Rules you can read
Per organisation: event type, filters (sites, devices, analytes, minimum severity), recipients (users, roles, extra emails, a webhook), channels (in-app, email, webhook), whether acknowledgement is required and how long the window is, quiet hours and duplicate suppression. A default set is seeded once and is yours to edit.