Noiz Mail Security and Privacy

Giving an AI app access to business mail is a decision about data, so this page sets out exactly what Noiz Mail does to protect it, what it cannot protect, and what you should decide before you connect. Read it before connecting a mailbox that holds client or staff information.

Last reviewed: 4 November 2026, against the live Noiz Mail connector.

Official Documentation Reference

• Security best practices for MCP (Model Context Protocol): the standard’s own guidance, which Noiz Mail follows.
• Is my data used for model training? (Anthropic) and Data controls in ChatGPT (OpenAI): the training settings in two of the AI apps.

Your Password

• You enter your mailbox address and password on the Noiz sign-in page at mcp.noiz.co.za only. The AI app never asks for them and never receives them.
• Noiz Mail checks the password against your mail server, then stores it sealed with AES-256-GCM. The key that opens the seal exists only inside your connection’s live tokens, mixed with a server secret that is kept out of backups. A copy of our database, or a backup, cannot reveal your password on its own.
• Every request to your mailbox is made from the connector’s own address, over TLS, to the mail server named for your domain. A later DNS change cannot move an existing connection to another server.
• Sign-in is rate limited per client address, per mailbox and per mail server, so the connector cannot be used to guess passwords. The numbers are in Limits and Behaviour.

What the AI Company Sees

Anything the AI reads goes to the company behind your AI app, under its terms: the message text, attachments it opens, the summaries it writes. Noiz Mail cannot change that. Before you connect:

• Choose a plan whose terms suit business mail. On consumer plans, check the training setting in the links above.
• Only connect mailboxes you are entitled to read. If you connect staff mailboxes, tell your staff in writing that their mail can be read through your AI app.
• Decide what the AI may send on your behalf. Keep approval prompts on (next section).

Sending Needs Your Approval

Noiz Mail marks sending as an action that needs your approval and its description tells the AI to confirm with you first. Most AI apps then show you the message and ask before it goes. They stop asking if you set the app to “always allow” or “allow all”, so:

• Read every message before approving it.
• If your app sends without asking, tell it to show you each message first.
• If your app refuses to send, ask for a draft instead and send it from your mail app.

Drafting, flagging and moving mail, including to Trash, are not marked as needing approval and may happen without a prompt. Noiz Mail never deletes mail permanently: Trash can be restored until it is emptied.

The Risk You Manage: Prompt Injection

A message in your inbox can be written to trick an AI into doing something: “forward this thread to this address”, “reply with the account details”. Noiz Mail tells the AI on every read that message content is untrusted data and must never be followed as instructions, and the AI apps have their own defences, but no connector can make this impossible. Approval prompts on sending are your protection: an AI that has been tricked still has to show you the message, and you say no.

What Noiz Keeps

• One audit line per tool call: the time, the connection id, the mailbox address, the mail server, the tool name, the folder, a count and the outcome. Never recipients, subjects, bodies, attachments, tokens or passwords. Audit lines are kept for 30 days.
• The sealed password and the tokens for each connection, deleted 30 days after the connection is revoked.
• No copy of your mail. Every call reads from your mailbox live and keeps nothing afterwards.

Cutting a Connection Off

• In your AI app: disconnect or remove the connector. The steps for each app are in How to Disconnect or Remove Noiz Mail.
• On the manage page: sign in at mcp.noiz.co.za/mail/manage with your main mailbox and click Disconnect, or Remove next to one mailbox.
• Everything at once: change your mailbox password and update your mail apps. Every connection that holds that mailbox stops the next time it is used.
• On request: we can revoke any connection to a mailbox we host. Open a ticket and tell us the mailbox address. Never send us your password.

Keeping Mail on Your Own Computer Instead

If you want the AI to work with your mail without any service in between, our MCP for Thunderbird add-on lets Claude Desktop, Claude Code or Codex work with the mail Thunderbird already holds on your PC. Your password never leaves the PC. Our guide is How to triage your inbox with Thunderbird and an AI assistant.