Your mail stays in Google.
The strongest security property we have is architectural, not a feature: ShareMail is a layer on top of Gmail and never becomes the system of record. Everything below follows from that.
Access is Google OAuth, and revocable in one click
Each inbox connects through Google's own consent flow. We never ask for, receive or store a password, and we never ask you to change MX records or add a forwarding rule. Tokens are encrypted at rest. Revoke ShareMail in your Google admin console and our access ends immediately. There is no second door.
We are not in the delivery path
Mail is delivered by Google to your Gmail, exactly as it is today. Sending goes out through the Gmail API from your own address, so your domain and your deliverability reputation stay yours. If ShareMail were down, your email would keep arriving and could still be answered from Gmail.
Personal inboxes are private by an enforced rule
A personal inbox is readable only by its owner, and that is a hard invariant in the access-control layer rather than a UI setting, so an administrator cannot read it either. Search results are always intersected with the mailboxes the asking user can see, so nothing leaks through a query.
We store the minimum the product needs
We keep a synced working copy of conversations so the app is fast and so search can cover your team's internal comments. We store the few headers the product uses rather than everything on the wire, and attachments are fetched from Gmail on demand instead of being copied wholesale.
The marketing site collects nothing
This website sets no cookies and runs no cross-site trackers. The only thing it can collect is an email address you type into "tell me when it opens", and that stores the address and a timestamp: no IP address, no user agent, no referrer.
Not shipped yet, and labelled as such
SSO/SAML and audit-trail export are launch commitments, not current features; the pricing page marks them the same way. We would rather lose a deal to a checklist than win one and be wrong. Independent certification (SOC 2) is not something we claim today.
Reporting something you found
Email [email protected] with what you found and how to reproduce it. One of the two of us reads it, you get a confirmation rather than silence, and we will keep you posted on the fix. We will not threaten you for looking.
Read the pledge → How it works →