Privacy, Security, and Limits
What your Orderful agent can see, what it never shares, how changes are controlled, and what to keep out of the channel.
Beta: invite onlyThe Shared Slack Agent is a beta feature, available only to customers Orderful has invited. What it can do and how it works may change as we improve it, and it may occasionally be slow or unavailable. To ask about access or share feedback, contact your Orderful representative.
Your Orderful agent is built to help only your company, with safeguards that limit what it can see, do, and say. These safeguards are enforced by Orderful's systems, not just by the agent's instructions.
What the agent can access
- Your company's Orderful account: your EDI accounts, partnerships, documents, guidelines, testing progress, and trade requests, the same things your company can see in the Orderful app.
- Your partners' side of a shared partnership, where needed to answer a question or make a change you approved, and only for partnerships with your company that are still active.
- Public trading partner information on the Orderful network: a partner's name, ISA ID, programs, and published requirements, one partner at a time.
- The Slack thread it's mentioned in, so it can follow the conversation, including screenshots, PDFs, and text files posted in that thread when they're relevant to your request.
It doesn't read other Slack channels, direct messages, or files posted outside the thread, and it has no access to systems outside Orderful.
What the agent never shares
- Other Orderful customers. It won't name them, confirm whether a company is an Orderful customer, or share anything about their accounts. When a search turns up a company that isn't a trading partner, the agent simply says it couldn't find a trading partner by that name.
- Network-wide information. No counts, rankings, or lists, such as how many companies use Orderful or who else trades with a partner.
- Orderful's internal details: internal record IDs, staff notes, internal tickets, or how Orderful's systems work behind the scenes.
Your own information, such as your ISA ID and transaction or PO numbers, is fine for the agent to share with you.
How changes are controlled
- The agent shows every change as a proposal before acting. See Approve Changes.
- Only the person who requested a change can confirm it.
- Test documents are created on the test stream. Moving a partnership to live is handled by your Orderful team.
- Orderful's team sees a summary of what the agent does in your channel.
Keep secrets out of the channel
Never post passwords, API keys, certificates, or other credentials in the channel, even if you're asked. The agent never asks for them. If you need to share a login, for example for a partner's portal, use the Credential Vault in the Orderful app.
Files are treated the same way. Only post files that everyone in the channel may see, and remove passwords or personal details from screenshots first. The agent uses what's in a file to answer your question, and doesn't repeat long passages or personal details back into the channel.
Everything in the shared channel is visible to everyone in it, including people from Orderful, and Slack keeps it according to your workspace's retention settings. Treat it like any other shared channel.
The agent is AI, so check what matters
The agent uses AI to understand your request and write its reply. It works from live data in your Orderful account, but it can still misread a request or summarize something imperfectly.
- For decisions that matter, such as go-live dates, financial amounts, or anything you'll send to a partner, check the details in the Orderful app or with your Orderful team.
- If an answer looks wrong, say so in the thread with a mention. The agent will take another look, and the Orderful team will see the exchange.
Related
Updated about 2 hours ago