Security and Privacy

How we handle your data

Email contains some of the most sensitive data in your business: client communications, financial information, legal correspondence, personal details. We built Veylith around one principle: your data belongs to you, and we process it only to serve you.

Infrastructure

All Veylith infrastructure is hosted on UK-based VPS servers that we own and operate. No third-party cloud provider processes your email. No inference is sent to OpenAI, Google, Anthropic, or any external AI service. The language models that classify your email run locally on our hardware.

What we access

Veylith connects to your inbox with read and write permissions scoped to your instruction set. We read incoming messages to classify them. We write labels, move messages, and apply filters according to your rules. We do not retain message content after classification. We do not use your email data to train models.

Data residency

All processing, storage of routing rules, classification logs, and account data is held within the UK. We do not transfer data outside the UK or the EEA.

Credentials

Inbox access credentials are encrypted at rest using AES-256. OAuth tokens are stored in isolated credential storage with no cross-account access. We do not store your email password.

Professional confidentiality

Veylith is built for professionals who have legal obligations around client data: solicitors, accountants, consultants operating under NDA. If you have specific requirements around data handling that your regulatory body mandates, contact us before signing up. We can accommodate most standard requirements and will tell you plainly if we cannot.

Audit log

Every classification and routing action taken on your inbox is logged with a timestamp, the rule applied, and the outcome. You can review and export this log at any time. If you terminate your account, your log is provided to you and then deleted.