TriageDeskTHE QUEUE
LAST PASS 7H AGOLog inConnect a mailbox
Menu
LAST PASS 7H AGOLog inConnect a mailbox
last pass 7h ago, 3 min12 read of 60 a pass120 s kill window28 receipts

SECURITY · WHAT IT STORES

What this product stores, and who processes it.

This product reads your mail, which is the most sensitive thing any product on this frame does.

Accounts

This product has accounts. Sign in is a link sent to your email address, so there is no password to reuse, leak or reset badly.

What it collects

  • Your account: the email address you sign in with, and the mailboxes you connect
  • The messages in the mailboxes you connected, what the agent read each one to be about, and the reply it drafted — this is the product
  • Every decision you made on each draft, because that record is what makes the kill window provable rather than asserted
  • Anonymous usage analytics — page views and clicks. Form inputs are masked in session recordings

Who processes it

  • Supabase. authentication and the database holding your triaged messages, drafts and decision history supabase.com
  • Microsoft 365. one of the two mail rails a mailbox is read from, under exactly the access you granted privacy.microsoft.com
  • Google Workspace. the other, under exactly the access you granted policies.google.com
  • Stripe. takes the subscription payment and holds the card details — we never see a card number stripe.com
  • PostHog. anonymous product analytics, proxied through this domain posthog.com
  • Vercel. serves this site and holds its access logs vercel.com

Also true

  • The plan is DESK at $9/month. It is paid, and the live demo needs no account and no card.
  • ⛔ THIS PRODUCT READS YOUR MAIL, WHICH IS THE MOST SENSITIVE THING ANY PRODUCT ON THIS FRAME DOES. It reads only the mailboxes you connected, under the scopes you granted, and it sends nothing that you did not approve message by message.
  • Every action the agent takes is written to an append-only ledger with the evidence it acted on, including the ones nobody looks at. That record is what makes the kill window provable rather than asserted.
  • There is no password on this product. Sign-in is a link sent to your email address, so there is nothing to reuse, leak or reset badly.
  • Your data is scoped to your organisation at the database level, not only in the interface.

What the agent may never do

a complaint, a legal matter, a cancellation are never drafted at all, and every approved reply waits 120 seconds behind a kill window before it leaves the mailbox. Neither is a setting.

Reporting a vulnerability

Write to hello@thecompound.tech and a person answers.

WHEN THE CAPS CHANGE

TriageDesk reads the shared inbox overnight and drafts the replies, holding each one inside a kill window. How many it reads a pass, and how long that window runs, both change. Leave an address and TriageDesk writes when they do.