Security and privacy

Where your data lives

officemcp runs on an IONOS server in Berlin. Your emails and files stay with your provider: officemcp fetches them only when your AI assistant needs them for your request and keeps no copy.

Two exceptions, both visible to you: files you upload from the chat via an upload link are kept encrypted and deleted after 24 hours. And the activity log records which tool the AI used when, for which mailbox and folder – without recipients, subjects, search terms, file names or contents – and is deleted after 60 days. The live monitor, which shows every request of your AI assistant with its answer, is started by you; it stores nothing permanently and deletes everything as soon as you close it.

Credentials

Passwords for mailboxes and cloud storage are stored encrypted with AES-256-GCM, and so are the entries of the activity log. The key is not stored in the database: anyone who only got hold of a copy of the database could not decrypt anything. Your sign-in password is stored only as a scrypt hash, access tokens only as a checksum.

This encryption does not protect against us as the operator, and we say so openly: officemcp has to sign in to your provider on your behalf, even when you are not online. For that, the server must be able to decrypt the credentials. Whoever has access to the server could therefore technically read them – only we and our technical service provider, who operates the servers for us and is contractually bound to confidentiality, have that access. In the admin interface, administrators see neither passwords nor your activity log.

Where possible we recommend app passwords, which you can revoke with your provider at any time. For NextCloud, officemcp creates its own app password automatically and revokes it when you remove the storage.

If you do not want to trust anyone but yourself, you can also run officemcp in your own environment – on your own server or locally on your own computer. Then credentials and keys stay with you alone.

You decide what the AI sees

You trust us with your credentials – but what your AI assistant gets to see is still up to you. For each mailbox you pick the folders it may access from your mail server’s folder list, for example only “Invoices” and “Projects”. All other folders never show up for it, neither in folder lists nor in search results; it can neither read nor move their messages.

The same goes for cloud storages: one specific folder, several selected folders or – only if you want – the whole cloud. The AI works strictly inside these folders.

Sent emails, drafts and deleted items are still stored in their usual folders – but the AI can only read those folders if you share them. The limit is enforced by officemcp, not by your provider: technically the stored password could still access everything. If you want to be completely sure, also set up a separate mailbox or a restricted account for your AI assistant with your provider.

Sign-in and connecting your AI assistant

After a short settling-in period – 10 sign-ins or 10 days, whichever comes first – every account needs a second factor: an authenticator app (TOTP, the most secure) or a code sent to the confirmed email address (more convenient, no extra app). Your AI assistant connects via OAuth 2.1 with PKCE: you explicitly confirm every connection and can disconnect it at any time.

What the AI may do

Per mailbox you choose: full access, drafts only or read only. Emails are only sent from the mailbox’s own address. Daily quotas additionally limit what can happen if something goes wrong.

officemcp marks content from emails and files as untrusted for the AI – as protection against hidden instructions in other people’s emails (prompt injection). No AI assistant offers complete protection against this, so for sensitive mailboxes we recommend “drafts only” or “read only”.

Transport

Every connection between your browser, your AI assistant and officemcp is encrypted with HTTPS, and so are connections to cloud storage. We connect to your mail server encrypted by default (TLS or STARTTLS); unencrypted only if you explicitly configure it.

This website

No cookies, no trackers, no embedded third-party services. Even the font is served from our own server.