Privacy / Vault rules

Flowchart

flowchart TD
  A[Need a credential?] --> B[Open Vault]
  B --> C[Reveal / copy when required]
  C --> D[Use in portal or product UI]
  D --> E[Do not paste into Buddy]
  E --> F[Ask Buddy about process — not passwords]

Steps

1. 1 Store organisation and personal credentials in Vault, not in chat history or Buddy prompts.
2. 2 Reveal or copy a secret only in Vault when a portal or product UI needs it.
3. 3 Never paste API keys, DSC PINs, bank passwords, or OTP codes into Buddy.
4. 4 Ask Buddy how a workflow works or what to check — not to hold or transmit secrets.
5. 5 If a secret may have been exposed, rotate it in Vault and review Shared Access / Audit Logs.