Flockjay

The platform is a content management and learning management system with a generative layer on top. Remove the model and a complete product remains: a content library with tagging and permissions, course authoring, certifications, a peer sharing feed and reporting. That is the removal test outcome that places established platforms at this band.

The generative layer is real and is where current marketing sits, covering semantic search across collateral, automatic tagging, call scoring, pitch grading and recommended next content, but it accelerates a product that shipped and sold before it existed. Vintage supports the read: the business software launched in 2022 as a peer learning platform and the generative framing arrived afterwards.

The system recommends and ranks rather than acts. It surfaces collateral, scores calls and grades recorded pitch practice, and a person decides what to do with the output, so the blast radius of an error is a poor recommendation rather than a sent message.

Against that, the vendor publishes no description of how generated coaching, scoring or grading can be reviewed, appealed or overridden, no accuracy statement on the scores, and no administrator control surface governing what the model is permitted to evaluate. Scores that attach to a named employee deserve a stated review path and none is published.

The product is marketed throughout as generative AI and as Flockjay AI, and no model provider, model family, version or hosting arrangement is named anywhere on the public site. The trust centre poses the question of whether the company uses AI technology as one of its headings, which is the right question to ask, but the answer is rendered client side and is absent from the served page.

What is public is a capability list rather than a disclosure: semantic search, tagging, call scoring, pitch grading and content recommendation, each stated as a benefit with no basis, no accuracy range and no described fallback when the model is wrong.

Five customers are named in the vendor's own words, Redis, Flexera, Obsidian, Harness and Resilience, and one testimonial carries a real name and a checkable title, the President of Worldwide Field Operations at Qualtrics. That is more attributable evidence than most vendors of this size publish. What is missing is the quantified half.

The customer logos on the homepage are images with no accompanying story, no case study appears anywhere on the site, and not one outcome number is published: no ramp time reduction, no quota attainment change, no content adoption rate, no win rate movement. The five customer names also appear on a careers page rather than a customer page, which suggests recruiting rather than proof was the reason they were written down.

The product does not send outreach, so this axis bites only structurally on this vendor and the grade reflects what is knowable rather than a compliance failure. The platform stores and distributes seller content and training material inside a customer's own organisation, and the outbound surface is the rep rather than the tool.

Nothing is published on acceptable use of generated content, on whether coaching output may be carried into prospect facing email, or on any policy governing what the content recommendations may be used for. Graded on the absence of a stated position rather than on evidence of a breach.

The published policy is a properly drafted document and it identifies the company completely, giving the full corporate name, a registered office in Covina, California, and a registered company number, which is more entity disclosure than most vendors in this index provide.

It enumerates collection categories, processing purposes and disclosure recipients, sets out full California rights including access, deletion and correction, and states plainly that the company does not sell or share personal information.

It sits at the bottom of the band because of a deliberate and correctly drawn boundary: the policy states that it does not apply to anything a customer uploads to or collects through the platform, which is handled as a processor under a customer agreement and a separate data processing agreement.

That carve out is right in principle, and it means the document governing rep call recordings, pitch practice video and synced records is the one document a buyer cannot read, because the processing agreement is not published. Two further gaps: there is no equivalent rights section for Europe or the United Kingdom despite an enterprise customer base, and the policy states the site is not designed to respond to browser opt out preference signals.

There is no data business here and that is the cleanest part of the vendor's posture. No contact database is purchased, built or resold, no enrichment is offered, and the material the platform holds is the customer's own collateral, courses and recorded rep activity, with provenance belonging to the buyer.

The one external collection the policy names is information received from career sites such as LinkedIn, Monster and Indeed, and that is scoped to the company's own job applicants rather than to any product feature. Held at this band rather than higher because the policy grants an open ended right to deidentify or anonymise information and then use it for any purpose, with no boundary drawn around what may be derived from customer platform content.

The integration surface is built on sanctioned connectors into systems the customer already licenses, named as Salesforce, Slack, Zoom, Gong, Chorus and Notion, with a published setup guide for two of them. No browser extension harvests data out of a third party interface, no social network account credential is held, no session token is stored, and nothing is rotated or paced to stay beneath a platform limit, which is the pattern that drives this axis down elsewhere in the index.

Off the top band because the vendor states no conformance position of its own: there is no statement about operating within the terms of the platforms it reads from, and no note on what happens to ingested call recordings if a source platform changes its access rules.

The trust centre asks the two questions that matter on this axis, whether customer data is used to train models and whether data is shared with other customers, and neither answer renders in the served page, so a buyer cannot read the commitment without a browser. What is readable cuts the other way.

The privacy policy lists research and product development among its processing purposes, and separately grants the company the right to deidentify information and then use it for any purpose, with no carve out preventing customer derived material from feeding model improvement. On a platform that ingests call recordings and recorded pitch practice tied to named employees, that combination is the exact gap this axis exists to find. A no training commitment may well sit behind the accordion, and reading it would move this grade.

The platform does not contact prospects, so the usual form of this axis does not apply, but a second form does and it goes unaddressed. The product scores sales calls and grades recorded pitch practice, which means an artificial system evaluates identifiable people, in most cases the customer's own employees and in the case of call recordings the prospects on the other end as well.

Nothing published states whether call participants are told that a model will analyse the recording, whether employees can see or contest their own scores, or what the vendor's position is on the European transparency obligations that took effect in August 2026. Article 50 is not mentioned anywhere on the site.

More than fifty integrations are claimed and the named ones cover the categories that matter for an enablement layer: a system of record in Salesforce, conversation intelligence in Gong and Chorus, meetings in Zoom, collaboration in Slack and Notion, and import from existing content repositories. Two dedicated setup guides are published rather than merely promised.

Off the top band because the depth is asserted rather than documented: there is no public developer documentation, no interface reference, no webhook catalogue, no marketplace listing and no object level description of what actually syncs in either direction with the customer's system of record.

The residency statement is a single sentence and it points away from specificity rather than toward it. The policy says information will be accessed from, transferred to, stored and used in countries outside the country where the user is located, without naming a single country, region or hosting provider, and without naming any transfer mechanism such as standard contractual clauses or an adequacy framework.

No regional hosting option is offered and no single tenant or private deployment is described. The company states it is established in the United States with a California registered office, which is the only geographic anchor available. Sits above the bottom band because the practice is at least disclosed rather than left silent, and a buyer reading it does learn that cross border transfer will happen.

A trust centre exists at a stable path, carries a last updated date of 26 June 2025, and is organised around the right headings, including what compliance standards the company meets and how customer data is secured. That maintenance and structure is genuine and puts this vendor ahead of the several in this index with no security surface at all.

The problem is retrieval: every answer beneath those headings is rendered client side, the served page returns headings only, and the document offered for download resolves to a page that also requires a browser. The one security text that does render sits in the privacy policy and is a liability disclaimer rather than a control description, stating that no measures are impenetrable and that information sent electronically may not be secure in transit. No certification, audit type, audit period, encryption standard, access control model or penetration test result is readable from the public site.

Pricing is absent from the public site entirely. There is no pricing page, no pricing entry in the navigation, and no pricing link in a footer that otherwise lists more than thirty destinations. The unit of pricing is never named, so a buyer cannot tell whether the product is sold per seat, per platform, by content volume or by usage, and every path converts to a demo request. This matches the pattern already recorded against other enablement vendors in the index.

It sits in the lowest band rather than the second lowest because there is nothing at all to work from: no starting figure, no tier name, no published minimum and no third party price consistent enough to cite.

Customer facing terms and conditions exist as a linked document, which is the distinction that keeps this off the bottom band, since the lowest grade here is reserved for vendors whose only published legal text is a website use notice.

What is not established anywhere public is the substance: no export format, no bulk download of content libraries or course records, no post termination retention window, no deletion timeline and no stated right to retrieve recorded pitch practice or scoring history.

The privacy policy adds a clause that cuts against portability, stating that after a user stops using the service or deletes an account the company will store that information in aggregated and anonymised form and may use it indefinitely without further notice.

The product operates no sending infrastructure, so this axis reaches it only through the general rule that enablement vendors are still graded on what is knowable. No message is sent to a prospect, no domain or address reputation is placed at risk by the tool, and there is correspondingly no warmup, throttling, bounce handling or reputation monitoring to assess. The grade records the absence of an applicable surface rather than a weakness in the product, and it should be read that way when comparing this vendor against sending categories.

The target is stated plainly in the company's own recruiting material as enterprise and mid market sales organisations selling high value solutions, with the buying committee named as revenue leaders, sales enablement and revenue operations. The five named customers are consistent with that claim and cluster in infrastructure and security software.

Vertical pages exist for technology, financial services, healthcare, manufacturing, media and software, and role pages exist for sales leaders, revenue operations and enablement teams. Off the top band because the segmentation lives entirely in marketing pages and is expressed nowhere in product packaging, tiering or price, none of which is published.