Security

Access, data, and sending — on your terms.

This page describes the controls emlOPS ships today. We don't claim certifications we haven't earned, and we don't display customer logos we haven't been given permission to use.

OAuth access

emlOPS connects to personal Gmail and Google Workspace via Google OAuth. Credentials never touch our servers. Microsoft Outlook support is coming next.

Least-privilege OAuth

We request only the scopes needed to read, organize, draft, and archive on your behalf. No scope creep.

Never sends automatically

emlOPS never calls a provider send endpoint. The current product does not send email — it prepares drafts you send yourself.

Bring your own AI key

Prefer to keep model calls on your own account? Connect your own OpenAI API key today; additional providers planned.

Revocable at any time

Revoke emlOPS from your Google account and access ends immediately, on your terms.

Auditability

Every AI draft is versioned so you can compare revisions before you decide to send.

Responsible disclosure

If you believe you've found a security issue, please email info@emlops.com with steps to reproduce. We'll acknowledge your report and follow up as we investigate.

Compliance

emlOPS is an early-access product operated by EVKii, Inc. We do not currently claim SOC 2, ISO 27001, HIPAA, or other formal certifications. When we complete such programs, we'll say so — and link the report or attestation directly here.