Security, in plain words

You're trusting us with your clients' email, devices and systems. Here's exactly how we look after them.

In Desk, personal details are hidden from the AI

Before any text reaches an AI model, Desk replaces names, email addresses, phone numbers, user names, device names and anything that looks like a secret with codes such as ‹person‑1›. The AI works with the codes; the real details are put back on our side afterwards.

• A final check reads exactly what is about to be sent. If anything recognisable is left, nothing is sent.
• If the name check can't run, no free text goes to any model, and the ticket says so.
• Sift only uses Corsift's own business accounts with AI providers.
• No filter is perfect. An unfamiliar name or sign-in, a short number or date with no label, or something that reads like an ordinary word can occasionally get through, so we keep tightening the checks.

In Watch, the AI reads your monitoring data

Watch's assistant and incident grouping read the same monitoring data you see: device names, readings, alerts and events, for your organisation only. Watch doesn't read email or tickets. Unusual readings, forecasts and idle-resource checks run without any AI.

A person stays in charge

• Sift drafts replies. A person accepts each part and presses Send. Nothing Sift writes goes to a customer on its own. The only automatic reply to a customer is a mailbox's acknowledgement of a new ticket, if you switch it on, using your own template. Desk also emails your own staff automatically: invitations, alerts and mentions.
• What Sift may do by itself is decided by written rules in our code, not by the AI.
• Anything Sift does on its own that can be reversed comes with an Undo.
• Checks on a device are read‑only, listed in advance, and run only when you confirm.

Your data stays yours

• Every workspace is kept separate. Every lookup is limited to the signed‑in workspace, and automated tests check it on every change.
• Sign‑in uses Clerk. Only people you invite can get in, and removing someone ends their access.
• In Desk, what each person can see and do is set by the groups you put them in, and anything not granted is denied.

Credentials are locked away

• Mailbox connections are encrypted (AES‑256‑GCM) and never shown again after you connect.
• Desk only asks a mailbox for what it needs: read the inbox and send replies. It never changes or deletes your mail.
• Watch stores monitoring passwords and keys encrypted, and never sends them back to the browser.
• Watch collectors connect out over HTTPS with their own key. New ones join with a single‑use code that expires in 24 hours.

Everything is on the record

• Every Sift action is logged with its reasons, its sources and a receipt: what it checked, what it assumed and what it couldn't do.
• Remote sessions follow each client's notice policy and are logged: who connected, to which device, when and how.
• Changes to who can access what are written to the audit log in the same step as the change itself.

Questions

Need a security review, a data processing agreement or answers for your own clients? Email us at hello@corsift.com.