Security

Envoy is early-access software. This page describes the current design, not a certified security program. We do not advertise SOC 2 or pentest badges, and the secure vault is not product-complete in this beta.

Classification and optional drafts run on the Windows machine. Message bodies are not uploaded to an Envoy cloud model. A BYO OpenAI-compatible URL is opt-in and warned as leaving the device.

Gmail uses OAuth (readonly connect path in early access). Calendar can use Google or Microsoft Graph. Tokens are stored by the desktop app on the local machine. The marketing site never asks for mailbox passwords.

The Windows updater and classifier catalog are served from Azure Front Door / Blob (envoyprodmodels). Install only from your account's Downloads page or the in-app updater. Treat other copies of the exe as untrusted.

Drafts and unsubscribes require your review. The app does not auto-send. That is a product control, not a hardware TPM or Hello gate.

Please open a private-as-practical report via GitHub Issues and avoid posting exploit details in public comments when you can.