Four hundred relationships you earned over a career are worth more than the software that helps you keep them. Here is how we treat them.
Last updated — October 25, 2026
Compai is a book of relationships, so the first job is making sure yours stays yours. Every request to our service carries a signed identity that says who is asking, and the service answers only for that account. A request with no identity, an expired one, or one that names a different customer is refused before any data is read.
The parts of Compai identify themselves to each other with short-lived signed credentials rather than shared passwords, and every notification we accept from a partner service is checked against that partner’s signature.
You sign in with the account you already use for email, or with a link we send you. We never see or store a password. When you connect your mailbox, the permission you grant is scoped to what the product needs, it is encrypted at rest, and you can revoke it from your email provider at any time.
Nothing goes out of your mailbox without you. Compai drafts; you approve. A draft you have not approved never leaves your Drafts folder.
Your data is encrypted in transit between you and Compai and between the parts of our service, and encrypted at rest. The service runs under its own identity with the narrowest set of permissions that still lets it do its job, and credentials never live in the code.
Every component we deploy is pinned to an exact, verified version, so a release published or tampered with after we tested it cannot slip into a build. New versions wait a cooling-off period before we adopt them, and every build is checked against the public vulnerability record before it ships. A finding we cannot clear blocks the deploy.
Security fixes for the platforms we build on are applied within days of release.
Every refused request is logged with why it was refused, and we review those logs. Automated traffic on sign-in is detected and blocked. If something ever did go wrong, that record is how we would know what was touched, and how we would tell you.
We don’t sell your data, train models on your contacts, or share your book with anyone, including other Compai customers. The full list of promises is in our Data Pledge.
If you believe you have found a security issue in Compai, email info@compai.ai with what you saw. We read every report, we will not take action against good-faith research, and we will tell you what we did about it.