For IT
Information for your IT person
What Proovva Inbox asks Microsoft for, who approves it, where data is stored, and which AI providers see it. Everything on this page is being confirmed before launch.
Microsoft permissions
Proovva Inbox connects each user’s own mailbox with delegated Microsoft Graph permissions. It works with Microsoft 365 work accounts and personal Outlook accounts.
| Permission | What it is for |
|---|---|
User.Read | Reads the signed-in user’s name and email, to show who is connected. |
Mail.ReadWrite | Reads the inbox and writes the draft reply into the user’s own Drafts folder. |
Mail.Send | Part of the permission set. Proovva Inbox never sends on its own: each reply is sent by the user, from Outlook. |
MailboxSettings.ReadWrite | Creates the “Check figures” category in the user’s own Outlook, so advice drafts show it in colour. Reads or changes no email. |
offline_access | Keeps the connection alive between sessions without asking the user to sign in again. |
Admin consent
Admin approval applies to Microsoft 365 work accounts only. Your Microsoft 365 admin approves these permissions once for the practice, and we walk them through it on the set-up call. Personal Outlook accounts don’t need it. Each user then connects their own Outlook from inside Proovva Inbox.
Where data is stored
Stored in the EU (Frankfurt). Live email is read from Outlook and shown, not stored. A draft and its sources are stored with the draft’s history.
AI providers
Your emails are only sent to AI providers that don’t store or train on them. The full list of sub-processors, with regions, is in the privacy policy.
What it never does
- Nothing is sent until the user presses Send.
- Inside Proovva Inbox, only the user sees their own inbox and drafts. Colleagues and practice admins don’t.
- Proovva Inbox reads your ledger and never changes your books.
- Every draft is logged with the records its figures came from.