Privacy and Security FAQ

Yes. Emailgistics is SOC 2 Type 2 audited and HIPAA and GDPR compliant. It works on your Microsoft 365 shared mailboxes through Microsoft Graph permissions that you grant, limited to the mailboxes you onboard, and you can revoke them at any time.

Yes. Your email stays in your Microsoft 365 environment. Emailgistics stores only the metadata it needs for assignment and reporting: the message ID, conversation ID, sent or received date, subject line and the To, From and CC headers. It reads these through the Microsoft APIs you authorize, and all data is encrypted in transit.

No. Your email stays in Microsoft 365, and our support team only sees a message if you share it, by forwarding it or on a screen share. Emailgistics AI processes a message only when a team member runs a summary or suggested reply, and admins can turn AI off or choose who can use it.

Yes. Emailgistics is HIPAA compliant for shared mailbox workflows. Emailgistics AI is not set up for patient health information by default: AI Suggested Replies should not be used with patient data, and AI Summarization is not suitable for it in the standard configuration, though Enterprise customers can arrange HIPAA and PCI-DSS support for summarization.