What the assistant can see
The assistant reads exactly what you can read, and less: financial columns are hidden by role, crew mode narrows the tools, and client-written text is treated as quoted material.
The assistant runs as you. Every lookup goes through the same row-level security and the same column rules as the pages you already use, so it cannot show you a client, job, or invoice you could not open yourself. Three further limits apply on top of that.
Your permissions decide the tools
Each tool the assistant can call declares the permissions it needs. A user without invoices.read has no invoice tools in the catalog at all; the assistant does not "try and get refused", the tool is simply not offered. The same applies to feature flags: if Route Planner is off for the account, there are no route tools.
Financial columns are redacted, not just hidden
Reports hide cost, margin, and revenue columns from roles that lack the matching permission. The assistant applies the same sensitivity map to every tool result before the model sees it. A redacted amount appears on a card as a dash with a lock glyph, and the model is instructed never to type amounts into prose in any case; numbers you see are formatted by BranchSite from the record, with a link to it.
Crew mode
On My Day, and always for users with the Crew role, the assistant switches to crew mode. The tool set narrows to this visit, this client's contacts and location, what was done here before, your own route for the day, crew notes, completing the visit, help articles, and your clock-in state. Prices, totals, invoices, reports, and other crews' days are not available. If you ask about money in crew mode, the assistant says so once and points you to the office.
Owners can turn page-driven crew mode off in Settings → Assistant → Availability; Crew-role users stay in crew mode regardless.
Text written by clients is data, not instructions
Portal requests, pasted emails, client comments, and notes written by other users reach the assistant inside labeled quote blocks. The assistant is told to treat that text as material to summarize or act on with you, never as a command. Structurally, nothing in that text can cause a change: every write needs your approval on a card.
What is stored
Each thread stores your messages, the assistant's replies, the cards it produced, and the IDs of records it looked up. Threads belong to you; owners with settings.manage can see thread titles, who started them, and when, but not their contents. Threads are deleted after the retention period set in Settings → Assistant → Privacy (30 to 365 days, 90 by default). Approved changes are logged separately and are kept.
Models and retention at the provider
Requests go to the model provider through a gateway under BranchSite's account. Owners who need zero-data-retention routing can require it under Privacy; the assistant then uses only models that keep no prompts or outputs, and deep mode falls back to the standard model.