> ## Documentation Index
> Fetch the complete documentation index at: https://docs.enterprise.emailmeter.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Security overview

> Learn about our data security practices and compliance measures

![](https://storage.googleapis.com/em-docs/enterprise-documentation/images/security--background.webp)

## Basics

As your inbox contains exceptionally sensitive and important information, the security of your data lies at the very heart of everything we do.

Our team has years of security experience under their belt, having worked on large-scale projects for companies such as Google, Yahoo, Comcast and others.

## Certifications

Email Meter has received an ISO 27001 certification demonstrating that it has the appropriate controls in place to mitigate the risks related to security. You can download a copy [here](https://drive.google.com/file/d/1-xvNDeQCVdXO_HA3eWruk3iHPW5ertN1/view?usp=sharing).

Email Meter is also audited by a third party, with rigorous security audits conducted yearly. You can download the latest certificate [here](https://storage.googleapis.com/em-docs/enterprise-documentation/images/Email%20Meter%20-%20TAC%20Security%20Assessment.pdf).

## What data does Email Meter have access to?

Email Meter only accesses email metadata. The only information that we analyze are the email headers which contain data such as: from, to, subject, label or date.

We never process or store the body or attachments of your emails.

## Where does Email Meter store data?

We store data in Google Cloud Platform (GCP), which is highly scalable, secure and reliable. You can read more about it [here](https://cloud.google.com/security/infrastructure?hl=en).

By default your data is stored in the European Union, but Email Meter offers multiple data residency options to ensure customers control over where their data is stored.

## Resources

<CardGroup cols="2">
  <Card title="Google Security Handbook" icon="google" href="https://storage.googleapis.com/em-docs/enterprise-documentation/images/Security%20at%20Email%20Meter%20-%20Data%20Sheet%20(Google).pdf">
    Download our security data sheet for Google workspaces
  </Card>

  <Card title="Microsoft Security Handbook" icon="microsoft" href="https://storage.googleapis.com/em-docs/enterprise-documentation/images/Security%20at%20Email%20Meter%20-%20Data%20Sheet%20(Microsoft).pdf">
    Download our security data sheet for Microsoft 365 workspaces
  </Card>
</CardGroup>

## Custom questionnaires

If your organization has non-standard requirements or custom security questionnaires that you want us to complete, please get in touch with your Sales Manager or send an email to [security@emailmeter.com](mailto:security@emailmeter.com).

## Report a vulnerability

To report a security issue, please email [security@emailmeter.com](mailto:security@emailmeter.com).

## Frequently asked questions

<AccordionGroup>
  <Accordion title="How can I choose where my data is stored?">
    The region where your data is stored can be chosen during your onboarding process. By default, data is stored on the European Union. If you want to choose a different region, please speak with your Business Intelligence Consultant.
  </Accordion>

  <Accordion title="Is my data encrypted?">
    All data sent to or from Email Meter is encrypted in transit via TLS 1.3 and at rest with AES-256 encryption.
  </Accordion>

  <Accordion title="What data does Email Meter have access to?">
    Email Meter only accesses email metadata, which is always encrypted and never leaves the Google Cloud. We don't require access to the body or attachment of emails to generate email statistics.
  </Accordion>

  <Accordion title="Who are your data sub-processors?">
    You can find the list of our sub-processors [here](https://www.emailmeter.com/legal/data-subprocessors).
  </Accordion>

  <Accordion title="Do you offer granular roles and permissions?">
    Administrators can easily provide and revoke roles and permissions for teams and users. All permissions can be set granularly.
  </Accordion>

  <Accordion title="Are you GDPR compliant?">
    Email Meter is fully compliant with GDPR & CCPA. We also strive for compliance in EU/US data regulations.
  </Accordion>

  <Accordion title="Can I stop Email Meter from accessing my data?">
    You can always check what data we do have access to, and revoke our access to that data, at any time.
  </Accordion>

  <Accordion title="How long do you keep my data?">
    We keep your data indefinitely for the duration of your subscription unless you request deletion by contacting us directly.
  </Accordion>

  <Accordion title="Can I ask Email Meter to delete my data?">
    Contact us at [security@emailmeter.com](mailto:security@emailmeter.com) and we can help.
  </Accordion>
</AccordionGroup>