Your mail stays yours
Most AI tools keep everyone’s mail in one place. The Machine gives you your own.
- We don’t read your emailIt’s stored encrypted. Our support tools can’t open it.
- Nothing is sent without your OKIt reads and drafts. You decide what goes out.
- Your own private serverIn the EU, never shared. Or use it on your own computer if you prefer.
- Delete your account and it’s goneOne button deletes your server, its backups and all its data.
What else you can count on
The AI never sees them. You type them yourself.
We have no AI of our own. You pick the provider: ChatGPT, your Claude plan or your own key.
Export everything in one file, or disconnect any account.
Scanned at every step
Aikido scans our code, cloud and servers for security issues.
Aikido scans it before it merges.
Aikido scans it every day. Serious issues are fixed the same day.
Aikido scans our Azure setup through a read-only connection.
Aikido scans the servers that run our service.
Only goes out once its Aikido scan passes.
Good to know
Who sees what the AI reads?
The AI provider you pick, like OpenAI or Anthropic. It works under your own account and their terms. We never train on your data.
What does Do it do?
It works only on a task you approve. It uses your own accounts, just as you would. Until you tap, it only reads and drafts.
Can your staff read my mail?
Our support tools can’t: your messages are encrypted. As your host, we can reach your server. We only do that to fix a problem you report or a security issue. Every sign-in and support command is logged, and Fleet admins see it. See our data processing terms.
Can I keep everything on my own computer?
Yes. Run it yourself and your data stays at home. Only your AI provider sees what it reads.
What happens when I cancel?
First, export everything in one encrypted file from your account page. You can keep using it on your own computer. Your data is then deleted after 30 days, backups included.
Can I make it stricter?
Yes. Pick Careful in Settings, Security: no message text on your lock screen, fewer sign-ins saved and less kept. A Work Fleet’s admin can make the whole team Careful. See security levels.
Do you learn from how I use it?
Only if you say so. Now and then your Machine asks to send our team a few general tips. You see each one first, nothing personal goes, and it comes from a made-up name.
How do I pay?
Through Stripe. Your card details never reach us.
Who is behind it?
Salesflare BV in Antwerp, Belgium. Questions: support@themachine.computer.
Open, and on paper
Technical details
- Hosting
- One server per customer, never shared: Hetzner in Germany or Finland, or Azure in the Netherlands. Disks are encrypted, servers cannot reach each other, and two firewalls let in only our control plane.
- Sign-in
- The dashboard needs Google or Microsoft sign-in plus an authenticator code or a passkey. Our sign-in gate talks to your server over TLS, checked against our own certificate authority.
- Mail access
- OAuth tokens for Google, Microsoft and Zoom live only on your server, encrypted. The control plane passes a refresh on and keeps nothing. Gmail and Calendar are read-only; sending is a separate grant. Outlook asks for mail read and write (to snooze threads) and send. Zoom is read-only: meeting summaries and transcripts.
- Message encryption
- Message text, attachments saved from it and the sign-ins you save for next time are sealed at rest. The key stays in memory, never on disk or in backups, and is deleted with your account. On by default, hosted and self-hosted. Run it yourself and one setting turns it off.
- Keys
- Server keys we hold are encrypted with AES-256-GCM. Model keys you enter are deleted from our side once your server has them. Your model requests go straight from your server to the provider.
- Company sign-in
- A Work Fleet can offer itself to people who sign in with a Google Workspace or Microsoft 365 account on its domain. Personal accounts never count, and an admin approves each person. Removing someone signs them out everywhere.
- The Network
- Machines encrypt what they tell each other end to end. The relay refuses anything unsealed and keeps it only until delivered.
- What staff can see
- Server health, versions and disk space, error logs scrubbed of text, addresses and numbers, and diagnostics you choose to send. Not message content, passwords, sign-in codes or Network messages.
- Offboarding
- Remove someone from a Work Fleet and their Machine deletes the company’s data and sign-ins. It says “Removed, confirmed” only once their Machine and Google confirm it. The Fleet’s activity log exports as CSV.
- Prompt injection
- An email or web page can hide instructions meant for the AI. Reviews can only read, and it treats what it reads as evidence, not orders. No AI defense is perfect.
- Do it
- For a task you approve, it acts as you with your accounts and its signed-in browser. That can include paying, deleting or signing if the task asks for it. It can’t read your saved passwords.
More in our security policy.
Found a security issue? Write to security@themachine.computer, or report it privately on GitHub.
Ready when you are
Sign in, subscribe, connect your mail. It takes a few minutes.
Hosted: €25 a month, excl. VAT. 7 days free, cancel any time. Free: try the demo or run it yourself.