Privacy and security

Your messages are stored in the Netherlands

Conserio runs in the Netherlands, on Binadit’s own hardware. No other party processes your messages. Storage is encrypted, backups too. All connections use TLS.

Signing in

You sign in at your company’s mail server, in your browser. Conserio never sees your password and does not keep your mail server’s token on the server. On your computer your keys are kept in the system keychain.

Every hour Conserio checks that your account is still active. If your administrator blocks your account, Conserio closes your connections within a second.

No end-to-end encryption, for a reason

Conserio encrypts your messages in transit and on the server, but not end to end. That is a deliberate choice. With end-to-end encryption the server cannot read your messages, and then it also cannot:

• search the whole history,
• give a new device your full history,
• apply a retention period,
• give your company an export, for example for a subject access request.

So we choose: everything in the Netherlands, encrypted on disk, no third party looking in, and push notifications that Apple and Google cannot read.

Push notifications on your phone

A notification on your phone goes through Apple (iPhone) or Google (Android). Conserio encrypts the content with a key that only exists on your phone. Apple and Google only see an encrypted block. Your phone opens it itself and shows the company, the conversation, the sender and the start of the message.

Files are kept in Drive

Conserio itself never stores a file. What you share is kept in your company’s Team Drive, with Drive’s permissions. A file from someone outside your company goes straight to your Team Drive and does not pass through the Conserio server. See Files.

Link previews

When someone posts a link, the Conserio server fetches the preview, not your computer. The site therefore does not see who looks at the preview. Images in a preview also come through Conserio.

On your computer

Conserio also keeps your messages on your computer, so the app is fast and works without a connection. When you sign out an account or a device, Conserio removes those messages. See Devices and signing out.

How long messages are kept

Messages are kept as long as your company’s retention period: 6, 12, 24 or 36 months, chosen in the binadit portal. Conserio deletes anything older for good on the server and in the app on your computer and phone, with the search data and cached images. See Administration.