Home/Sovereignty & GDPR

Your data stays in your region.

Our AI runs on our own GPUs, wherever you decide. No third-party API, no transfer, nothing stored.

Data sovereignty & GDPR

Our AI runs on our own GPUs, in your region.

Most AI tools ship your data to a US giant’s API. Not SAFE MAIL: the model runs on our machines, in the region you choose — France, the European Union, the Nordics, Eastern Europe, the Gulf, Singapore and Asia-Pacific. Your messages are read there in memory, judged in one second, then forgotten. They never leave it.

Your side

Your emails stay in your Microsoft 365 mailboxes. We make no copy of them.

  • Nothing to install, nothing to move
  • Access revocable at any time, from Microsoft 365
Encrypted readBack: a score and one sentence
Our servers, our GPUsYour region

The AI model runs here, in the region you chose, on machines we operate ourselves.

  • Read in memory, judged in 1 second
  • Content never stored
  • No training on your emails
✕Nothing leaves
Outside your region
  • No cloud giant’s AI API
  • No subcontractor for the analysis
  • No transfer to another region

You choose where the AI runs

One region per customer, set at activation, at no extra cost: the same price everywhere. Your emails are analysed there, and nowhere else.

Sovereign at every layer

Sovereignty is not a line in a brochure: you check it layer by layer.

SAFE MAILA typical AI tool
PublisherGatewatcher, a French companyOften outside Europe
AI modelRun in-houseAn AI giant’s API
ComputeOur GPUs, in your regionA global cloud’s GPUs
HostingA data centre in your regionA “region” at a foreign operator
Governing lawYour region’s — French and European in EuropeExtraterritorial laws, including the CLOUD Act

What we keep, and what we never keep

Kept — the minimum needed to alert you
  • Sender, subject and date
  • The score and the reasons for the verdict
  • Attachment file names
  • Your team’s decisions
Never kept
  • The body of messages
  • The content of attachments
  • Your files, calendars, contacts: we have no access to them
  • Any data to train an AI

GDPR-compliant by design

A processor, in writingYou remain the controller of your data. We act on your instructions, under a data processing agreement (Article 28).
Data in your regionEuropean customer: everything is processed and hosted in the Union, with no transfer outside the EU. Elsewhere: in your region, under your local law.
Data minimisationTwo Microsoft permissions, not one more. Message content is never stored.
A single purposeDetecting fraud. No profiling, no advertising, no model training.
Respect for your employeesA machine reads, not a person. Your team only sees flagged messages.
ErasureYou stop in one click: access is revoked and your data is deleted.

Put it to the test. On your own email.

In two minutes our AI re-reads your week and shows you the scams nobody had seen. 7 days free.

Start free

Not the administrator? Send the invitation to the right person