FILE № BP·AUTH · MICROSOFT
× Cancel
¶ AUTHORIZATION · PRE-FLIGHT CHECK
One more step
One more step
before Brainpage
starts.
On the next screen, Microsoft will ask you to grant Brainpage permission to read and send email, and access your calendar. Here's exactly what that means — and how Brainpage protects it.
▸ PREVIEW · WHAT YOU'LL SEE NEXT
Microsoft
sign-in screen
OAUTH 2.0
You'll be asked to sign into Microsoft and confirm Brainpage can access:
- [✓] Outlook — Read and label messages — apply your instructions
- [✓] Outlook — Draft and send — only after you approve each message
- [✓] Calendar — Read events and availability — schedule meetings
- [✓] Contacts — Read directory — so replies reach the right person
Secure Handshake
▸ Ready to continue?
Continue to Microsoft →
¶ WHAT BRAINPAGE DOES WITH IT
Access is the means. Not the point.
Brainpage uses these permissions to do work you delegate — nothing else.
▸ WHY BRAINPAGE NEEDS ACCESS
What Brainpage does.
- §1 Read email — so Brainpage can find the messages your instructions apply to.
- §2 Send email — so Brainpage can deliver the drafts you approve.
- §3 Calendar — so Brainpage can find slots and update events.
- §4 Contacts — so replies address the right person.
▸ WHAT BRAINPAGE NEVER DOES
Things Brainpage won't touch.
- ✗ Doesn't store your emails. Processed in memory, then discarded.
- ✗ Doesn't train AI on your data. Your inbox never enters a training set.
- ✗ Doesn't sell or share data. Not to advertisers, not to brokers, not to partners.
- ✗ Doesn't send without approval. Every outgoing email waits for your sign-off.
▸ Sounds good — let's go.
Continue to Microsoft →
¶ SECURITY BRIEF
How Brainpage protects every byte.
Brainpage's security isn't a checklist — it's the architecture. Audited by independent third parties, verified against the industry's highest standards, and designed so that even a successful server breach would expose nothing of consequence (because nothing is stored).
★ CERTIFIED ★
CASA TIER 2
VERIFIED BY INDEPENDENT AUDITOR
-
✓
CASA Tier 2 Verified Google's highest public certification for third-party apps accessing Gmail. Independent security assessment, renewed annually.
-
✓
Third-party penetration testing Regular offensive-security engagements. External auditors try to break in so Brainpage learns before anyone else does.
-
✓
Emails processed in memory Email content is fetched, used, and discarded in the same request. Not written to a database. Not cached.
-
✓
TLS 1.2+ in transit, AES-256 at rest Every connection encrypted. What little Brainpage persists — your SOPs, your account — is encrypted on disk.
-
✓
Approval gate on every outgoing action This is architectural, not a setting. Brainpage cannot send without your explicit confirmation.
-
✓
You can revoke access at any time One click in your Microsoft account permissions page — all access is gone immediately.
▸ Security checks out. Proceed.
Continue to Microsoft →
¶ LAST QUESTIONS
Still hesitating? That's fair.
№ 01 Can Brainpage read my emails?
Yes, that's what the permission grants — it's necessary for Brainpage to apply your instructions. But Brainpage processes in memory and discards; no copy is kept and your data never trains a model. You can revoke permissions at anytime.
№ 02 Will Brainpage send email without asking me?
No. This is structural, not a policy. Every outgoing email is drafted and waits for your approval. You can tell Brainpage in plain language when to auto-approve certain categories — but that's your choice, and reversible.
№ 03 What if I change my mind?
Go to your Microsoft account → Security → Third-party apps, and revoke Brainpage. Immediate. You can also delete your Brainpage account from settings, which purges your SOPs and session data within 24 hours.
№ 04 Who has seen the code?
Brainpage's security architecture has been assessed by an independent third-party auditor (CASA Tier 2). The infrastructure and app are regularly pen-tested. Brainpage has been in production for over two years with companies doing millions in revenue.
Ready when
you are.