Enterprise-Grade Security
Your business data is sensitive. We treat it with the respect it deserves.
Encryption at Rest
All sensitive message content, including subjects and bodies, is encrypted using AES-256-GCM before it ever touches our database. Only our application, running within your secure environment, holds the keys to decrypt it.
PII Scrubbing
We utilize a PII-scrubbed search index. This allows you to perform lightning-fast keyword searches across your inbox without exposing unencrypted Personally Identifiable Information (PII) to the search engine.
Tenant Isolation
Identity lookups are mailbox-isolated. Using a salted email_hash system, we ensure that contact data cannot be correlated across different mailboxes, maintaining strict privacy for your customers.
OAuth 2.0 Native
Connect your Gmail or Outlook accounts using native OAuth 2.0 flows. We never see or store your primary account passwords—only the specific, revocable access tokens required to process your enquiries.
No Third-Party AI, by Default
Reading and classifying your enquiries is done with our own proprietary logic, on our own infrastructure. Your message content is never sent to OpenAI, Anthropic, or any other language model provider to power the core product.
The one exception is opt-in and per-mailbox: if an admin turns on AI reply drafting for a mailbox, then each time someone clicks the “redraft with AI” button, that draft plus the visible email thread with that one contact is sent to our AI provider (Anthropic) to return a rewritten version. It is never automatic, the result is always reviewed and approved by a person before anything is sent, and no other mailbox, contact, or account data is included. Leave the setting off and nothing is ever sent.
When that setting is turned on, we also build a reply library for the mailbox once, and refresh it about monthly: a sample of the mailbox’s own past replies is sent to Anthropic to distil a reusable summary of how the business tends to answer common questions. Personal names, email addresses, phone numbers, postcodes and links are stripped from those samples before they leave our servers. The library is stored on our infrastructure, is fully editable by the account owner, and is used only as background reference for the redraft button — it is never sent to a customer as-is. Turning the setting off stops all of this.
verified Technical Integrity
Our architecture follows the principle of Least Privilege. Background workers and API integrations are strictly scoped to the specific mailboxes and data points they need to function.
Every SQL query involving sensitive data utilizes prepared statements and deterministic hashing to prevent injection attacks and horizontal privilege escalation.