Gmail, Outlook, and Microsoft 365

The earliest warnings live in the inbox. So the strictest rules apply there.

Slowing replies, unresolved complaints, a competitor's name, a champion who went quiet: the inbox knows before the ledger does. Reading it demands stricter rules than any other part of the product. Here they are.

Mailbox selection

You choose the mailboxes. You set the exclusions.

ChurnRisk connects only the mailboxes you explicitly authorize, one by one. Any label or folder you exclude is never read. Personal mailboxes stay personal, and any mailbox can be disconnected instantly.

Works the same for Gmail and for Outlook and Microsoft 365.

Storage

What is stored, and what is not

We look for a specific set of signals: reply latency changing against the relationship's own norm, unresolved complaints, competitor mentions, and contacts who have stopped responding.

What we keep

The structured signal and a short verbatim quote that proves it, linked back to the thread it came from.

What we do not keep

A copy of your inbox. We keep the signal and the quote that proves it, not the mailbox, and no model is ever trained on your mail.

Access

How access is secured

Mailbox access is brokered through a provider that holds SOC 2 Type II and has completed a CASA Tier 2 assessment, the level required for restricted-scope email access. Those attestations belong to the provider, and we say so plainly. Credentials are encrypted per tenant.

ChurnRisk itself is built for SOC 2 readiness and does not claim an audit it has not completed. The full subprocessor list, with purposes, regions, and third-party assessment status, is on the security page.

Approval

Nothing sends without you

Reading and sending are separate. Drafts wait in the Approval Center until a person on your team edits and approves them. Approved emails send from your own mailbox, threaded into the existing conversation.

There is a per-channel kill switch that stops everything instantly.

Evidence

The quote rule

Every high-severity signal extracted from email must carry a verbatim quote that matches the source text. If it cannot, it is automatically downgraded.

You will never see "customer is unhappy" without the sentence that says so.

Strict enough to defend to your most careful person.

If your controller, your IT contact, or your co-founder has questions this page did not answer, send them to us directly at security@churnrisk.ai.

A real mailbox end-to-end connection is still being validated.