01
Your provider handles sign-in
Mailbox connections use the provider’s own OAuth flow. The password stays between you and the provider.
SecurityTrust needs
Trust needs
an explanation.
Your mailbox and CRM are sensitive systems. Ervona uses scoped access, encrypted credentials, account-level isolation, and records that show exactly what the Desk did.
Security at a glance
Access only what the work requires.
Connecting Ervona does not mean handing over passwords or opening your entire stack. Access is scoped, revocable, encrypted, and separated by account.
01 / ACCESS
OAuth, not passwords
Your provider grants a scoped token. Ervona never receives your email password.
02 / STORAGE
AES-256-GCM at rest
Stored tokens are encrypted before they touch disk, with the key held separately.
03 / ISOLATION
Row-level security
The database refuses to return records that do not belong to your account.
04 / CONTROL
Revoke at any time
Disconnecting invalidates access immediately. There is no cached copy left active.
Connections
How access actually works.
Every connection is designed around the minimum access needed to do the job—and a clean way to take that access back.
02
Credentials are encrypted before storage
Tokens and credentials are encrypted with AES-256-GCM using a key stored separately from the protected data.
03
Disconnect means disconnected
Revoking a mailbox or CRM connection invalidates its token immediately instead of keeping a dormant copy of access.
Account boundaries
Isolation lives in the database.
Row-level security prevents a query from returning another account’s records, even if application code makes a mistake.
CRM boundaries
One CRM per account.
Salesforce and HubSpot are mutually exclusive per account, enforced by a database trigger so records cannot be cross-mapped between two CRMs.
Retention
Kept only as long as it has a job.
What Ervona stores, how long it stays, and why it exists.
Send, skip, and hold actions
Kept so a quiet day is explainable instead of becoming a mystery.
With your account
Help-bot conversation logs
Enough time to investigate a recent issue without keeping the conversation indefinitely.
90 days
Mailbox and CRM credentials
Deleted—not merely deactivated—when you revoke the connection.
Until disconnected
Compliance posture
Clear about where we are.
Ervona is working toward formal SOC 2 attestation. That audit will cover the same areas described on this page: encryption, access control, isolation, and logging.
Found a security issue? Read our vulnerability disclosure policy or contact us directly.
security@ervona.ai →