Security

Encryption everywhere

TLS 1.3 protects your data in transit and AES-256 protects it at rest. Every message you send is signed and verified with DKIM, SPF, and DMARC, so recipients know it is really you and no one can send in your name.

Privacy by default

We are paid by subscriptions, and only by subscriptions. Your messages are never sold, never scanned for ads, and never used to train AI models. When our assistant helps, it acts only when you ask it to.

Access you control

• One sign-in across the suite, issued and verified by our own identity provider rather than delegated to anyone else.
• Granular admin controls and a full audit log of workspace activity.
• Choose the region your data is stored in, and keep it there.

Independent verification: where we actually are

We are working toward a formal independent security attestation. We are not there yet, and we would rather tell you that than show you a badge we have not earned.

Until then, the offer is better than a logo: ask us anything. We will complete your security questionnaire, walk your team through the architecture, and put an engineer on the call rather than a salesperson.