Security
An executive's mailbox holds board papers, contracts and personal matters. AURA is designed so that the right people see the right things, nothing leaves without approval, and every action can be traced.
- Approval before anything leaves
- An approval is tied to the exact text of a reply; any later change cancels it. Scheduled replies are checked again just before sending and pause if a new message has arrived in the conversation. The AI can never approve anything itself, and a reply whose outcome is uncertain is never sent twice.
- Access per mailbox and per person
- Membership of a workspace gives no access to mail. The owner grants each delegate a level for each mailbox (summaries only, full content, drafting or sending) and can change or withdraw it at any time. Sensitive contacts and facts are visible only to the owner unless shared.
- Minimal, separate permissions
- Signing in and connecting a mailbox use separate Google and Microsoft permissions. Sending and calendar access are requested only when you turn them on, and AURA checks what you actually granted.
- Encryption
- All traffic uses HTTPS with strict security headers. Mailbox access tokens and AI keys are encrypted at rest with a key kept outside the database. Attachments are not stored; they are fetched from your provider only when someone authorised opens them.
- An audit log that cannot be edited
- Sign-ins, access changes, views of e-mail content, approvals, sends and AI actions are recorded with who acted and on whose behalf. The database itself refuses changes and deletions to the log. It never stores e-mail bodies.
- AI with guard rails
- E-mails are treated as untrusted content, so instructions hidden in a message cannot steer AURA, and suspicious messages are flagged. AI providers receive only what each task needs, never facts marked sensitive, and their terms do not allow them to train on your data. Dates and deadlines are never invented.
- Private notifications
- Live updates travel on a private channel for each person and carry only identifiers. Push notifications say what happened, not what an e-mail says, unless you turn previews on.
- Our staff and your data
- Operators can see account details such as the plan, usage and dates. They cannot see your e-mail, subjects, contacts or memory, and they do not become members of your workspace. Every operator action is audited.
- Hosting and backups
- AURA runs in data centres in the European Union, with the database and cache on a private network. Database backups are taken daily and kept for 14 days, and restores are tested.
- Leaving
- Disconnecting a mailbox revokes AURA's access at your provider and deletes the mail stored from it. A workspace whose plan has ended becomes read-only rather than being deleted, so you can export what you need first.
Reporting a vulnerability
If you believe you have found a security issue, please write to support@auraexecutiveassistant.com with the details. We reply promptly and will keep you informed. How we handle personal data is described in the privacy policy.