Security

timetoreply is SOC 2 Type II compliant and ISO 27001 certified.

timetoreply ingests email header data to provide email reply time stats and data to help improve the performance of your team members. This includes the TO, FROM, CC, SUBJECT LINE, MESSAGE IDs and TIMESTAMPS. timetoreply does not ingest the body or attachments of any email.

Our main servers are located in the AWS (Amazon Web Services) data centre in London. We also offer dedicated private instances in other AWS regions on request.

Data is encrypted at rest and in transit. timetoreply is SOC 2 type II compliant, ISO 27001 certified, GDPR compliant, and we undergo an annual security test by one of Google’s recommended security vendors who run vulnerability and penetration tests on our infrastructure and application.

Yes, for Microsoft and Google customers, you can use your Microsoft and Google credentials to create an account and login to timetoreply.

Yes, data is encrypted at rest and in transit using AES-256 encryption (rest) and SSL (transit).

You can read up on the permissions we require for Microsoft and Google accounts to be linked by viewing our security document.

Microsoft M365 mailboxes and Gmail Google Workplace mailboxes. We also cater for EWS (Exchange Web Services) for exchange mailboxes, but we recommend using M365 or Gmail.

Yes. Setup fee and minimum contract applies.

No, we use OAuth 2.0 to connect to M365 and Gmail mailboxes. If you choose to use our EWS connector, then we require username and password. We recommend using M365 or Gmail instead.

Yes, we have 4 levels of access users and you can control what permissions and data these users have in order to control what they can see and do within the dashboard.

Yes, we use OAuth scopes, fully supported by Microsoft & Google. You can check what data we do have access to, and revoke our access to that data.