Can Hugo send email on my behalf without asking?
Can Hugo send email on my behalf without asking?
No. Hugo drafts email and summaries; sending through your connected mailbox requires your explicit action in the product and respects your mailbox permissions. There is no tenant-wide send capability.
Does Surfaice train on our leases, emails, or documents?
Does Surfaice train on our leases, emails, or documents?
No. Customer content is not used to train Surfaice models or vendor models under our commercial agreements. See Data handling.
Can we read the CEO's mailbox tenant-wide?
Can we read the CEO's mailbox tenant-wide?
No. Mailbox connectors are per user, granted by that user, and gated by Surfaice role. Admins can disable email connectors for roles that should not use them.
What is logged in the audit trail?
What is logged in the audit trail?
Agent runs record who initiated a request, which tools and connectors were used, and what artifacts were produced. See Audit trail.
Where is data stored?
Where is data stored?
Each customer environment is isolated on Google Cloud in US regions. Surfaice does not mirror your full DMS or mailbox by default. See Data handling.
What happens if we disconnect or offboard?
What happens if we disconnect or offboard?
Connector access stops immediately. Systems of record were never replaced, so there is nothing to unwind in Lucernex or SharePoint. Deletion of limited persisted Surfaice data follows your agreement.
Can we block HR, legal, or sensitive email topics?
Can we block HR, legal, or sensitive email topics?
Yes. Instance-wide exclusion lists by keyword, sender, domain, and folder apply across email-touching skills.
Are you SOC 2 certified?
Are you SOC 2 certified?
SOC 2 Type II is in progress via Vanta (observation period ahead of independent audit), expected Q3/Q4 2026. See surfaice.pro/security for current status.
Who do we contact for security questionnaires?
Who do we contact for security questionnaires?
Email security@surfaice.pro for the Security Guide, architecture diagram, and AI governance policy under NDA.
What if Hugo gives wrong lease or CAM numbers?
What if Hugo gives wrong lease or CAM numbers?
Treat outputs as drafts. Your team verifies citations before updating systems of record. Report recurring accuracy issues to your Surfaice admin — see Agent limitations.
Can users export chat history?
Can users export chat history?
Workspace policy and role determine what can be saved or exported. Sensitive exports should follow your company’s data classification rules.