This page describes how SipherMail handles your data, including the limits. SipherMail is operated by Sipher Ltd. Everything runs on dedicated servers in Europe, including Sipher AI. Our mail server is Stalwart.
What the server can read#
| Kind of mail | Can the server read it? |
|---|---|
| Mail you receive from other services, and normal sends | Yes. It is stored on our mail server so you can read, search and sync it. |
| Mail sent as an encrypted message | No. It is encrypted on your device and only the recipient’s private key opens it. |
| Expiring or password-protected messages with a password | No, when you set a password. Without one, anyone with the link can open it and so can the server. |
Your login password is stored as a hash. Passwords for connecting other mail apps are encrypted at rest. Your encryption private key is stored already encrypted with your passphrase.
Who can access it#
The admin tools in the app have no feature for reading a member’s mail. An organisation admin can choose to transfer a leaving member’s mailbox to another member. People who run our servers have technical access to the systems, so ordinary mail is not hidden from the operator. Encrypted messages are.
AI processing#
Sipher AI runs on a model hosted on SipherMail’s own servers, not with a third-party AI provider. Privacy mode turns all Sipher AI features off. See Sipher AI privacy.
By default, Sipher AI keeps this data for a limited time:
| Data | Default retention |
|---|---|
| Chat history | 90 days |
| Summaries and extracted entities | 30 days |
| Label-learning samples | 30 days |
| Prompt logs | 7 days |
These are defaults and can change.
How long other data is kept#
- Sign-in sessions on the web last up to 30 days.
- Message trace records for organisations are deleted after 90 days.
- Deleting your account starts a 30-day period in which you can cancel. After that the account is removed.
In transit and backups#
Connections to the web app and to our mail server use TLS. Traffic between our own servers uses a private network. Database backups are encrypted and copied to object storage in a different data centre region from the servers.
What we do not have yet#
- We do not have a SOC 2 or ISO 27001 report today.
- We have not published an independent security audit.
To report a problem, see Vulnerability disclosure. The services we use are listed under Sub-processors.