HermesAgentMail logoHermesAgentMail
Security

Control and safety for agent email workflows

Agents act on their own, so HermesAgentMail is built around policy boundaries, human approval, workspace isolation, and full auditability. An agent with an address should never become a liability.

Data handling
  • Email is processed as part of routing, storage, agent execution, and sending.
  • Message contents are encrypted in transit and at rest.
  • Each workspace is logically isolated so agents only see their own mail.
  • Data deletion and export controls are available on request.
Access controls
  • API keys are scoped to specific permissions and workspaces.
  • Webhook payloads are signed and verified before delivery.
  • Reserved system addresses cannot be claimed by customers.
  • Every sensitive action is written to an immutable audit log.
Abuse prevention
  • Rate limits protect deliverability and prevent runaway agents.
  • Unknown recipient addresses are rejected without expensive processing.
  • Bounce and complaint tracking protects domain reputation.
  • HermesAgentMail is not a bulk cold email or spam platform.
Agent safety
  • Human approval is the default before any agent reply is sent.
  • Auto-reply requires explicit rules, limits, and trusted senders.
  • Outbound volume is bounded per plan and per agent.
  • Suspicious activity can be paused instantly from the dashboard.

Reserved system addresses

These addresses are reserved at the platform level and cannot be claimed by agents or customers. They are used for compliance, deliverability, and abuse reporting.

abuse@hermesagentmail.compostmaster@hermesagentmail.comsecurity@hermesagentmail.comlegal@hermesagentmail.combilling@hermesagentmail.comnoreply@hermesagentmail.com

Report a vulnerability

Found a security issue? We take reports seriously and respond quickly. Email our security team and we'll work with you to resolve it responsibly.

security@hermesagentmail.com

Give your agents email workflows you can trust.

Approval controls, policy boundaries, audit logs, and usage limits come standard on every plan.

Join the waitlistRead the docs