Privacy, security, and data use
ROSI is designed to provide fast, contextual assistance while maintaining strict security, privacy, and compliance standards. All responses are governed by your organization’s existing access controls and data protections.
Data access and permissions
ROSI does not bypass or expand user permissions. All responses are generated using the same role-based access controls and data segmentation enforced in Workflow.
- Users only receive information they are authorized to access
- Admin-level ROSI capabilities are available only to users with the ROSI Admin User privilege
For information about enabling ROSI or managing access, see ROSI Access, Roles, and Enablement.
Live data usage
ROSI retrieves information directly from your live Workflow environment when responding to a request.
- Task, event, document, and profile information reflects current system data
- Responses may vary slightly if background processing is still in progress
- ROSI maintains conversational context within an active session to support follow-up questions
Protection of sensitive information
ROSI is designed to prevent exposure of high-risk personal data and limit unnecessary data access.
- ROSI does not return Social Security Numbers or other highly sensitive personal identifiers
- Only the minimum data required to answer a request is retrieved
- Sensitive fields may be excluded from responses even when a user’s role permits access
Input safety and request handling
ROSI evaluates user requests before generating a response to ensure safe and compliant behavior.
- Requests are screened for sensitive data exposure, unsafe content, and policy violations
- Potentially unsafe or non-compliant inputs may be blocked, redacted, or handled with a safe response
- ROSI is designed to prevent prompt injection and attempts to override system safeguards
Logging and auditability
ROSI interactions are logged to support monitoring, auditing, and troubleshooting.
- Requests and responses are recorded with timestamps and user identifiers
- Sensitive fields are masked or excluded from logs
- Audit records support review of activity without exposing raw sensitive data
Encryption and data protection
ROSI operates within Rival’s secure infrastructure using modern encryption standards.
- Data is encrypted in transit and at rest
- Protected fields use enhanced encryption methods aligned with enterprise security standards
- User sessions are secured using time-limited, encrypted session tokens
Compliance and governance
ROSI operates within Rival’s established security and compliance framework.
- Access controls follow least-privilege principles
- Operational access is restricted to authorized personnel
- Rival supports data protection requirements such as GDPR and CCPA
Troubleshooting and support
If ROSI returns unexpected results or cannot complete a request, contact Rival Support. Error details are captured in system logs to support investigation and resolution.