Connecting your mailbox
- Gmail and Microsoft 365 connect through their official sign-in flows. You sign in with Google or Microsoft directly, and WiserInbox never sees your email password.
- Sign-in requests are protected against forgery with a one-time state check.
- IMAP and SMTP connections must use TLS, and server certificates are always checked. WiserInbox only connects to public mail servers, which stops the connection settings from being used to reach private networks.
- When you disconnect a mailbox we delete its tokens or password straight away, and revoke our access with Google.
Protecting stored data
- Mailbox access tokens, IMAP passwords and two-factor secrets are encrypted with AES-256 before they are saved.
- Account passwords are stored only as one-way hashes.
- Your messages are kept in our managed database so your inbox loads quickly. Attachment files are only stored once you open them or they are analysed.
- Everything between your browser and WiserInbox travels over HTTPS.
Reading email safely
- HTML email is cleaned to remove scripts and other active content, then shown in a locked-down frame that cannot run code, submit forms or reach the rest of the app.
- Remote images are blocked until you choose to load them, so senders can't track when you open their email.
- Attachments are checked before you open them. We look for disguised file types, misleading double extensions and PDFs with embedded scripts or files.
- Messages that look like phishing or fraud are put in quarantine with a reason, and their content and attachments are held back until you decide.
Keeping the AI in check
- The AI can read and suggest, but it cannot send, delete or move your email.
- Email content is clearly separated from our instructions and treated as untrusted, to guard against messages that try to trick the AI.
- Only the parts of a message needed for analysis are sent to our AI providers, and Anthropic does not train its models on data sent through its commercial API. See the Privacy Policy for exactly what is sent.
Account security
- You can sign in with a passkey, and add two-factor authentication with an authenticator app.
- New passwords must be at least 12 characters with a mix of character types, and are checked against lists of passwords exposed in known data breaches.
- Repeated sign-in and two-factor attempts are rate limited.
- You must verify your email address before using the app, and confirm your password before changing security settings or deleting your account.
Teams and access
- Only the person who connected a mailbox can read its mail, even in a shared organisation.
- Organisation owners and admins can see which inboxes are connected and remove them, but cannot open them. The person who connected an inbox is told by email if it is removed.
- Only the owner can change roles, transfer ownership or manage billing. Invitations expire after seven days.
Payments
Payments are handled by Stripe. Your card details go straight to Stripe and never touch our servers; we only keep the card type and last four digits. Billing updates from Stripe are verified with a signature before we act on them.
Hosting
WiserInbox runs on Laravel Cloud, a managed hosting platform, which looks after the servers, network and database infrastructure. Push notifications from Google and Microsoft are checked against a secret before we act on them.
Reporting a problem
If you think you have found a security issue in WiserInbox, please email security@wiserinbox.com with the details. We will acknowledge your report, keep you updated while we fix it, and won't take action against good-faith research that respects our users' privacy and doesn't disrupt the service.