Enterprise-Grade Security
Your business data is sensitive. We treat it with the respect it deserves.
Encryption at Rest
All sensitive message content, including subjects and bodies, is encrypted using AES-256-GCM before it ever touches our database. Only our application, running within your secure environment, holds the keys to decrypt it.
PII Scrubbing
We utilize a PII-scrubbed search index. This allows you to perform lightning-fast keyword searches across your inbox without exposing unencrypted Personally Identifiable Information (PII) to the search engine.
Tenant Isolation
Identity lookups are mailbox-isolated. Using a salted email_hash system, we ensure that contact data cannot be correlated across different mailboxes, maintaining strict privacy for your customers.
OAuth 2.0 Native
Connect your Gmail or Outlook accounts using native OAuth 2.0 flows. We never see or store your primary account passwords—only the specific, revocable access tokens required to process your enquiries.
verified Technical Integrity
Our architecture follows the principle of Least Privilege. Background workers and API integrations are strictly scoped to the specific mailboxes and data points they need to function.
Every SQL query involving sensitive data utilizes prepared statements and deterministic hashing to prevent injection attacks and horizontal privilege escalation.