Security
Mail is sensitive. This build says what it actually does.
VirtualMail.ai does not claim SOC 2, HIPAA, or an independent certification. Those words are not a feature until an auditor says so.
In this preview
The demo runs in your browser on fictional documents. The contact form does not save a message unless a durable lead store is configured, and this preview is not configured. Uploaded demo files are not sent to a model provider. Document text is treated as data, including text that looks like an instruction.
Designed for the hosted product
The schema isolates tenant rows with organization membership, keeps files in a private bucket, and expects signed downloads. Service credentials stay on the server. The policies are in the repository and have a static review. They have not been executed against a hosted database yet.
Before any real correspondence
Real customer files need approved retention, deletion, consent, malware scanning, and model terms. Until then, use synthetic documents.