Assistant Data Boundaries

OrviQ Assistant operates under strict boundary guarantees to protect customer confidentiality.

---

Data Boundary Guarantees

1. Grounded Only in Authorized Data: The Assistant only retrieves records matching the authenticated user's tenant context and assigned role permissions.
2. Segregated Product Knowledge: Public product documentation is stored in a separate, tenant-agnostic corpus. Customer tenant data is never indexed into this shared public space.
3. No Training on Customer Data: Data sent for inference is governed by enterprise API terms with providers that prohibit training on enterprise data.
4. Prompt-Injection Defense: The Assistant sanitizes grounding data and enforces system-level constraints to prevent prompt override attacks.