Runs in your environment
The customer operates the Docker deployment, network, monitoring and backups.
HR Companion Trust Center
Security and privacy you can verify.
HR Companion connects Microsoft Teams to Oracle HCM while preserving the customer’s control over identity, permissions, infrastructure and operations.
Customer-operated · Fusioh-owned product
Oracle remains the authority
Oracle identities, roles and data permissions continue to determine what each user can access.
No recurring platform subscription
HR Companion is delivered under a perpetual licence included in the fixed-price engagement.
No standing Fusioh access
Fusioh is not granted production access by default. Any support intervention must be authorised by the customer.
Architecture
A short, controlled path to the system of record.
The interaction stays within services controlled by the customer or provided under its contracts. Fusioh does not operate a separate HR database.
01
Microsoft Teams
Authenticated employee or manager
02
HR Companion gateway
Identity verification and signed user context in the customer-operated runtime
03
Oracle AI Agent Studio
Agent orchestration and approved MCP tool calls
04
HR Companion MCP
User-context verification and delegated Oracle access
05
Oracle HCM Cloud
Authoritative data, roles and business rules
Oracle remains the system of record.
HR Companion presents Oracle data and prepares supported actions in Teams. It does not create a Fusioh-hosted copy of the customer’s HCM data.
Delivery model
Delivered to your environment. Controlled by your team.
HR Companion is delivered through a fixed-price implementation. Fusioh retains ownership of the product, while the customer receives a perpetual licence to deploy, operate and internally modify the delivered version, with source-code access subject to the signed agreement.
Perpetual licence
Included in the implementation engagement.
Source-code access
The delivered version can be adapted for internal needs.
Customer operations
Infrastructure remains under the customer’s control.
Optional support
Maintenance and assistance are contracted separately.
Microsoft and Oracle services continue to be supplied under the customer’s own agreements.
Identity & access
Verified identity. Bounded authority.
HR Companion is designed to act within the user’s permissions, never beyond them. The customer’s Oracle configuration remains the source of authority.
Verified Microsoft identity
Teams identity tokens are checked on the server before the user context is accepted.
Short-lived signed context
Internal user context is signed, expires quickly and is not inferred from a display name.
Delegated Oracle access
The intended production configuration calls Oracle with the authenticated user’s delegated identity.
Restricted capabilities
Available tools and queries are allowlisted, and manager actions are limited to authorised populations.
Data & retention
No central HR database at Fusioh. Retention defined with the customer.
Each platform has a distinct role and lifecycle. The deployment-specific retention schedule is agreed with the customer rather than hidden behind a generic SaaS statement.
| Location | What may exist there | Retention owner |
|---|---|---|
| LocationOracle HCM | What may exist there Authoritative HR records and business data. | Retention owner Customer, according to its Oracle policy and agreement. |
| LocationOracle AI Agent Studio | What may exist there Authorised session and execution traces for monitoring and troubleshooting. | Retention owner Customer, according to its Oracle configuration and agreement; Oracle publishes no universal trace duration. |
| LocationCustomer HR Companion runtime | What may exist there Limited user, tenant and conversation-routing metadata required for Teams interactions. | Retention owner Customer, according to the deployment configuration and project retention schedule. |
| LocationMicrosoft Teams / OneDrive | What may exist there Messages and generated files delivered to the user. | Retention owner Customer, according to its Microsoft 365 retention policies. |
What Oracle states about AI processing
Oracle’s published AI assessment states that customer data does not persist in the underlying large language model after a prompt is processed, and that prompt data does not train that model. AI Agent Studio monitoring sessions and execution traces are a separate layer available to authorised administrators.
Oracle’s public monitoring documentation does not state a universal retention duration for those traces. The applicable lifecycle must be confirmed against the customer’s Oracle configuration and agreement.
What Fusioh does not do by default
- No central Fusioh-hosted copy of production Oracle HCM data.
- No standing access to the customer’s production environment.
- Oracle access tokens are held only as required at runtime and are not written to the product’s persistent store.
Responsible AI
An assistant, not an autonomous HR decision-maker.
HR Companion helps employees and managers find information, prepare actions and complete authorised HR workflows. It is not intended to make autonomous decisions about recruitment, compensation, promotion, disciplinary action or termination.
Oracle-grounded context
Responses are constrained by the authenticated user’s Oracle access and the tools enabled for the delivery.
Human control
Supported write flows include a preview and an explicit, short-lived confirmation associated with the user.
Delivery-specific scope
Enabled capabilities, sensitive fields and confirmation controls are documented for each customer delivery.
Shared responsibility
Security starts with clear ownership.
HR Companion is not a Fusioh-operated SaaS. Product security and infrastructure operations are therefore assigned to different parties.
| Fusioh | Customer | Microsoft & Oracle |
|---|---|---|
| Fusioh Security of the delivered software | Customer Hosting, network and container platform | Microsoft & Oracle Security and availability of their cloud services |
| Fusioh Product code and deployment guidance | Customer Secrets, monitoring and backups | Microsoft & Oracle Tenant services under customer agreements |
| Fusioh Remediation of delivery non-conformities covered by the agreement | Customer User access and Oracle/Teams configuration | Microsoft & Oracle Their retention and service controls |
| Fusioh Optional maintenance and assistance | Customer Updates and operation of modified versions | Microsoft & Oracle Their contractual commitments |
Fusioh does not provide an infrastructure uptime SLA, backup service, RTO or RPO for a customer-operated deployment.
Evidence
A review shaped around the delivered system.
Evidence is shared at the level appropriate to the request. We do not present supplier certifications as Fusioh certifications.
Public
Trust overview
- Architecture and data flow
- Shared-responsibility model
- Privacy and responsible-AI summary
Prepared for review
Delivery-specific review
- Data inventory and flow mapping
- Retention and support-access decisions
- Enabled controls and questionnaire responses
Scoped when required
Technical review
- Detailed architecture walkthrough
- Relevant test and dependency evidence
- Review of sensitive configuration and remediation measures
Frequently asked questions
Direct answers for security, privacy and procurement teams.
Is HR Companion a SaaS product?
No. It is deployed and operated in the customer’s environment. There is no recurring Fusioh platform subscription.
Who owns the software?
Fusioh retains product ownership. The customer receives a perpetual licence, source-code access and internal modification rights under the signed agreement.
Can Fusioh access production?
Not by default. Any support access must be specifically authorised, time-limited and controlled by the customer.
Where is HR data stored?
Oracle HCM remains the system of record. HR Companion does not maintain a central Fusioh-hosted copy of that data. Limited technical metadata may exist inside the customer-operated deployment, while AI Agent Studio may retain monitoring traces.
How long is data retained?
Fusioh does not set a single retention period for a customer-operated deployment. Retention depends on local configuration, Microsoft and Oracle services, and the project-specific schedule.
Is customer data used to train AI?
Fusioh does not train a separate model with production HR data. Oracle states that customer data does not persist in the underlying model after processing and that prompt data does not train that model; Oracle monitoring traces remain a separate consideration.
Is ongoing support included?
Delivery acceptance and agreed warranty obligations are defined in the project terms. Ongoing support, maintenance and compatibility updates are optional services contracted separately.
Security review
Preparing for a CISO, DPO or procurement review?
Tell us which evidence your team needs. We will map the delivered product, the customer-operated environment and the Oracle and Microsoft responsibilities instead of sending a generic SaaS security pack.
Commercial enquiries submitted through this site are covered by our privacy notice. Privacy & legal