Safety & privacy
Relay is built on one rule: AI does the work, a person decides what leaves. Here's how that holds up in practice.
Every reply, every shared report and every change in a connected tool waits on the Approvals screen. Relay sends only what you approved, exactly as you approved it: if the draft changes afterwards, it needs approving again. Each approved email is sent at most once.
Before an email or a spreadsheet goes to the AI, Relay swaps names, email addresses, phone and account numbers, IBANs, card numbers and amounts for placeholders like CUSTOMER_1. The real values are kept on your PC and put back afterwards. On by default.
Every case keeps the exact text that was sent to the AI, with the placeholders in place, and the answer that came back. The audit trail is append-only: entries can't be edited after the fact.
An email can't give Relay instructions. Incoming text is wrapped and marked as data, recipients are set by code rather than by the AI, and messages that look like manipulation attempts go to a person.
Tools have limits that no skill or AI answer can widen. When Relay is connected to one of your systems, for example, it never sends a delete, never reads or changes users, roles or logins, keeps production read-only unless you allow changes, and saves what was there before every change.
Relay is a Windows app. Its database, your files and your settings live in your own Windows user folder. Use a local AI model and email content never goes to an AI company at all.
A plain account of the data paths.
| Data | Where it goes |
|---|---|
| Your emails, files, cases and memory | Stay in Relay's database on your PC. |
| Text the AI needs to do a task | Sent to the AI provider you chose, with private details replaced by placeholders. With a local model it stays on your network. |
| Spreadsheets for reports | The AI sees the column names and a few masked sample rows. Totals and findings are calculated on your PC. |
| Replies you approve | Sent from your own mailbox through Microsoft 365 or your email provider. |
| Your licence key | Checked by Relay offline. About once a week Relay asks our server whether the key is still valid. It sends the key and an anonymous ID for the PC, never your email or data. |
No. Sending without approval isn't a setting you can turn on. Some internal steps, like building a Power BI report on your own PC, run without approval because nothing leaves the PC. The reply that shares the result still waits for you.
With masking on (the default), names on your "kept from the AI" list, sender and greeting names, emails, phone and account numbers and amounts are replaced before anything is sent. Masking is good but not perfect: unusual names written in free text can slip through, which is why every case shows exactly what the AI saw. For the strongest guarantee, use a local model.
That depends on the provider and your account with them. Most business API plans don't train on your data by default. Check your provider's terms; our guide to getting a key links to each one.
Relay only learns new facts from people at your own company domain, recipients are chosen by code, and anything that looks like an attempt to give it instructions goes to a person. Everything still waits for approval.
See the privacy policy, terms and data processing agreement.