Transport encryption
Use the HTTPS version of Spectre. Encryption in transit protects a connection; it does not mean the receiving service cannot process the data.
Legal & privacy
Security and data access.
How connections, processing, and stored records fit together, and what to check before connecting a mailbox.
Provider connections
Mailbox connections use provider authorisation. Permissions and token handling depend on the selected provider and integration. Check the requested access before connecting and revoke it through your provider when it is no longer needed.
Where processing happens
- Browser interface
You connect a mailbox, review suggested accounts, and inspect request drafts.
- Mailbox signals
Sender details, subjects, dates, and snippets can be used for account discovery. Reply and business features may also process message content.
- Backend services
API endpoints support account management and AI assistance. This is not an entirely local or zero-knowledge service.
- Requests and records
Approved requests are sent through a supported channel. Stored records support account operation, request history, and organisation workflows.
Security controls and their limits
Backend secrets
AI features use backend endpoints so service credentials can be managed server-side. Provider authorisation and token storage vary by integration.
Access and review
Account authentication and organisation access controls support the workflow. Only connect mailboxes you are authorised to use.
Stored records
Account, payment, usage, and request records may be retained for their relevant purposes. See the Privacy Policy for retention information.
About CASA Tier 2
CASA is a cloud application security assessment framework. An assessment applies to its documented scope and assessed version. It does not guarantee every feature or future release, or establish GDPR compliance.
Contact support if you need assessment information for a security review.
Before using the service
- Review the provider permissions and the data handling overview.
- Check suggested recipients and request wording before sending.
- Keep passwords, access tokens, and API keys out of support messages.
- Disconnect provider access if you no longer need the integration.
No internet service can guarantee absolute security.
Report a concern or ask a question
Contact support@agentspectre.eu with a short description of a security concern. For questions about personal data, contact privacy@agentspectre.eu.
What to include in a support request →