What is the RFF Companion?
The RFF Companion is a small helper that runs in your Windows session on computers managed by your IT team with RFF. It has exactly two jobs: showing you notifications from IT (an upcoming install, a restart you can postpone, confirmation that something finished), and hosting Self Service - the catalog where you can install IT-approved software yourself with one click, no admin rights needed.
What it can do
Display messages your IT team configured, and send back which button you clicked or which catalog app you requested. Requests are IDs, not commands: every install is validated and executed by the RFF platform under your IT team’s policies and audit log.
What it can’t do
It doesn’t capture your screen, read your files, log your activity, or execute anything it receives. It makes no network connections of its own - everything arrives through the local RFF Agent service over a local pipe, including app icons. It runs with your normal user permissions, never elevated.
Verify it yourself
Don’t take our word for it - these claims are properties of the architecture, not policy promises:
- No network activity: watch the process in Resource Monitor - it opens no sockets, ever.
- No elevation: check the process in Task Manager’s Details tab - it runs at medium integrity as the signed-in user.
- Identity: the binary’s file properties (right-click → Properties → Details) identify RFF and this page.
Seeing it in Task Manager?
That’s expected - one Companion per signed-in user, launched by the RFF Agent service. Your IT team controls whether its tray icon is visible. If you have questions about why it’s on your computer, your IT team is the right contact; they chose what it shows and offers.
For IT teams and security reviewers: the Companion ships with the RFF platform agent; the Self Service catalog is available on every plan, including Free, up to your endpoint limit (see pricing). The display-only pipe contract - render instructions down, constrained answers up, nothing executable in either direction - is the design boundary; we’re happy to walk your security review through it.