While automation processes operate efficiently, data security and privacy protection remain core concerns for enterprises. GoInsight.AI's Interactive Flow supports flexible security control configurations, implementing layered defenses from access permissions to data interaction links, ensuring automated processes execute securely within controlled environments.
After creating a interactive workflow, you can also configure the following security settings:
1. Restrict Access with Password or IP Whitelisting to Protect Your Data
- Purpose
- A dual mechanism of password verification and IP whitelisting ensures that only authorized users can trigger or access the interactive workflow, preventing malicious attacks and data leaks.
- Application Scenarios
- Financial Industry Compliance: Restrict access to conversation flows containing customer privacy data to internal IPs or VPN channels only.
- API Abuse Prevention: Set dynamic passwords for externally facing bots to prevent unauthorized third-party calls.
2. Restrict Access to Internal Enterprise Personnel Only
- Purpose
- When enabled, only accounts within this organization that are already logged into GoInsight Workspace can access or trigger this interactive workflow (Bot).
- Application Scenarios
- Internal Business Operation Entry: For conversational capabilities involving system writes or sensitive actions such as "Create Ticket," "Update CRM," or "Device Operation," callers must have organizational identity and permissions, enabling audit traceability.
- Cross-Department Collaboration Dedicated Bot: Used for internal collaboration and execution within specific teams or projects, not intended to be accessed by external channels or non-organizational users.
3. Domain Whitelist
- Purpose
- Only requests originating from specified domains can trigger the workflow, blocking unauthorized access from phishing sites and crawler bots at the source.
- Application Scenarios
- E-commerce Customer Service Bot: Restrict access to the company's official website domain only, preventing external platforms from maliciously scraping promotional strategies.
- Cross-System Data Synchronization: Only authorized partner domains can trigger supply chain information synchronization workflows.
Leave a Reply.