GDPR-compliant AI email assistant, hosted in France Security

You stay in full control: replies, follow-ups and forwards are drafts by default, and direct sending only applies to trusted recipients you choose. From how we handle your data to the AI we use, here are our practices in full.

Security

Your data stays yours

We designed Scribarius with a privacy-first architecture. We never store or sell your emails.

Encryption in Transit and at Rest

Your data is encrypted in transit and at rest using industry-standard encryption protocols.

Zero Email Retention

Emails are processed in real time and never stored. Your data is never used to train AI models.

Data Hosted in Europe

All data is hosted on secure servers located in France, ensuring strong protection and full compliance with European regulations.

GDPR Compliant

EU Data Protection

CASA Tier 2

Google Certified

SSL / TLS

Encrypted Connection

AES-256

Encryption at rest

How we handle your data

When you use Scribarius, your email content is sent to our AI processing servers solely to run the features you enable, such as reply drafts, labels, forwards and tasks. Once processed, the email content is immediately discarded. We do not store, log, or retain any email content.

All communication between your browser and our servers uses TLS 1.3 encryption. Data at rest on our servers is encrypted using AES-256. Our infrastructure is hosted exclusively on servers located in France, ensuring full compliance with European data protection regulations.

Third-party audits & certifications

Our Google integration is Cloud Application Security Assessment (CASA) Tier 2 certified, meeting Google's rigorous security requirements for applications accessing user data.

We are fully compliant with the EU General Data Protection Regulation (GDPR). For enterprise customers, our Data Processing Agreement (DPA) is available for review.

Responsible AI

Your emails are never used to train, fine-tune, or improve our AI models. We use commercially licensed foundation models with strict data processing agreements that guarantee zero data retention on the model provider's side as well.

FAQ

Frequently asked questions

Is Scribarius GDPR compliant?

Yes. Scribarius is fully compliant with the GDPR, all data is hosted on servers located in France, and a Data Processing Agreement (DPA) is available for business customers.

Does Scribarius store my emails?

No. Your email content is sent to our servers only to run the features you enable, processed in real time, then immediately discarded. We do not store, log or retain any email content.

Are my emails used to train AI models?

No. Your emails are never used to train, fine-tune or improve AI models. We use commercially licensed models under agreements that guarantee zero data retention on the provider's side as well.

Is Scribarius verified by Google to access Gmail?

Yes. Our Google integration has passed the Cloud Application Security Assessment (CASA) Tier 2, the security review Google requires for apps that access Gmail data. Data is encrypted with TLS 1.3 in transit and AES-256 at rest.