Safe by design, not by setting.
JamComms will never delete or send your email, never move a message without your confirmation, and never show a clickable link in a message it flags as phishing. These rules are built into the product rather than offered as options, so no setting, rule or email can switch them off.
What will happen when JamComms flags a message as phishing?
The message will be shown as plain text. Links are rewritten (hxxps://, [.]) so they cannot open, and there are no forms, remote images or "open original" escape hatch. If JamComms cannot verify a message is safe, it treats it as unverified. Flagged mail is never filed and never acted on by rules or Claude.
Will JamComms be able to delete or send my email?
No. Rules and filing will only move messages between folders, and every move is written back to your real mailbox. JamComms will not ask for permission to send mail: follow-ups and delegations are saved as drafts for you to send. The only delete is a phishing test you choose to remove unopened, and it goes to Deleted Items.
Will Claude be able to change my mailbox on its own?
No. Claude will read and search on its own, but every change comes back as a pending action that runs only when you press Confirm. Email content is treated as untrusted data, never as instructions, so a crafted message cannot steer the assistant into moving or filing anything.
How will JamComms connect to my accounts?
Through the providers’ own sign-in: Microsoft for Outlook, Teams and the calendar, and Google for Gmail. JamComms will never see your password. The access tokens it receives will be stored encrypted, and you can revoke them at any time from your Microsoft or Google account.
How do I report a security issue?
Email hello@jamcomms.io with what you found and how to reproduce it. Please give us a chance to fix it before you share it publicly.
Security questions
How will JamComms protect me from phishing?
A message flagged as phishing will never show a clickable link, a form or a remote image. Links are rewritten so they cannot open. If JamComms cannot verify a message is safe, it treats it as unverified. Phishing mail is never filed and never acted on by rules or Claude.
Will JamComms ever delete or send email?
No. JamComms will never delete mail and never send it. Rules and filing only move messages between folders. Follow-ups and delegations are saved as drafts in your mailbox for you to review and send yourself. The one exception to filing is a phishing test, which you can delete unopened.
Could an email trick the assistant into doing something?
JamComms will treat every email as untrusted content, never as instructions. The assistant can read and search on its own, but any change to your mail comes back as a pending action that runs only when you press Confirm, so a crafted message cannot move or file anything by itself.