On servers in Frankfurt, Germany. That means your data is covered by some of the strictest privacy rules anywhere, and it stays in that jurisdiction.
Security & trust
Your inbox holds your most sensitive conversations. We treat it that way.
We’ve built Mailbutler to meet the standards that matter to security teams, IT reviewers, and anyone doing due diligence before rolling us out.
Servers in Frankfurt, Germany
Your data encrypted end to end
Reviewed annually
Where we stand on security
Our highest standard
ISO/IEC 27001 certified
ISO/IEC 27001 is the leading international standard for information security management.
Our certification means our processes, systems, and controls have been independently audited — not just described in a policy document, but verified by a third party.
It covers how we manage risk, handle data, and maintain security across the business, not just the product.
100% GDPR compliant
Our servers are located in Frankfurt, Germany, which means your data is handled under some of the strictest privacy and security regulations in the world — and stays within a jurisdiction built around protecting it.
Microsoft 365 certified & Google verified
Mailbutler is Microsoft 365 certified, meaning it’s passed an independent audit confirming safe handling of sensitive business data inside the Microsoft ecosystem.
We’re also Google verified, with annual reviews confirming we continue to meet Google’s strict security and data protection standards for apps that connect to Gmail.
What this means for you
If you’re evaluating Mailbutler as part of a security review or vendor questionnaire, these certifications are designed to make that process faster.
Independently verified controls
Audited by a third party
Clear data residency
One location, in Frankfurt, Germany
Ongoing compliance checks
Reviewed on a recurring schedule
Documentation for your review
Can’t find what you’re looking for? Reach out and we’ll be happy to help.
Security questions, answered
Where is our data stored?
Is our data encrypted?
Yes. Everything exchanged with or stored in our backend is encrypted at all times, using advanced encryption mechanisms. No compromises there.
Do you read our messages?
No. We never read, analyze, or store your message content or attachments. The Smart Assistant is the one feature that processes your text, and before anything reaches OpenAI we strip out all sensitive information — names, email addresses, links, and the like.
Is Mailbutler independently audited?
Yes. Our ISO/IEC 27001 certification means a third party has checked how we actually work, not just read our policies. You can download the certificate above.
What do “Microsoft 365 certified” and “Google verified” cover?
Microsoft 365 certification confirms we handle sensitive business data safely inside the Microsoft ecosystem. Google verification means an annual review that we still meet Google’s security and data protection standards for apps connecting to Gmail.
Can you complete our vendor security questionnaire?
Happily. Email us at info@mailbutler.io and we’ll send back whatever your review needs.