Shared knowledge. Individual access.
A useful company memory should respect the boundaries of the company. Radcliffe checks who is reading before evidence enters an answer, including when the question comes from a connected assistant.
Early-access requests are open. Product onboarding opens later.The access check comes before the answer.
How it worksEvidence the reader may see
Readable passages and derived material enter the answer context.
Available to citeOutside the reader’s access
Excluded from that context. Hidden sources are not suggested.
Not passed to the modelThe reader’s permitted evidence enters the model context. Material outside that access is excluded.
Start with the person, not just their email.
Signing in proves an identity. A person must also be admitted to the company’s workspace, with the appropriate memberships and policies.1
Workspace membership
Company admission and source access are separate. Being able to sign in does not make all company information available.
Personal sources
A personal connection is scoped to the person who added it. Company connections need the appropriate sharing and identity mapping.
People change roles
Membership changes affect what a person may read. Removing a member ends their sessions and tokens.
Check the evidence, including what is built from it.
Access applies to passages and to derived material such as summaries and relationships. A broader summary is not a way around a restricted source.2
Before retrieval and ranking
Search runs through access-aware database functions, so unreadable passages are excluded before ranking.
Before model context
The context check verifies both the organisation and the permitted source classes. Derived material must have readable underlying inputs.
When opening a citation
Opening the supporting passage checks access again. An older answer does not preserve access that the reader has since lost.
Make company boundaries explicit.
Teams, restricted work and information barriers need deliberate configuration. Choosing an industry pack provides terminology and review guidance; it does not create those boundaries for you.3
Restricted engagements
Use configured memberships and information barriers for work that must stay within a particular team.
Preview an audience
Owners and administrators can inspect an audience or person’s view within their own access, with a recorded reason.
Review source sharing
Oversharing review helps inspect source permissions before real company material is enabled.
Questions, answered.
Can a connected assistant read more than I can?
Radcliffe’s MCP requests run as the person who authorised the client. Each search and source read uses that person’s current Radcliffe access. The client’s own handling of returned content is also subject to its provider’s terms and your company’s settings.
Will a refusal reveal that a private document exists?
The answer uses the same refusal when the relevant source is hidden or missing. It does not list the protected document as a suggestion.
Does this replace source permissions?
No. Source permissions, identity mapping and Radcliffe policies work together. The connection must be configured correctly before its material can be made available.
Product details
- Workspace admission is separate from authentication. Identity and membership updates affect the principal used by database access checks; member removal revokes sessions and tokens.
- The context firewall checks organisation ownership and access classes. Derived rows require every underlying input class to be permitted. Source reads apply current access again.
- Audience previews are restricted by the operator’s own access and require a reason. Information barriers and memberships must be configured; an industry pack does not create them automatically.
What would your team ask first?
Tell us about the work and the information behind it.