Triage notes
The Triage note playbook block writes a short note on the alert from everything the run gathered: what happened, why it matters, what was already checked and what to do next. Place it after your evidence steps.
Shift handover
Every eight hours the platform composes a handover digest per organization: what came in, what is open, what is waiting on whom. It arrives as the Shift handover digest notification. The digest is assembled from platform state and, where a model is configured, summarised in prose.
Report drafts
In the report editor, Draft the empty sections writes the sections that have no text yet from the attached cases and captures. It never states a figure that is not in the material, and nothing is delivered until an analyst publishes the report.
Data flow
All of the above send alert and case material to the configured model endpoint and nowhere else. With a self-hosted model, that material stays inside the deployment. See Model setup.