Frequently Asked Questions

Falkor is built for teams that run investigations. This includes law enforcement, financial crime units, corporate security teams, and cyber intelligence analysts. It’s used to bring together data from multiple sources, connect entities, and make sense of complex cases. Teams use Falkor to analyze information, uncover relationships, collaborate on findings, and produce clear reports for decision-making.

Falkor is designed for investigations that involve multiple data sources, evolving leads, and the need to connect information over time. It can start from anything—a person, a company, a topic, an event, or even a single data point—and expand as more data is added from internal systems and external sources. Teams use Falkor to make sense of both historical and real-time data, understand relationships between entities, and identify patterns or anomalies. It is especially useful when investigations require collaboration, clear visibility through maps, timelines, and link analysis, and structured reporting for decision-making. This applies across domains such as financial crime, law enforcement, fraud, cybersecurity, and corporate risk.

Yes, we offer both options. We also offer a hybrid solution, leveraging the advantages of both.

Yes. Falkor is used by both public and private sector teams, including law enforcement, financial institutions, corporate security, and cyber intelligence units. The common thread is the work, not the industry. If your team runs investigations, handles complex data, or needs to connect information across sources, Falkor fits into that workflow. It adapts to different environments, data types, and operational needs, whether you're tracking fraud, investigating threats, or managing internal risk.

Falkor is built for team-based investigations. Multiple users can work on the same case in real time, with shared visibility across data, findings, and progress. Teams can assign cases, manage tasks, leave notes, and track updates as the investigation evolves. Everything stays in one place, so there’s no need to switch tools or chase context. This makes it easier to stay aligned, move faster, and avoid duplicated work.

Your data stays yours, secure, controlled, and fully traceable. Falkor can be deployed in the cloud or on-prem, with role-based access and audit trails to ensure only the right people can access it. Everything you add, including files, notes, searches, and case activity, is stored safely and remains available over time, so nothing is lost or needs to be recreated. As data accumulates, Falkor connects it by linking entities, surfacing patterns, and helping you revisit past work. In that sense, it becomes your investigation brain, remembering everything while keeping it structured, searchable, and secure.

Yes. Falkor allows you to enrich your investigations with data from a wide range of open-source intelligence sources. This includes information from public records, social media, online platforms, and other specialized datasets. Using Falkor’s profiling and enrichment capabilities, you can expand on existing leads, uncover additional identifiers, and build a more complete picture without leaving the platform. This helps reduce manual searching and keeps all relevant intelligence in one place.

Falkor is built to handle large-scale investigations. Data volume is measured by the number of entities extracted from your data, such as people, organizations, accounts, or events. The platform can scale to billions of entities, depending on deployment and infrastructure.

In practice, this means you can work with very large datasets without needing to split your investigation. When analyzing data, Falkor helps you focus on relevant subsets, so visualizations stay clear and usable even within complex cases.

Yes. Falkor supports importing data from a wide range of file types, including CSV, Excel, PDFs, and more. This means you can work with the data you already have, without needing to reformat or rebuild it first.

Once uploaded, Falkor can process unstructured files using OCR to extract text from images or PDFs, and NER to identify key entities such as people, organizations, and locations.

Beyond standard uploads, Falkor also allows you to define your own data structures using a no-code interface, so you can map files to entities and relationships in a way that fits your investigation. This makes it easy to bring in both structured and unstructured data and start working with it immediately.

Yes. Falkor supports connecting external data sources through APIs and integrations. Today, most connections are set up with the help of the Falkor team to ensure they are configured correctly and securely.

Once connected, data can flow directly into your investigations, allowing you to enrich cases without switching between systems or copying information manually. Over time, more integrations are becoming easier to configure directly through the platform.

Yes. Falkor allows you to export both structured data and investigation outputs. You can generate Word reports directly from a case, including notes, screenshots, and selected entities, whether the investigation is ongoing or complete. You can also export entity data to Excel, including their attributes, for further analysis or sharing. This makes it easy to move from investigation to reporting without rebuilding your work outside the platform.

Falkor supports multiple ways to analyze and understand your data, depending on the investigation. You can explore how events evolve over time using timelines, track movement and location patterns through map-based views, and uncover relationships between entities with link analysis. The platform also includes analytics dashboards that help you work with different types of data, from communications and transactions to social media, documents, and more. Together, these views give you different perspectives on the same data, so you can move from raw information to clear insight more quickly.

Yes. You can learn Falkor both independently and with guided support. The Academy offers on-demand courses you can take at your own pace, as well as live sessions with instructors if you prefer a more hands-on approach. Most users can learn the core features in a few hours and start working on real cases shortly after. For advanced users, additional training covers areas like data configuration and user management. Courses are available in multiple languages, including English and Spanish, with live sessions offered based on need.

Falkor is built with security at its core. Access is tightly controlled, and all activity is traceable across the system. Falkor complies with ISO 27001 standards, ensuring data is handled according to established security and risk management practices.

This allows teams to collaborate without compromising control or data protection. For more details on security, compliance, and infrastructure, visit our Trust Center: https://falkor.ai/about-us/trust-center/

Falkor brings data, analysis, and collaboration into a single workflow. Instead of switching between tools, teams can ingest data, enrich it with OSINT, analyze relationships, and manage cases in one place. It works with both structured and unstructured data, including forensic data, so teams can investigate across digital evidence, communications, and external sources in one environment. Falkor applies AI to surface insights and keeps all work traceable and shareable, making investigations more connected and efficient from start to finish.

If you’re comparing platforms, we’ve also put together detailed breakdowns of how Falkor compares to tools like i2 and DataWalk:
https://falkor.ai/resources/blog/i2-vs-falkor-which-investigation-platform-fits-your-team-best/
https://falkor.ai/resources/blog/datawalk-vs-falkor-which-is-right-for-your-organization/

Falkor is designed to work with a wide range of data types, both structured and unstructured. This includes documents, spreadsheets, communications data such as CDRs, financial records, social media content, images, videos, and digital forensic data such as mobile extractions.

Data can come from uploaded files, connected internal databases, or external sources. Falkor also provides built-in OSINT enrichment, allowing teams to expand leads with data from public records, online platforms, and other open sources directly within the system.

All data is then structured into entities and relationships, so investigators can analyze different sources together rather than in isolation.

Most teams can get started quickly. Initial onboarding typically takes around two days, giving users enough time to learn the core features and begin working on real cases. From there, teams can expand usage gradually, adding data sources and refining workflows as needed. Falkor is designed to deliver value early, without long implementation cycles.

Yes. Falkor is designed to support collaboration across teams, departments, and even agencies. Work can be organized into separate workspaces, allowing different teams to manage their own investigations while keeping data isolated and controlled. At the same time, permissions can be configured to share relevant data when needed.

This makes it possible to collaborate across organizational boundaries while maintaining structure, security, and clear ownership of data.

Yes. Falkor is designed to work alongside your existing systems and data sources. Teams commonly integrate internal databases such as government or public records, vehicle registries, company registries, case management systems, and other intelligence repositories.

These connections allow data to flow directly into Falkor, where it can be combined with other sources and analyzed in context. Once ingested, the data becomes part of a single investigation workflow, so teams can work across systems without switching tools or manually moving information.