Triage notes
The Triage note playbook block writes a note into the alert summarising what the workflow found. Analysts can also ask for a draft note from the alert page. Drafts are marked as AI-written until edited; the audit trail keeps both versions.
Shift handover
Every eight hours the platform composes a handover digest per organization: what came in, what is open, what is waiting on whom. It is delivered to the analysts who opted in and posted to the open board. The digest is assembled from platform state and, where a model is configured, summarised in prose.
Report drafts
In the report editor, Draft with AI fills a section from the attached cases and captures. The draft is marked and remains marked until an analyst edits it, so every published report has passed through a person.
Data flow
All of the above send alert and case material to the configured model endpoint and nowhere else. With a self-hosted model, that material stays inside the deployment. See Model setup.