Invite-only owner access
Cognito self-registration is disabled, one exact verified owner email is allowed, software-token MFA is required and only the public TLS proxy accepts internet traffic.
Mailbox credentials stay server-side
The active mailbox credential is never returned to the browser. The single-owner deployment persists it as an AES-256-GCM authenticated record whose key is kept separately.
AI receives bounded working context
Requested runs may include relevant message text, bounded search results, correlated Sent excerpts and the working profile. Passwords, attachment bytes, logo bytes and full mailbox dumps stay out of model input.
External actions wait for the owner
Sending, forwarding, moving and deleting become immutable proposals. AI replies remain editable drafts and the model cannot call the owner-only approval action.
Current infrastructure limit
The beta runs one owner, one active mailbox, one host and one Availability Zone. It has no multi-region failover, external certification or formal uptime SLA and is not safe to scale by adding users or replicas.