Your data is in safe hands
makeo is built with security first. We protect your mail, credentials, and personal data with industry-standard encryption and GDPR-aligned practices.
AES-256-GCM encryption
All sensitive tokens and credentials are encrypted with AES-256-GCM — industry standard for strong protection. Data is useless without the key.
OAuth 2.0 — no mail passwords stored
We never store your email passwords. You sign in via Google, Outlook, or iCloud with OAuth. Only secure tokens are used — and they are encrypted.
Z: Alert — phishing protection
makeo analyzes each message and flags suspicious senders when the domain looks like known brands (e.g. gmai1 or rnicrosoft). You get a clear warning before you click.
Data in the EU
Everything runs on encrypted servers within the EU. Your data does not leave Europe — full alignment with GDPR.
GDPR compliant
We comply with GDPR and handle your data in line with the law. You have rights to access, rectification, and erasure.
No emails stored permanently
We do not store your emails on our servers. They are fetched from your mail provider via secure APIs when you use makeo.
Webhook signature validation
All incoming webhooks are validated with cryptographic signatures. Invalid or tampered requests are rejected automatically.
Isolated data per user
Your data is strictly isolated from other users. No cross-access — only you can reach your mail and settings.
HTTPS & secure connections
All traffic is encrypted with TLS 1.3. Nothing is sent unprotected — neither in transit nor at rest on disk.
Mail infrastructure & data protection
makeo is built with a “Privacy by Design” architecture that meets the strictest EU requirements for processing data for both individuals and businesses. Integrations with Gmail, Microsoft 365, iCloud, and other providers run on an isolated enterprise infrastructure.
OAuth 2.0 & token-based access
We never access your passwords. Connections are established via official API integrations (OAuth 2.0), where makeo only receives an encrypted access token. You retain full control and can revoke access at any time directly with your mail provider.
Isolated account segmentation
Each mail account is processed in a closed, sandboxed environment. This enforces strict access control and reduces the risk of data leakage across accounts or users.
Encryption at rest and in transit
At rest — All tokens and metadata are protected with AES-256-GCM encryption.
In transit — All communication between your browser, makeo, and mail servers uses TLS 1.3.
100% EU hosting (GDPR compliance)
All processing and storage runs on servers located within the EU. We comply with the General Data Protection Regulation (GDPR), so your data does not leave European jurisdiction without your explicit consent.
Zero-persistence policy
Email content is not stored permanently on our servers. Data is retrieved only in real time via secure API calls for analysis and generation, then cleared from active memory.
HIPAA & HITECH readiness
We offer a Business Associate Agreement (BAA) to support handling of sensitive personal health information (PHI) in line with high international security standards.