Ground Your Assistant on CRM + Docs Without Leaks
Published 2025-08-11
Great assistants know the customer, what they bought, and what you promised. The art is giving them just enough context—without turning your CRM into an all-you-can-eat buffet.
Principles
- Least privilege: read only the fields a task needs.
- Mirror ACLs: the assistant mustn’t see what a user may not.
- Citations: every claim should trace back to a record or doc.
- Redaction: mask payment data and sensitive notes by default.
Implementation pattern
- Map intents to data (fields/docs required).
- Add a retrieval layer that fetches on demand, not “slurp everything”.
- Format answers with source badges (CRM record, policy doc link).
- Fallback on low confidence or missing data; never guess.
Auditing & improvement
Log every data access, review transcripts weekly, and fix root causes: missing docs, ambiguous rules, or retrieval scope that’s too broad.