Security & privacy

Where your data lives, and what we actually promise.

Private and European, on open standards you own — explained plainly, without claims we can't stand behind.

Jurisdiction

European by architecture.

Your mailbox lives on servers we run in the EU. Data residency is where the machines are and how they're operated — not a setting that quietly routes elsewhere under load. GDPR-ready, with a data-processing agreement on request.

Encryption, honestly

Encrypted, and honest about it.

Your mail is encrypted in transit and at rest. We are not a zero-access, end-to-end provider: because the assistant, search and agents work on your mail, our servers can read it — the same as Gmail or Fastmail, unlike a provider where even they can't. What we promise instead is EU jurisdiction, no exploitation, and your control. We'd rather say that plainly than imply a guarantee we don't offer.

No exploitation

Your mail is never the product.

No ads. No profiling. Your messages are never used to train a model — ours or anyone else's. You pay for the service, so you are the customer, not the inventory.

Safe by design

An agent can only ever send as you.

When you connect an assistant over MCP, sending is pinned to your own verified address — the identity, the From header and the SMTP envelope all match your mailbox. There is no parameter for a different sender, so an agent can never be tricked into sending from a foreign or arbitrary address.

Your choice of AI

You choose the assistant.

Lettio keeps your mailbox private and in Europe and gives you the controls. The assistant you connect is your choice — connect it, disconnect it, or use none at all. We don't send your mail anywhere you didn't ask us to.

Yours to leave

Open standards, full export.

IMAP, SMTP, JMAP and CalDAV, your own domain, and a one-click export in formats every mail client reads. No proprietary bridge, no lock-in. If you ever leave, you take everything with you.

At a glance

The guarantees, in one place.

  • Hosted on our own EU servers
  • Encrypted at rest
  • GDPR-ready, DPA on request
  • No ads, no data mining
  • Never trained on your mail
  • IMAP, SMTP, JMAP, CalDAV
  • Modern auth and 2FA
  • SPF, DKIM, DMARC, MTA-STS
  • Continuous backup & restore
  • One-click export, no lock-in
Early access

Be early to European AI email.

We're building Lettio now. Join the waitlist to get in first — with a founding price that stays.