Updated 25 Sep 2026 · data hosted in Germany (EU)
Your agent’s mail lives on one server in Germany. Some of it goes to two AI companies, but only when you allow it, and this page says exactly what, to whom and when. You can switch that off for your whole workspace.
Contabo VPS · Germany
All of it on the Agentboxd server. The next section covers the only cases where any of it is sent elsewhere.
orgs.ai_processing
One setting per workspace, changed by an owner under Settings. It applies from the next message on.
offNo email content leaves the Agentboxd server.
Leaves the server
categorizedefaultJEV reads each inbound message to label it. This is the default.
Leaves the server
fullEverything in Categorize, plus reply drafts written by DeepSeek.
Leaves the server
sub-processors
Your own agent and the model you run it on are yours to choose; they aren’t on this list.
| Processor | Where | What it receives | When |
|---|---|---|---|
| Agentboxd serverHosting (Contabo VPS) | Germany, EU | Everything listed above: mail, attachments, contacts, knowledge, account data. | Always. This is where your data lives. |
| Backup serverNightly backups (a second server at the same provider) | Same provider | A copy of the database and stored files. | Every night. Each backup is kept 14 days. |
| JEV by TypeSafe AICategorisation | United States | Per inbound message: From, subject, the first 3,000 characters of the text, our SPF/DKIM/DMARC results, attachment names and types. | AI processing set to Categorize (the default) or Full. |
| DeepSeekReply drafts | China | The last 10 messages of one thread (extracted text), the contact’s name, notes and metadata, up to 5 knowledge documents, and your draft instructions. | AI processing set to Full, and only when someone asks for a draft. |
DELETE /v1/inboxes/:id
Mail is kept for your plan’s retention: 30 days on Free, 1 year on Builder, 2 years on Team, and unlimited or as agreed on Scale. Once a day we delete messages older than that, together with their attachments and the stored copy of the original email, and threads left empty. You can choose a shorter retention in Settings; moving to a plan with shorter retention shortens it for mail you already have. A message you label keep is never deleted by retention.
Contacts and knowledge are kept while your workspace exists; retention doesn’t touch them. Backups run every night to a second server at the same provider and each one is kept for 14 days, so anything deleted, by you or by retention, is gone from backups two weeks later.
Deleting an inbox in the dashboard or with DELETE /v1/inboxes/:id is a soft delete: the inbox disappears from your workspace, and its address stays reserved so nobody else can ever receive mail sent to it. To have the stored mail of a deleted inbox removed as well, write to support@agentboxd.com.
Write to support@agentboxd.com from the address you sign in with. We delete the workspace with its inboxes, mail, attachments, contacts, knowledge, API keys and webhooks.
JEV and DeepSeek receive the content listed above to answer one request. What they keep afterwards is set by their own terms. If that doesn’t work for you, set AI processing to Off or Categorize.
Authentication-Results
We don’t hold security certifications such as SOC 2 or ISO 27001. This is what we actually do. For a data processing agreement, write to hello@agentboxd.com.
MX agentboxd.com
These addresses run on our own server. Sign-in links are sent from login@agentboxd.com.