Echobase
Echobase is a web platform that turns a team's own documents into custom AI agents, letting staff query, draft and analyse content from a shared knowledge base. A permanent free tier precedes paid plans from 19 USD monthly.
What is Echobase?
Echobase is a web application published by Core Flow Intelligence, an Australian AI consultancy that also sells advisory and integration services. Its premise is simple: instead of asking a general-purpose chatbot questions it cannot answer, you upload your own files, group them into datasets, and create an AI Agent whose knowledge is restricted to those datasets. The homepage sums the product up in three verbs, query, create and analyse, and the interface follows the same logic. An agent can answer questions about the documents it was trained on, draft new material from them (“Draft an Our Approach section for a new proposal”), or aggregate and summarise them (“What are the key themes across this data?”).
Files come from a local upload or, in the vendor's own wording, from a synchronised cloud storage service; the pricing table still lists Google Drive and SharePoint synchronisation as coming soon. Processing a file is announced as taking between five seconds and one minute. Nothing has to be coded, the site insisting on no code, scripts or add-ons, and the models behind the agents are third-party ones reached through an API: GPT-3.5 on every tier, GPT-4 from the Professional plan upwards, with open-source models also announced as forthcoming.
The product is built for teams rather than individuals. You invite colleagues into an organisation, give them access to specific agents, and assign one of two documented roles: Admin, who can create, edit and delete datasets and agents, and Chat Only, who can merely talk to existing ones. Real-time collaboration, covering shared prompts, outputs and chat histories, is advertised but not yet released.
Ten use cases are documented page by page: proposal writing from previous bids and RFPs, report writing, grant writing, policies and procedures, learning support, an IT helpdesk agent, stakeholder interview analysis, a teaching agent, recruitment screening and desktop research. Alongside the platform, Echobase publishes sixteen free writing tools, from paragraph, e-mail and cover letter generators to a passive voice checker, that require no paid subscription.
What it does
- Answer questions about your own documents in plain language
- Draft proposals, reports and grant applications from previous ones
- Analyse a set of documents and surface its recurring themes
- Generate and update policies and procedures against existing standards
- Answer internal helpdesk requests from your own technical documentation
- Screen CVs and support hiring decisions
- Turn course documents into teaching material and lesson plans
When to use Echobase / When not to
A quick filter to help you decide if Echobase is the right fit.
When to use Echobase
- Teams that keep rewriting the same kinds of documents from an existing archive: proposals, reports, grant applications
- Organisations that want ChatGPT restricted to their own files, with no development work
- Internal support and IT helpdesk teams answering from their own documentation
- Teachers, trainers and instructional designers building course material
- Consultants, freelancers and small businesses who can start at 19 USD per month
When not to use Echobase
- Organisations that require EU data residency: the servers are declared to be in Australia
- Buyers who need a fully identified counterparty (legal name, registered office, company number) before signing
- Teams that need a documented API to embed the tool in their own systems
- Anyone expecting a mobile app, a desktop client or a browser extension
- Users under 18, whom the terms of service exclude
How to use Echobase
A typical end-to-end flow, from setup to results.
- Create an account from the registration page
- Sign in, then pick the plan that matches your volume; the free tier needs no credit card
- Open Files in the side navigation and create a folder for your future agent
- Upload your local documents through the file picker or by drag and drop
- Wait for processing, announced as five seconds to one minute depending on file size
- Explore the dashboard sidebar to locate the available modules
- Go to Dashboard, then Create New Agent, and select the files that form its knowledge base
- Customise the agent's settings before saving it
- Open Chat on that agent and start querying, drafting or analysing
- Invite colleagues, assign the Admin or Chat Only role and set permissions agent by agent
Pros & Cons
Pros
- Fully public pricing: four costed tiers and a detailed feature comparison table
- Permanent free plan, with no credit card required
- The terms state plainly that customer content is not used to improve the service
- Clear ownership split: you keep the input, you are assigned the rights to the output
- A data processing addendum is offered on request to GDPR and CCPA customers
- Roles and per-agent permissions designed for an organisation rather than a single user
- Ten documented use cases and a step-by-step getting-started guide
Cons
- No postal address and no complete legal name published anywhere on the site
- A single published e-mail address, and it sits on the parent company's domain
- The named models stop at GPT-3.5 and GPT-4, with no newer generation mentioned
- Google Drive, SharePoint and Microsoft integrations are still marked as coming soon
- No retention period, no subprocessor list and no Article 27 EU representative
- Dead footer links, and documentation still pointing at obsolete preview URLs
- No API documentation, no mobile app and no browser extension
Pricing & Plans
Echobase offers a permanent free plan, limited to one AI agent, twenty queries and twenty pages of uploads. The cheapest paid tier, Individual, is billed at 19 USD per month, followed by Professional at 49 USD per month and Enterprise at 299 USD per month; a custom tier is quoted on request. All amounts are stated in United States dollars and invoiced monthly. The terms of service specify that payments are generally non-refundable, that plans may be changed or cancelled at any time, and that price changes take effect after a fourteen-day notice period.
- 20 GPT-3.5 queries
- 1 AI agent
- 20 pages of uploads
- 2
- 100 queries per month
- 5 agents
- 10
- 000 pages
- 6
- 500 queries per month
- 10 agents
- 40
- 000 pages
- GPT-4 access with 325 queries
- 25
- 000 queries per month
- 20 agents
- 300
- 000 pages
- 1
- 250 GPT-4 queries
- team collaboration
- assisted organisation setup
- custom analytics
- custom AI agents
- tailored training and custom security
Data, GDPR & hosting
A consolidated view of how Echobase handles your data.
GDPR overview
Echobase never claims GDPR compliance in so many words, and it is that silence, rather than any refusal, that this record reflects. The regulation is mentioned once, in section 5(c) of the terms: customers subject to the GDPR or the CCPA are told to contact support@coreflowintelligence.ai to put a Data Processing Addendum in place, and are themselves made responsible for providing privacy notices and obtaining the necessary permissions. A privacy policy dated 23 March 2025 is published, and its section 7 states that personal data is transferred to the publisher's facilities and servers in Australia, with no transfer mechanism described. No Article 27 EU representative is designated, no data protection officer is named, no subprocessor list is published, and no retention period, deletion or portability procedure appears anywhere on the product site.
Who owns the data?
Under the terms of service, ownership is split cleanly. You retain ownership of every Input you provide, meaning the files and prompts you send, and Echobase assigns to you all of its right, title and interest in the Output generated for you, provided you comply with the terms. Echobase may still use that Content where necessary to deliver the service, to comply with the law and to enforce its own policies. You remain solely responsible for your Content and for its legality. Because outputs are not guaranteed to be unique, identical answers produced for other users do not belong to you.
Reuse rights
Because the terms assign you the rights to the output, you may reuse what an agent produces without asking further permission, including commercially, provided your use complies with the terms and with applicable law and that you do not present machine-generated text as human-written, which is expressly prohibited. Two limits deserve attention. First, an output is not guaranteed to be unique: another customer asking a similar question may receive a similar answer, and that answer is not part of your content. Second, the terms forbid using the service to build competing foundation models and restrict scraping or bulk extraction, except through the API. On the vendor's side, the terms state that customer content is not used to improve Echobase's services, and the homepage adds that the third-party models it calls do not train on collected data. Personal data is treated differently: the privacy policy allows it to be aggregated and analysed, and generalised statistics drawn from those aggregates may be shared with third parties or made public.
Data retention & training
Hosting summary
The terms of service state that files and data uploaded by customers are hosted on AWS, and that both parties adhere to SOC 2 compliance. That assertion occupies a single sentence, with no audit report, no named auditor and no trust or security page behind it. The privacy policy is more precise about jurisdiction: personal data is transferred from the user's location to the publisher's facilities and servers in Australia. No AWS region is named and no data centre is identified. On the security side, the homepage mentions AWS encryption, industry-standard database privacy measures, and access granted agent by agent so that users only reach information they are authorised to see, with permission changes applied immediately. Note that the DNS record of the marketing site resolves to an Amazon address in Amsterdam; that concerns the Framer-hosted website, not necessarily the application data, which the privacy policy places in Australia. Buyers with EU data residency requirements should treat Australian hosting, and the absence of any documented transfer mechanism, as the decisive point.
Things to keep in mind
Risks and trade-offs to weigh before adopting Echobase.
- The publisher is only partly identifiable: no postal address, no legal form and no company number are published, and the only contact e-mail sits on a different domain. That is worth weighing before entrusting confidential documents to the platform.
- Uploading a corporate knowledge base concentrates sensitive material in one place. Access is controlled agent by agent, but only two roles exist, so any finer governance has to be recreated through the way datasets are split.
- Data is stored in Australia under Queensland law, with mandatory arbitration and a waiver of class actions. Organisations bound by EU data residency rules should stop at that point.
- An agent is only as good as the files behind it. Trained on outdated proposals or superseded procedures, it will restate them with complete confidence, and nothing in the product flags a stale document.
- Handing proposals, reports and policies to an agent slowly erodes the expertise that made those documents good in the first place. Reviewers should keep reading the output rather than approving it out of habit.
- Several published claims cannot be verified from outside: SOC 2 appears in a single sentence of the terms, the compliance section of the homepage is an image with no readable text, and features announced as coming soon have not shipped.
- No retention period, no subprocessor list and no deletion procedure are published, so what happens to your documents after you leave is undocumented.
Setup & Integrations
Technical difficulty
Low for an individual, moderate for a team. Nothing has to be installed, coded or connected: you register, choose a plan, upload files or drag and drop them into a folder, then create an agent from the dashboard and start chatting. File processing is announced as taking five seconds to one minute. The work begins once several people are involved, since members must be invited into the organisation, given the Admin or Chat Only role, and granted permissions agent by agent. Cloud storage connectors are not yet available, so expect to move documents by hand.
Deployment
Behind Echobase
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
Is there a free plan, and what does it include?
Which AI models does Echobase use?
Are my files used to train AI models?
Who owns what an agent produces?
Where is my data hosted?
Can several colleagues share the same agents?
Does Echobase connect to Google Drive or SharePoint?
Is there an API, a mobile app or a minimum age?
Should you pick Echobase?
Echobase is a real, working product rather than a landing page: pricing is public down to per-plan query quotas, the documentation walks through the first agent step by step, ten use cases each have their own page, and the application itself sits on a subdomain with a public status page. The proposition is easy to grasp and cheap to test, a permanent free tier then 19 USD per month, and the contractual position on data is unusually clear for a tool of this size: you keep your input, you are assigned the rights to the output, and the terms state that your content is not used to improve the service.
What lets it down is transparency about the publisher, and upkeep. No postal address, no legal form and no registration number appear anywhere; the single published e-mail address belongs to the parent domain; three brands, Echobase, Core Flow Intelligence and Artificial Workflow, cross without the site ever explaining the relationship. Several footer links lead nowhere, the documentation still points at preview URLs, copyright years contradict each other on the same page, and integrations advertised as coming soon have not moved. The named models stop at GPT-4.
Legally, everything happens under Queensland law, data sits on AWS servers in Australia, arbitration is mandatory and class actions are waived. GDPR compliance is never claimed, though a data processing addendum is offered on request.
For a team that wants quick, inexpensive conversational access to its own documents, Echobase is worth an hour on the free tier. For a purchase that must pass a security review, or that requires EU hosting and a fully identified counterparty, the published evidence is not yet sufficient.
- Choosing a selection results in a full page refresh.
- Opens in a new window.