Architecture

A layer on top of Gmail.
Never between you and it.

Every promise on our pledge traces back to one design decision: Gmail remains the system of record for your email. Here's what that means in practice.

1 · Connect your Gmail inboxes

Each shared or personal inbox connects over Google OAuth, the same mechanism Google builds for exactly this. No password sharing, no MX changes, no forwarding rules to a black box. Revoke access in your Google admin console at any moment and ShareMail is out, instantly.

2 · We sync a working copy

ShareMail keeps a synced copy of each conversation to power the fast list views, collaboration, and search, including search across your team's internal comments. Sync is incremental against Gmail's change history with automatic recovery if a cursor goes stale. The copy serves the product; Gmail stays the source of truth.

3 · Actions mirror back, genuinely two-way

Archive in ShareMail and the thread leaves the Gmail inbox. Trash, spam, reopen: all of it mirrored through a retried, offline-safe queue, so a blip never silently drops an action. Teammates working directly in Gmail and teammates working in ShareMail always converge on the same state. When something can't round-trip, we say so in the product instead of pretending.

4 · Sending goes through Gmail, as you

Replies and new messages are sent via the Gmail API from your own address: your domain, your deliverability reputation, your sent folder. Threading headers are set the way Gmail expects, so recipients see one clean conversation. Scheduled sends and the undo-send window run on the same queue.

The ShareMail new-message composer with From, To, Bcc, subject, a formatting toolbar, an attached file, and Send.
Composing a new message: attachments, Cc/Bcc, signatures, templates, schedule send.

5 · Privacy is enforced at the data model

Personal inboxes are private by a hard access-control invariant, so even an admin can't read them. Search results are always intersected with the mailboxes you can see. We store the few headers the product needs rather than everything on the wire, and attachments are fetched from Gmail on demand instead of being copied wholesale.

6 · Two people can't overwrite each other

A draft on a shared conversation belongs to whoever the conversation is assigned to. Teammates see it forming in real time but can't type over it; taking it over is an explicit act, not a race. Presence shows who is reading a thread and who is replying to it right now.

A conversation showing a shared draft owned by another teammate, displayed read-only with a banner naming its owner.
A teammate's draft, visible but locked. Reassign it to yourself to take over.

7 · Leaving is a disconnect, not a divorce

Cancel, and your mail is exactly where it always was: in your Gmail. Comments, tags, assignments, and audit history export in full. This is the part most shared-inbox vendors get catastrophically wrong. The tools that ingest your mail into their own store make leaving so painful that staying becomes coercion. We built the opposite.

Not open yet. One email when it is.

See pricing →