Secure flow scenarios

AI-generated summary

Genesys Cloud allows implementing secure call and bot flows for two scenarios: agent-referred secure sessions and IVR-only secure sessions without agent interaction. In IVR-only secure sessions, callers can indicate preferences verbally to reach desired destinations without exposing sensitive information to agents or capturing it in recordings or logs. Most commonly, agents transfer callers to Architect secure flows when sensitive payment or consumer data is required, avoiding monitoring, recording or coaching of that portion. Flows can return callers to the original reserved agent. Without reserving agents, flows should disconnect agents after the transfer. For IVR-only secure sessions without agents, callers navigate automated flows until reaching a secure payment flow where the system prompts for sensitive information without logging or tracing it. Genesys Cloud's secure call flows provide a secure communication channel between consumers and agents. Secure flows require authentication and encrypt communication, providing security for sensitive data. Secure flows end with a Transfer or Disconnect action, with the consumer able to disconnect anytime. Architect enables building secure call flows without agent contact that end with the Disconnect action.

Series: Secure flows in Architect

Previous suggested step: Secure flows overview

Next suggested step: Work with secure call and bot flows

Secure flows are primarily implemented for two scenarios: Agent-referred secure sessions and IVR-only secure sessions (no agent interaction or ACD routing). IVR-only secure sessions provide automated support for customers and typically eliminate the need for a live agent. This process lets callers indicate their preferences verbally (or press a button) to reach the desired destination. Sensitive information is not:

Captured in recordings
Present in log files
Visible or audible to agents or monitoring users

Note: Genesys Cloud allows you to retrieve a trunk’s protocol diagnostics logs to help diagnose call issues. When you enable diagnostic recordings options for troubleshooting purposes, the system does not encrypt data. However, if you are a PCI compliant Genesys Cloud organization and have the PCI DSS setting enabled, Genesys Cloud disables the Media Capture and Protocol Capture settings. For more information, see Enable media capture and Enable protocol capture.

Secure session initiated by an agentClick to expand

Most commonly, an agent refers the call to an Architect secure flow for the portion of the call that involves sensitive payment or other consumer data. When initially connected, a supervisor can monitor, record, and coach the interaction–making sensitive data available to others. When the caller must provide sensitive data, the agent transfers the caller to a secure flow.

To provide seamless customer service, flow authors can design secure flows to return consumers to the agent with whom they were originally speaking. In this case, the agent stays on the line and is “reserved” for the consumer. The system does not assign new calls to the agent during this time. Any path through the secure flow that ends with the Return to Agent action automatically reconnects the consumer to this reserved agent. If the flow transfers the consumer or the consumer chooses to disconnect, the agent automatically exits the “reserved” status to receive other calls.

Note: If the agent disconnects while the caller is still in the secure flow, the caller can continue the secure session but does not return to the original agent. The caller must choose a transfer option to remain in the system.

If the Genesys Cloud customer does not want to reserve agents while consumers navigate the secure flow, design the flow so that each path ends with a Transfer action (to the original queue, another queue, or some other destination) or a Disconnect action. Do not end the path with an Return to Agent action. The agent’s script should then automatically disconnect or specify that the agent manually disconnect after sending the call to the secure flow. This step does not disconnect the consumer, but signals the system that the agent has completed participation in the interaction.

Note: Agent-initiated secure call flows end with the Return to Agent action.

Secure session without an agentClick to expand

In this case, the caller navigates the automated flow without agent contact. At a designated point in the flow, the system sends the caller to a secure session such as a payment processing flow, and the original session disconnects. During the secure session, the system prompts the caller for sensitive information. The system can read back the secure information to the caller, but does not log or trace the presented information.

Design secure IVR flows intended for use without agents so that you ensure no path through the secure flow ends with the Return to Agent action. This action is designed for use with secure flows that return the consumer to a reserved agent. Instead, every path through the secure flow should end with a Transfer action (to another queue or some other destination) or a Disconnect action. The consumer is also free to disconnect at any time.

Note: Secure call flows without agent contact end with the Disconnect action.

For more information about using secure flows in Architect, see Work with secure call flows.

[NEXT] Was this article helpful?

Get user feedback about articles.

Secure flow scenarios View summary

Series: Secure flows in Architect

[NEXT] Was this article helpful?

Secure flow scenarios