Classification System
Every incoming issue receives a primary label and, where relevant, a secondary label from the taxonomy below.
| Label |
Scope |
Typical Signals |
| Defect |
Product behaving contrary to specification or expectation |
Error messages, crashes, data rendering incorrectly, regressions, unexpected output |
| Guidance |
Customer seeking instructions or clarification |
"How do I...", "Where can I find...", setup questions, configuration help |
| Enhancement |
Request for new or changed functionality |
"It would help if...", "Can you add...", "Are there plans for..." |
| Billing |
Charges, subscriptions, invoicing, pricing, refunds |
Payment failures, unexpected charges, plan changes, credit requests |
| Access |
Login, permissions, SSO, user management |
Lockouts, password resets, role assignments, MFA issues |
| Integration |
Connectivity with external tools and APIs |
Webhook failures, OAuth errors, sync problems, API response issues |
| Security |
Threats, data exposure, compliance inquiries |
Unauthorized access, vulnerability disclosures, GDPR/SOC 2 questions |
| Data |
Integrity, migration, import/export concerns |
Missing records, duplicate entries, failed imports, export formatting |
| Reliability |
Speed, uptime, or degraded service |
Timeouts, slow loading, 5xx errors, service unavailability |
Choosing the Right Label
- When a customer describes overlapping concerns (e.g., a defect plus an enhancement wish), the root problem determines the primary label.
- A broken workflow the customer used to rely on is a Defect, not an Enhancement.
- A request for the product to work in a new way is an Enhancement, even if the customer frames it as something "not working."
- Prefer Defect when ambiguous -- investigating a potential bug is safer than dismissing one.
Severity Levels
P1 -- Outage / Emergency
The product is completely unusable, data is at risk, or a security incident is underway. The scope is broad (most or all users impacted) or the consequences are irreversible.
- Total service unavailability
- Active data loss, corruption, or unauthorized exposure
- Security breach in progress
- Situation is deteriorating without intervention
Response commitment: First reply within 60 minutes. Continuous engagement until mitigated. Status updates every 1-2 hours.
P2 -- Severe Disruption
A key capability is non-functional, a significant user population is blocked, and no practical workaround exists.
- Core workflow broken but ancillary functions still operate
- Multiple users or a strategically important account impacted
- Time-sensitive operations are stalled
- Reasonable alternatives are not available
Response commitment: First reply within 4 hours. Same-day investigation. Status updates every 4 hours.
P3 -- Moderate Impact
A feature is degraded but usable through an alternate path, or the issue affects a limited audience.
- Functionality is impaired but a workaround is viable
- Impact is inconvenient rather than blocking
- A small group of users is affected
- No urgent pressure from the customer
Response commitment: First reply within 1 business day. Progress update within 3 business days.
P4 -- Minor / Informational
Cosmetic glitches, general inquiries, enhancement ideas, or problems with well-documented fixes.
- Visual imperfections with no functional consequence
- Enhancement suggestions and feedback
- Routine questions answerable from documentation
- Issues resolved by following existing instructions
Response commitment: First reply within 2 business days. Resolution at standard pace.
Conditions That Warrant Upgrading Severity
Raise the severity level when any of the following occur:
- SLA window has elapsed without resolution
- A pattern emerges: three or more customers reporting the same symptom
- The customer explicitly invokes executive attention or threatens churn
- A previously viable workaround ceases to function
- The blast radius expands (additional users, systems, or data affected)
Routing Guidelines
Direct each issue to the team best positioned to resolve it:
| Destination |
Appropriate When |
| Frontline Support |
Known-solution issues, documentation-answerable questions, password resets, simple billing inquiries |
| Senior / Technical Support |
Bugs needing investigation, non-trivial configuration, integration debugging, complex account scenarios |
| Engineering |
Verified defects requiring code changes, infrastructure incidents, performance regressions |
| Product Management |
High-demand feature requests, design-level workflow gaps, prioritization decisions |
| Security Team |
Vulnerability reports, data exposure concerns, compliance-related inquiries |
| Finance / Billing |
Refund approvals, contractual billing disputes, non-standard pricing adjustments |
Identifying Duplicate Reports
Before routing a new issue, check for existing overlap:
- Symptom search: Look for open issues with matching error text or behavioral descriptions.
- Customer history: Verify the same customer has not already filed a related report.
- Feature-area scan: Review recent issues in the same product surface.
- Known-issue registry: Cross-reference against documented active problems.
When a match is found:
- Associate the new report with the existing issue.
- Inform the customer that the problem is tracked and being worked on.
- Append any fresh details or reproduction context from the new submission.
- Re-evaluate severity if the additional report widens the impact.
Initial Acknowledgment Patterns
For Defects
Thanks for letting us know about this. I understand that [specific
disruption] is affecting your work.
This has been logged at [severity] and our team is looking into it.
[If a workaround exists: "While we investigate, you can [workaround]."]
Expect an update from us by [timeframe based on SLA].
For Guidance Requests
Good question! [Concise answer or pointer to documentation]
[For multi-step answers: "Here is a walkthrough:"]
[Numbered steps or explanation]
Let me know if this resolves things or if anything else comes up.
For Enhancement Ideas
Appreciate you sharing this idea -- I can see how [desired capability]
would improve your workflow.
I have forwarded this to our product team. I cannot promise a specific
delivery date, but input like this directly shapes our priorities.
[If a partial solution exists: "In the meantime, [alternative approach]
may help."]
For Billing Concerns
I know billing matters need quick resolution. Let me take a look.
[If straightforward: provide resolution details]
[If investigation needed: "I am reviewing your account and will
follow up by [timeframe]."]
For Security Reports
Thank you for raising this -- we treat security matters with the
highest urgency.
This has been routed to our security team for immediate review.
You will hear back by [timeframe].
[If protective steps are advisable: "We recommend [action] in the
meantime."]
Operational Guidelines
- Read the entire thread before assigning labels -- later messages frequently alter the picture.
- Classify based on the underlying cause, not just the surface symptom.
- When severity is uncertain, round up -- downgrading later is far easier than recovering from a missed commitment.
- Always check for duplicates and known issues prior to routing.
- Attach internal notes summarizing what you have assessed and ruled out, so the next handler can pick up without re-investigation.
- Watch for emerging patterns -- repeated low-severity reports on the same topic may signal a systemic problem that deserves elevated attention.
1---2name: issue-triage3description: Triage support issues by severity, duplicates, ownership, and first-response approach.4---5
6## Classification System
7
8Every incoming issue receives a **primary label** and, where relevant, a **secondary label** from the taxonomy below.
9
10| Label | Scope | Typical Signals |
11|-------|-------|-----------------|
12| **Defect** | Product behaving contrary to specification or expectation | Error messages, crashes, data rendering incorrectly, regressions, unexpected output |
13| **Guidance** | Customer seeking instructions or clarification | "How do I...", "Where can I find...", setup questions, configuration help |
14| **Enhancement** | Request for new or changed functionality | "It would help if...", "Can you add...", "Are there plans for..." |
15| **Billing** | Charges, subscriptions, invoicing, pricing, refunds | Payment failures, unexpected charges, plan changes, credit requests |
16| **Access** | Login, permissions, SSO, user management | Lockouts, password resets, role assignments, MFA issues |
17| **Integration** | Connectivity with external tools and APIs | Webhook failures, OAuth errors, sync problems, API response issues |
18| **Security** | Threats, data exposure, compliance inquiries | Unauthorized access, vulnerability disclosures, GDPR/SOC 2 questions |
19| **Data** | Integrity, migration, import/export concerns | Missing records, duplicate entries, failed imports, export formatting |
20| **Reliability** | Speed, uptime, or degraded service | Timeouts, slow loading, 5xx errors, service unavailability |
21
22### Choosing the Right Label
23
24- When a customer describes overlapping concerns (e.g., a defect plus an enhancement wish), the **root problem** determines the primary label.
25- A broken workflow the customer used to rely on is a **Defect**, not an Enhancement.
26- A request for the product to work in a new way is an **Enhancement**, even if the customer frames it as something "not working."
27- Prefer **Defect** when ambiguous -- investigating a potential bug is safer than dismissing one.
28
29## Severity Levels
30
31### P1 -- Outage / Emergency
32
33The product is completely unusable, data is at risk, or a security incident is underway. The scope is broad (most or all users impacted) or the consequences are irreversible.
34
35- Total service unavailability
36- Active data loss, corruption, or unauthorized exposure
37- Security breach in progress
38- Situation is deteriorating without intervention
39
40**Response commitment:** First reply within 60 minutes. Continuous engagement until mitigated. Status updates every 1-2 hours.
41
42### P2 -- Severe Disruption
43
44A key capability is non-functional, a significant user population is blocked, and no practical workaround exists.
45
46- Core workflow broken but ancillary functions still operate
47- Multiple users or a strategically important account impacted
48- Time-sensitive operations are stalled
49- Reasonable alternatives are not available
50
51**Response commitment:** First reply within 4 hours. Same-day investigation. Status updates every 4 hours.
52
53### P3 -- Moderate Impact
54
55A feature is degraded but usable through an alternate path, or the issue affects a limited audience.
56
57- Functionality is impaired but a workaround is viable
58- Impact is inconvenient rather than blocking
59- A small group of users is affected
60- No urgent pressure from the customer
61
62**Response commitment:** First reply within 1 business day. Progress update within 3 business days.
63
64### P4 -- Minor / Informational
65
66Cosmetic glitches, general inquiries, enhancement ideas, or problems with well-documented fixes.
67
68- Visual imperfections with no functional consequence
69- Enhancement suggestions and feedback
70- Routine questions answerable from documentation
71- Issues resolved by following existing instructions
72
73**Response commitment:** First reply within 2 business days. Resolution at standard pace.
74
75### Conditions That Warrant Upgrading Severity
76
77Raise the severity level when any of the following occur:
78
79- SLA window has elapsed without resolution
80- A pattern emerges: three or more customers reporting the same symptom
81- The customer explicitly invokes executive attention or threatens churn
82- A previously viable workaround ceases to function
83- The blast radius expands (additional users, systems, or data affected)
84
85## Routing Guidelines
86
87Direct each issue to the team best positioned to resolve it:
88
89| Destination | Appropriate When |
90|-------------|-----------------|
91| **Frontline Support** | Known-solution issues, documentation-answerable questions, password resets, simple billing inquiries |
92| **Senior / Technical Support** | Bugs needing investigation, non-trivial configuration, integration debugging, complex account scenarios |
93| **Engineering** | Verified defects requiring code changes, infrastructure incidents, performance regressions |
94| **Product Management** | High-demand feature requests, design-level workflow gaps, prioritization decisions |
95| **Security Team** | Vulnerability reports, data exposure concerns, compliance-related inquiries |
96| **Finance / Billing** | Refund approvals, contractual billing disputes, non-standard pricing adjustments |
97
98## Identifying Duplicate Reports
99
100Before routing a new issue, check for existing overlap:
101
1021. **Symptom search:** Look for open issues with matching error text or behavioral descriptions.
1032. **Customer history:** Verify the same customer has not already filed a related report.
1043. **Feature-area scan:** Review recent issues in the same product surface.
1054. **Known-issue registry:** Cross-reference against documented active problems.
106
107When a match is found:
108
109- Associate the new report with the existing issue.
110- Inform the customer that the problem is tracked and being worked on.
111- Append any fresh details or reproduction context from the new submission.
112- Re-evaluate severity if the additional report widens the impact.
113
114## Initial Acknowledgment Patterns
115
116### For Defects
117
118```
119Thanks for letting us know about this. I understand that [specific
120disruption] is affecting your work.
121
122This has been logged at [severity] and our team is looking into it.
123[If a workaround exists: "While we investigate, you can [workaround]."]
124
125Expect an update from us by [timeframe based on SLA].
126```
127
128### For Guidance Requests
129
130```
131Good question! [Concise answer or pointer to documentation]
132
133[For multi-step answers: "Here is a walkthrough:"]
134[Numbered steps or explanation]
135
136Let me know if this resolves things or if anything else comes up.
137```
138
139### For Enhancement Ideas
140
141```
142Appreciate you sharing this idea -- I can see how [desired capability]
143would improve your workflow.
144
145I have forwarded this to our product team. I cannot promise a specific
146delivery date, but input like this directly shapes our priorities.
147
148[If a partial solution exists: "In the meantime, [alternative approach]
149may help."]
150```
151
152### For Billing Concerns
153
154```
155I know billing matters need quick resolution. Let me take a look.
156
157[If straightforward: provide resolution details]
158[If investigation needed: "I am reviewing your account and will
159follow up by [timeframe]."]
160```
161
162### For Security Reports
163
164```
165Thank you for raising this -- we treat security matters with the
166highest urgency.
167
168This has been routed to our security team for immediate review.
169You will hear back by [timeframe].
170
171[If protective steps are advisable: "We recommend [action] in the
172meantime."]
173```
174
175## Operational Guidelines
176
1771. Read the entire thread before assigning labels -- later messages frequently alter the picture.
1782. Classify based on the underlying cause, not just the surface symptom.
1793. When severity is uncertain, round up -- downgrading later is far easier than recovering from a missed commitment.
1804. Always check for duplicates and known issues prior to routing.
1815. Attach internal notes summarizing what you have assessed and ruled out, so the next handler can pick up without re-investigation.
1826. Watch for emerging patterns -- repeated low-severity reports on the same topic may signal a systemic problem that deserves elevated attention.