Security
Your customers' emails, handled with care
Mailnitio processes the messages your customers send you. This page explains how we protect them, in every industry.
Personal data masked
Account numbers, phone numbers, card numbers and IDs are hidden before any automated processing.
Your data stays yours
Each workspace is isolated. Your emails are never used to train another company's Autopilot.
Role-based access
Owners, supervisors, agents and viewers each see only what their role allows. Data is encrypted at rest and in transit.
Full audit trail
Every email, decision and action is logged and searchable for audits.
Personal data masking
Personal data is hidden before Autopilot reads an email
Before any email text reaches a model, personal details are replaced with placeholders. Mailnitio Autopilot decides on the masked text only, and the original stays in your workspace.
What is masked
- Names
- Account numbers
- Phone numbers
- Card numbers
- National IDs
Workspace isolation
Your workspace is separate from everyone else's
Data from one workspace can never be read from another. The separation is enforced by the database itself, not only by application code.
- Every record belongs to one workspace
- Isolation is enforced in the database with row-level security
- Your emails never train another company's Autopilot
- Each workspace learns only from its own emails
Role-based access
People see only what their role allows
Give each person the least access they need. Two-factor authentication is available for every account and required for owners and admins.
- Owner
- Full control of the workspace, billing and members.
- Admin
- Manages settings, mailboxes, teams and members.
- Supervisor
- Oversees queues, reviews decisions and handles escalations.
- Agent
- Works the tickets assigned to their teams.
- Reviewer
- Checks Autopilot decisions in the review queue.
- Viewer
- Read-only access to tickets and reports.
Encryption
Encrypted in transit, at rest and in the vault
Secrets such as mailbox credentials are encrypted with a key that belongs to your workspace, so one workspace's secrets cannot be opened with another's key.
- TLS 1.2 or later for all traffic
- Data encrypted at rest
- Mailbox credentials and API keys are envelope-encrypted with a key unique to your workspace
- Secrets are never written to logs
Audit trail
Every email and every decision is on record
You can always answer “what happened to this email, and why?” Nothing Mailnitio Autopilot does is hidden from your team.
- The email log records each message before anything else happens
- The decision log shows the category, confidence, reason and route for each ticket
- Sign-ins and setting changes are recorded with who, what and when
- Owners and admins can search and export the logs
Retention and deletion
Keep data as long as you need it, then delete it
We store what is needed to route and track each email and nothing more. We sign a data processing agreement with every customer.
- Retention periods are set per workspace
- Attachments stay in your mailbox
- Deleted data is removed from backups on a fixed schedule
- Support for data subject requests under the Nigeria Data Protection Act 2023
Sub-processors
Who else processes data for us
We use a small number of providers. Model providers only ever receive masked text.
| Provider | Purpose |
|---|---|
| Vercel | Website hosting |
| Render | Application hosting |
| Supabase | Database and sign-in |
| Amazon Web Services | Email sending for Reach and file storage |
| Anthropic | Classification of masked email text |
| OpenAI | Classification of masked email text (fallback) |
| Sentry | Error monitoring (no email content) |
| Resend | System notifications such as sign-in emails |
| Cloudflare | Bot protection on public forms |
Responsible disclosure
Found a security issue? Tell us.
Email the details and we will confirm receipt, investigate and keep you updated. Please give us reasonable time to fix an issue before sharing it.
Read how we handle personal data in the privacy policy.
Get started
Questions about security?
Book a demo and we will walk you through how Mailnitio protects your customers' emails.