Built for real businesses handling real money.
Last updated 28 July 2026
EmailCos combines strong encryption, zero retention, deterministic guards, and mandatory human approval for high-risk actions.
AES-256-GCM at rest
Every token, message body, and analysis result encrypted with rotated keys.
OAuth2 & app-passwords
Native OAuth for Gmail, Outlook, Yahoo. Encrypted app-passwords for the other 24 providers.
Zero data retention
Analysis is ephemeral. We do not train on your mail. Revoke access at any time.
SOC 2, GDPR, POPIA ready
Auditable access logs, EU/UK/ZA data residency options, and DPA on request.
Deterministic Validator — Banking Firewall
The LLM extracts amounts and intent, but the validator is pure code. It checks math sanity, historical variance, and extra-zero errors. If a value exceeds your historical baseline by more than 50%, the system escalates to L3 HIGH RISK and blocks automatic execution.
- Math sanity check: totals must equal stated sums
- Historical variance: >50% deviation triggers escalation
- Extra-zero check: catches R15,000 vs R150,000 style mistakes
Human-in-the-Loop
EmailCos never transacts. Any action over R500, or any action flagged as high-risk, requires your explicit approval. The system is read/draft-only by design.
Zero retention
Analysis is ephemeral. Email bodies are processed in RAM and purged within 60 seconds. Metadata is retained for 30 days for reporting and then deleted. We do not train models on your data.
Compliance readiness
EmailCos is architected for SOC 2, GDPR, and POPIA. We offer EU/UK/ZA data residency options, auditable access logs, and a DPA on request for Business plans.
Deterministic Validator — Banking Firewall
Every amount extraction is checked by code, not the LLM. If R150,000 exceeds your historical R15,000 average by >50%, L3 HIGH RISK blocks auto-execute and requires human approval. Math sanity + Historical Variance + Extra-Zero check.
Human-in-the-Loop — Never Transacts
Read / Draft / Never Transact principle. Level 3 >R500 threshold requires mandatory human approval by code-level block. SARS / tax notices auto-disable archive. Audit trail with tamper-evident SHA-256 hashes.
POPIA 7441 Zero-Retention Proof
Primary region jnb (Johannesburg). Information Officer Xoli Dlabantu. No volumes in fly.toml = RAM only. auto_stop_machines wipes RAM. 0 days email body · 30 days metadata · 60s analysis purge. EU / UK / ZA residency.