Enveliq demo

My email accounts

Connect the inboxes you want this product to review. Accounts are private to you unless you explicitly share them.

My preferences

Show task suggestionsShow a suggested task when AI finds a real action.

Show attachment summariesShow a one-line summary with expandable detail.

Notify me about high priority mailUse Home Assistant notifications when supported.

Administration setting. The server checks administrator rights on every request; hiding this page is only the visible layer.

AI & LLM

One administrator-selected AI provider is used for all users. Normal users never need to configure an LLM.

Not tested

Administrator only

Processing

Summarise attachmentsFetch attachments from the source mailbox into an isolated RAM-only worker, extract what is needed, then destroy the raw bytes.

Safe attachment viewerGenerate a safe temporary preview in RAM when a user clicks an attachment. Raw originals are not cached on disk.

NeverRaw attachment disk storage

25 MBMaximum source file

5 minRAM preview lease

64 MBGlobal preview RAM cap

Preview design: PDF pages are rendered to safe images in an isolated worker; images are decoded and re-encoded; plain text is escaped. Office files show extracted text. HTML, SVG, executables and archives are never rendered directly.

Treat all email as untrusted contentEmail text cannot grant tools or new permissions.

Store raw model responsesOff by default. Store only structured output.

Administrator only

Allowed email providers

Admins decide which connection types users are allowed to configure.

Gmail / Google WorkspaceOAuth connection.

Outlook / Microsoft 365OAuth connection.

Yahoo MailIMAP with an app password.

iCloud MailIMAP with an app-specific password.

Proton Mail via BridgeConnect to a running Proton Bridge instance.

FastmailIMAP with an app password.

Zoho MailIMAP with an app password or provider-specific token.

Other IMAPManual server connection for custom domains and other providers.

Administrator only

Tasks & automation

Tasks make themselves from summaries and end when the email is dealt with. Each person sets up their own calendar and To-do list under Settings, Calendar & To-do.

Administrator only

Privacy & retention

Review queue retention

Raw attachment persistence

Attachment filenames, MIME type, size and AI summary are encrypted with the review item. They are purged when the item is Reviewed, Archived, Binned or expires. The original attachment remains only in the user's mail provider.

Mailbox ownership is separate from administrator rights. Administrators manage infrastructure, not other people's private mail.

Administrator only. This panel talks to the secure backend when it is running.

Encrypted vault

The backend stores sensitive account data, OAuth tokens, LLM keys, summaries and retained task data as authenticated ciphertext. The master key is never written to disk.

Checking…Vault

Checking…Runtime state

AES-256-GCMData encryption

Argon2idPassphrase KDF

Checking secure backend…

How your mail is handledAttachments, previews and how long things are kept.

NeverRaw attachment disk storage

25 MBMaximum source file

5 minRAM preview lease

64 MBGlobal preview RAM cap

Attachments are fetched from the source mailbox into an isolated worker that keeps them in memory only, then the raw bytes are destroyed. A safe preview is made in memory when someone clicks an attachment.

PDF pages are shown as safe pictures made in the isolated worker; images are decoded and re-encoded; plain text is escaped. Office files show their text. HTML, SVG, programs and archives are never shown directly.

Attachment filenames, type, size and the AI summary are encrypted with the review item and are removed when the item is Reviewed, Archived, Binned or expires (see Reviewed & archived). The original attachment stays only in the person's own mail account.

Email text is always treated as untrusted: it cannot give the AI tools or new permissions. Only structured results are kept, not raw model responses. Administrators manage the system, not other people's private mail.

Lock or unlock EnveliqNormally nothing to do here. Use this to lock everyone out, or to unlock after a restart.

The passphrase is sent only to the local secure backend over the same trusted application boundary, is never written to storage and is not retained by this page after the request.

Vault passphrase

For the first release, a backend restart requires an administrator to unlock the vault. A future TPM/HSM or external vault option can provide unattended secure unlock.

What Enveliq promises never to doThe rules it keeps about your mail and your secrets.

No raw email body persistenceOnly structured retained results are allowed into persistent storage.

No raw attachment persistenceOriginal attachment bytes are processed and previewed only in RAM. Safe preview derivatives expire automatically and are never written to application storage.

No provider secrets returned to browserPasswords, refresh tokens and API keys are write-only from the UI.

Mailbox owner separate from administrator roleAdmin rights do not automatically grant access to another user's private mailbox.

Email content treated as hostile inputThe LLM receives no HA tools, shell, filesystem, arbitrary network or secret access.

Secrets and message content excluded from logsRequest bodies are not logged and application logging includes redaction.

Manage your password, authenticator app, passkeys and recovery codes on My security.

Two-factor sign-in

Required for administrators. Use an authenticator app, passkeys, or both.

Authenticator appCodes from Aegis, 2FAS, Proton Pass, Bitwarden, 1Password or Google Authenticator

On

PasskeysPixel phone · YubiKey 5C. Fingerprint, face or PIN; can't be phished.

Recovery codes8 of 10 unused. Each signs you in once if you lose your phone.

Password and single sign-on

PasswordChanging it signs out your other sessions.

Sign in with AuthentikLinked. You can sign in through your household's sign-in provider.

Linked

Add people, change roles and reset two-factor on the Administration page.

Users

People with an Enveliq account. Administrators manage settings; they can't read other people's mail.

Morganmorgan · Local account · Two-factor on

Administrator

Bethbeth · Created by single sign-on (Authentik) · Two-factor at Authentik

Set the sign-in rules and connect Authentik, Authelia or another provider on the Administration page.

Sign-in rules

Two-factor sign-in

Password sign-in

Administrators can always use a password, so a broken sign-in provider can't lock you out.

Single sign-on (Authentik, Authelia, Keycloak…)

Use your own OpenID Connect provider. People it lets through get an Enveliq account the first time they sign in.

Turn on single sign-on

Redirect URI (copy into your provider)

Button label

Issuer URL

Client ID

Client secret

Allowed groups

Only members may sign in.

Administrator groups

Members become administrators, checked at every sign-in.

Create accounts automaticallyExisting accounts are never matched by email; people link their own under Sign-in & security.

Administrator only

System status

AI providerOpenAI-compatible · hermes-agent

Connected

Processing enginePrototype backend abstraction

Healthy

Inbox

Sent

My email accounts

My email accounts

My preferences

AI & LLM

Processing

Allowed email providers

Tasks & automation

Privacy & retention

Encrypted vault

Two-factor sign-in

Password and single sign-on

Users

Sign-in rules

Single sign-on (Authentik, Authelia, Keycloak…)

System status

Reply

Send this?

New email