Authorised intake
Work arrives through an agreed branch email, approved WhatsApp number or configured telephone route.
Trust, security and human review
Clear boundaries are part of the service.
Tiffbox Assist is designed so the branch stays in control, customer facts remain separated by branch and customer facing work has a real review stage.
The operating model
Four controls before a customer sees anything.
Grounded drafting
The system uses the supplied facts and branch profile. Missing information is surfaced rather than invented.
Human review
A trained Tiffbox reviewer checks customer facing work for facts, tone, risk flags and missing information.
Agency decision
The agency reviews, approves and sends the final customer communication. Tiffbox does not bypass this step.
Data flow
The public website, Hub and Reports service have different jobs.
Public websiteService information and pilot enquiries only
→Private HubBranch data, drafts, approval, usage and delivery
→Reports rendererMinimised figures turned into email, web and PDF reports
The public marketing site has no access to Hub clients, drafts, properties, report tokens or operational Blob stores.
Branch isolation
One branch cannot become another.
Branch work is namespaced and matched through exact branch identifiers and authorised contact routes. Unknown or ambiguous inputs are quarantined rather than guessed.
- Separate branch records and allowances
- Exact access lists
- Token bound reports and portal pages
- Cross branch requests rejected
WhatsApp identity
Unknown numbers are not trusted.
An unrecognised sender is held outside the branch workflow until a Tiffbox reviewer verifies the person through an authorised route.
- No draft before approval
- Unknown audio is not transcribed first
- Approved numbers can be revoked
- Held message is released once
Report minimisation
Reports show performance, not customer records.
The Hub calculates the figures. The Reports service receives client safe labels and aggregate totals, not raw enquiries, caller records or contact lists.
- No sending credentials in the renderer
- No customer contact details in report metrics
- Expiring and revocable portal links
- Separate report record and lightweight Hub pointer
High risk work
Routine work and professional advice are not treated alike.
Possession, deposits, arrears, legal threats, complaints and professional advice requests are escalated rather than improvised as ordinary send ready drafts.
- Risk classification
- Missing facts identified
- Human escalation
- No compliance avoidance
What human checked means
A named stage, not a marketing phrase.
The reviewer may change as Tiffbox grows, but the standard remains the same. Customer facing work is not presented as ready until a trained person has reviewed it.
01
Fact check Against the supplied instruction and property record.
02
Missing information Confirmed as present, absent or needing the branch.
03
Tone and branding Matched to the branch profile and output audience.
04
Risk boundary High risk or professional advice issues are escalated.
05
Agency control The finished draft still goes to the branch for approval and sending.
Service providers
Specialist infrastructure, limited to the job it performs.
Depending on the enabled services, Tiffbox uses providers including Netlify, Anthropic, Resend, Make, Deepgram, Twilio and Vapi. The current subprocessor schedule and contractual terms govern their use.
NetlifyAnthropicResendMakeDeepgramTwilioVapi