Security Architecture
Enterprise-grade protection built into every layer.
1. Infrastructure & Hosting Security
- EU Data Sovereignty: Core APIs run on Google Cloud Platform containerised infrastructure located in the EU (
europe-west1). - Encryption in Transit: All communication is encrypted using TLS 1.3.
- Encryption at Rest: Sensitive data is encrypted using AES-256.
2. Authentication & Access Control
- Google OAuth 2.0: We use Google’s official OAuth 2.0. We never see or store your Google password.
- Domain Isolation: Private deployments can be restricted via Google Admin policy strictly to authorised internal groups.
3. AI Processing & Data Isolation
Zero Model Training
Customer data is never fed back into public foundational AI models for training or fine-tuning.
Stateless Processing
Email text is processed transiently in-memory and discarded immediately after returning the draft string.