NORĴI Try demo
Security and data

We do not take a copy of your correspondence.

NORĴI reads your mail where it lives and writes drafts back into your own mailbox. What we keep is the record of what we did, not what was said.

What we hold
Message identifiers and timestamps
Who wrote to whom
Your compliance dates
The audit trail of every draft, approval and send
What we do not
Message bodies
Your correspondence stays in your Microsoft or Google tenant

There is no second copy of your client correspondence sitting in our database, because we did not build one.

Where the model sees it

Content is processed at the moment a draft is written. The provider is a named sub-processor and we will not pretend otherwise.

Anyone who has read a hundred of these pages knows a language model is involved. Naming it is the part that makes the rest believable.

Sub-processorWhat it processes
Language model provider
named in the DPA
Message content, at the moment a draft is written
Your own mail provider Everything - it is your tenant, and your correspondence never leaves it
Hosting and database Identifiers, timestamps, dates and the audit trail
The full list, with named entities and regions, is published in the data processing agreement.

Access

Per user, granted by that user, revocable at any time. One negotiator's mail is never used to serve another.

Isolation

Enforced at the database and tested by attempts to breach it, not asserted in a policy.

Send this page to your IT person.

If something here is not specific enough to check, tell us and we will make it specific rather than reword it.

© 2026 NORĴI LtdRegistered in England and Wales, company no. 17180824 · Registered office: York, England ULI PropTech Innovation Challenge 2026 · UK & Ireland Finalist Built to UK GDPR