Malicious email screened out
Spoofed senders, phishing and hidden instructions are held before the agent reads anything.
Security and data
What happens to your emails and your NetSuite data
SalesEnact reads business email and writes to your ERP, so your IT lead and finance director should ask hard questions. This page answers the common ones. For anything else, ask us and we will answer in writing.
- People approve everything
- Hosted in London
- Your own database
- Named sub-processors
- Cyber Essentials Plus
Controls in the product
Nothing reaches NetSuite without a person
Every email is screened and checked against your rules, and a person on your team approves everything before it reaches NetSuite or a customer.
Safeguards on every email
Policy check on every draft
A separate check flags anything that breaks your rules or the customer's instructions.
A person approves every action
The agent can only draft. Posting, sending, archiving and assigning all need a person's approval.
Locked and logged
Approved values are fixed, and every draft, approval and post is recorded against the original email.
Access and isolation
Roles and sign-in
Separate permissions to review, post and send. Sign in with Microsoft or Google single sign-on.
Scoped NetSuite access
A small bundle installed in your NetSuite account, using token-based authentication you can revoke at any time.
Your own database
Each customer runs in its own tenant and database. Your data is never mixed with another customer's.
Hosting
Where your data lives
- AWS London region
- Built and run in the UK
- Cyber Essentials Plus
- DPA signed before any live email
SalesEnact runs on Amazon Web Services in the London region. Emails, attachments and drafts are stored there, with credentials held in a managed secrets service rather than in application files.
Who processes it
To read emails and documents, SalesEnact uses a small number of specialist providers. We name them rather than hide them.
| Provider | Used for |
|---|---|
| Amazon Web Services | Hosting, storage and document text extraction (London region) |
| OpenAI and Anthropic | Language models that read emails and draft transactions, through their business APIs |
| Cohere | Ranking candidate products when matching order lines |
| Postmark | Receiving forwarded email and sending approved replies |
We sign a data processing agreement with every customer before any live email is processed. It sets out retention, deletion and the sub-processor list.
Send us your security questionnaire
We would rather answer your IT team's questions before a pilot than after. Send the questionnaire with your enquiry.
Contact us