aenuma App · Guided pilot
Security and privacy: what happens to your Outlook data.
aenuma works with client communication, which means confidential information. This page explains what the app reads, what it may send, where it stores data, what the AI gets to see, and where the limits are.
Read by default, send only with your OK
You connect your Microsoft 365 mailbox yourself and can choose to share your default calendar. aenuma then reads new emails and shared calendar entries every 15 minutes, even when the app is closed. By default, access is read-only.
aenuma never sends emails or creates meetings on its own. If you want to send replies or meeting invitations from aenuma, you grant that permission separately in Microsoft 365, and every single email or invitation needs your confirmation. Without that permission, you edit drafts and send them yourself from Outlook.
Depending on your firm's policy, your IT team may need to approve the Microsoft 365 connection. The connection uses delegated permissions, so aenuma can only access what you can see in your own mailbox.
Hosted and stored in Frankfurt, Germany
The application and database run in data centers in Frankfurt, Germany, within the EU. All traffic between your browser and aenuma is encrypted via HTTPS.
Your workspace, including emails, engagements and mailbox access tokens, is stored encrypted (AES-256-GCM). The encryption key is kept separately from the database in a protected secrets store. Data is backed up daily, and we have tested restoring from a backup.
The AI only sees what you assign
A briefing is generated from the emails and meetings you assign to an engagement. The rest of your mailbox is not sent to the AI. The AI does not use private calendar entries.
For briefings, meeting packages and reply drafts, aenuma uses an external AI service. That service is not bound to the Frankfurt location. The app's privacy notice describes what is transferred.
Every statement in a briefing links to its source, so you can check the exact wording of an agreement before you make a commitment or decision based on it.
Access and collaboration
In the firm workspace, your team shares clients and contacts. Engagements follow stricter rules:
Invitation only
There is no open sign-up. Accounts are created by invitation only.
Engagements stay private
Only the person who created an engagement can see it until they share it for viewing or editing. Not even admins can see it before then.
Revoke access immediately
Admins invite members, assign roles and revoke access. Revoked access takes effect with the next request.
What you should still check
AI summaries can miss details or weigh them incorrectly. Check important statements against the linked source.
aenuma is in its pilot phase and does not yet hold a SOC 2 or ISO 27001 certification. If your security team needs more detail before approving a pilot, we are happy to answer questions.
Questions from your IT or privacy team? Email us at hallo@aenuma.com.
Last updated: October 2026.
Start with one engagement
Request pilot access and try aenuma with a real client engagement. The request is free and carries no obligation.
Request pilot access