, 25 MB each, stored on your server
Media is fetched through the Media API and never left on public links
One Meta form per language, created automatically
Sample data
This month's funnel
Individual KYC flow
Started
1,240100%
93.7% continue
Consented
1,16293.7%
83.3% continue
Documents sent
96878.1%
93.2% continue
Submitted
90272.7%
93.8% continue
Approved
84668.2%
Ava Laurent
ONB-7F3K2A · submitted 4 minutes ago
Awaiting review
Full name
Ava Laurent
Date of birth
21 Apr 1994
Email
ava.laurent@example.com
Document
Passport
passport.pdf
selfie.jpg
Port Louis
Approve Request again Reject
AI translation

Your base flow, in any language.

The master admin connects one AI provider (Anthropic Claude, OpenAI, Google Gemini or any OpenAI-compatible endpoint). Workspace admins translate the English base flow in one click and fine-tune any line.

Clients pick their language in the first message
Translations are checked against WhatsApp length limits
Side-by-side editor with coverage per language
FrançaisEspañolالعربيةहिन्दीKreol MorisienPortuguêsKiswahiliDeutsch
English base
AI translated
Workspaces and plans

Run onboarding for many businesses.

The master console creates workspaces, assigns plans and watches usage. Each plan sets limits on flows, monthly onboardings, team seats, storage and languages, plus feature switches.

Create a workspace and its owner account in one step
Owner, admin and reviewer roles inside every workspace
Signed webhooks push approved clients into each business's own platform
Plan usage
Sample workspace on the Growth plan
40%
Flows
6 / 15
86%
Onboardings
1,712 / 2,000
38%
Seats
3 / 8
24%
Storage
2.4 GB / 10 GB
Security

Built for regulated onboarding.

Identity data is sensitive. ArrowFlow treats it that way at every layer.

Encrypted secrets

Access tokens, app secrets and AI keys are encrypted with AES-256-GCM before they touch the database.

Signed webhooks

Every inbound WhatsApp webhook is verified against your app secret's HMAC-SHA256 signature.

Workspace isolation

Each business has its own number, flows, clients and documents, with role-based access for its team.

Time-limited document links

Files shared with your platform use signed links that expire, never public URLs.

Audit trail

Publishing, reviews, plan changes and failed deliveries are recorded with who and when.

Signed outbound events

Approved onboardings are pushed to your systems with an HMAC signature you can verify.

See ArrowFlow with your own onboarding.

Request a demo