Learn

Email Integration

How Lev integrates with email providers and handles data.

Updated December 2025

Overview

Lev's email integration enables users to send deal-related emails directly from the platform and automatically track lender responses. The integration connects to users' existing email accounts (Google, Microsoft 365, or any IMAP-compatible provider) and provides workflow automation without requiring users to leave the platform.

Technical architecture

Our email integration uses an industry-standard middleware layer to securely connect with email providers while maintaining strict data isolation.

Middleware
Nylas — industry-standard email integration platform (SOC 2, ISO 27001, HIPAA)
Auth
OAuth 2.0 tokens (no credentials stored)
Providers
Google Workspace, Microsoft 365, IMAP
Scope
Per-user (not tenant-level)

How Nylas Works

Acts as a middle layer between Lev and email providers
Handles OAuth authentication flow
Sends push notifications (webhooks) when new emails arrive
Does NOT store email content — acts as a pass-through layer for API calls and webhooks

Email Integration Architecture

Data access

Understanding exactly what data we access — and what we don't — is critical for evaluating our email integration.

Data Access Matrix

Full access — stored
Emails sent via LevWe created the thread
Replies to Lev threadsthread_id matches
Headers only — discarded
All other emailsfrom, to, subject checked then discarded
No access — never requested
Non-Lev email bodiesNo thread_id match
Personal emailsNot in any Lev thread

How Lev processes your emails

See how different types of emails are handled — what triggers automation, what data is extracted, and what stays private.

Lender sends loan terms

RE: $12M Multifamily Refinance - 450 Oak Street, Austin TX

From:Sarah Chen
To:Mike Johnson

Hi Mike,

Thanks for sending over the details on the Oak Street property. We'd be interested in taking a closer look. Based on the information provided, here are our preliminary terms:

Loan Amount: Up to $11.5M (85% LTV)

Rate: SOFR + 275 bps

Term: 5 years, 30-year amortization

Prepayment: 3-2-1 step-down

Estimated Closing: 45-60 days

We'd need to see the trailing 12 T12, current rent roll, and Phase I environmental before issuing a formal LOI.

Let me know if you'd like to discuss further.

Best, Sarah

Lev AIAuto-processed

Quote auto-populates in your deal's quote matrix

Deal status updates to "Quote Received"

AI generates note: "First Capital interested at SOFR+275, 85% LTV"

Data extracted
Shared (anonymized)
MultifamilyTX$12MSOFR+27585% LTV
Private
450 Oak StreetFirst Capital

Lender declines to quote

RE: $8.5M Industrial Acquisition - 200 Commerce Drive, Phoenix AZ

From:David Park
To:Jennifer Walsh

Hi Jennifer,

Thanks for thinking of us on the Commerce Drive deal.

Unfortunately, we're going to pass on this one.

The property location is outside our current lending footprint for industrial.

Please keep us in mind for deals in the Northeast region.

Best regards, David

Lev AIAuto-processed

Deal status updates lender to "Passed"

AI note: "Metro Bank passed - outside lending footprint"

Contact note added with geographic preferences

Data extracted

No deal data shared. Lender preference (industrial footprint) is saved internally to improve future matching.

Lender declines but shares lending parameters

RE: $22M Retail Center Refi - Lakewood Plaza, Denver CO

From:Rachel Torres
To:Brian McCarthy

Brian,

We reviewed the Lakewood Plaza opportunity but will have to pass at this time — the deal size is below our minimum for retail in secondary markets.

Our current retail program:

Minimum loan: $25M

LTV: Up to 70%

Markets: Top 15 MSAs only

Rate: SOFR + 225-300 bps

For larger deals in primary markets, we'd love to take a look.

Keep us on your list!

Rachel

Lev AIAuto-processed

Lender marked as "Passed" on this deal

Lender profile updated with program parameters

Future deal matching improved with $25M minimum

Data extracted

No deal data shared. Lender program parameters ($25M min, 70% LTV, Top 15 MSAs) are saved internally to improve future matching.

Non-business email is ignored

Golf Saturday?

From:Tom Wilson
To:Mike Johnson

Hey Mike!

Are you free this Saturday for a round at Riverside? Tee time at 8am if you're interested.

Let me know - I can book for 2 or 4 if you want to bring anyone.

Cheers,

Tom

Lev AIAuto-processed

Email body never requested or seen by Lev

No notes, quotes, or status changes

Data extracted
Email ignored — no data processed

Security & compliance

Hosting
Amazon Web Services (AWS), us-east-1
Physical
AWS SOC 2 certified data centers
Network
TLS 1.2+ with HSTS preload
Monitoring
Datadog, Sentry, health check endpoints
Code Security
Automated linting, type checking, coverage gates
Dependency Scan
Dependabot (weekly updates)

Application Security

Redundancy
No single points of failure — if one system goes down, others remain operational
Isolation
Database instances physically separate from application servers
Single Function
Each server handles one purpose
Deployment
Continuous deployment with up-to-date images and configuration management

Compliance

SOC 2 Type 2Certified

SOC 2 compliance covers

Access controls
Data encryption
Business continuity
Disaster recovery
Incident response

LLM usage

How we handle your data when processing with AI is critical to our security posture. For detailed information about our LLM providers, data protection guarantees, and what data is sent to AI models, see our dedicated documentation.

LLM usage documentation

Data handling

Data Stored

Emails from threads launched through Lev
Attachments on those threads (term sheets, OMs, etc.)
Extracted quote data (parsed by AI)
Deal status updates based on email activity

Data Retention

No automatic deletion — emails retained until customer requests deletion
User deletion — users can delete individual emails from Lev (does not affect their inbox)
Account termination — all data exported and deleted on request

Data Ownership

  • Customer owns their data

  • Data is private to the customer's organization

  • Customer data is NOT used to train AI models

Privacy safeguards

Thread-Based Isolation

The core privacy safeguard: we only ever receive the body of emails on threads we initiated.

Personal emails (family, friends): Never accessed
Other business emails: Headers checked, body never requested
Side conversations with lenders (outside Lev): Not tracked unless manually included

Manual Inclusion Options

For emails started outside the platform that users want to track:

1
CC method
CC assistant@lev.com on the email — automatically picked up
2
Forward method
Forward the email to assistant@lev.com

After manual inclusion, future replies on that thread are tracked automatically.

full
Send + Receive — Maximum automation
send_only
Send only — Privacy-conscious users, no inbox monitoring
manual_cc
Manual CC only — Most restrictive, CC assistant@lev.com

PII considerations

Current state

No automatic PII detection in emails or attachments. If PII appears on a Lev-tracked thread, it gets stored.

ssn_on_thread
Moderate risk — Borrower sends SSN on a Lev thread. Could get stored if forwarded to lender.
non_lev_pii
Low risk — PII in non-Lev emails. Body never received.
attachments
Moderate risk — PII in attachments. Stored if on tracked thread.

Mitigations

Users can delete emails from Lev at any time
Most Lev emails go to lenders, not borrowers (reduces PII exposure)
SOC 2 controls protect stored data
Audit trails on all data access

AI features

The email integration powers several AI capabilities to automate deal management workflows.

quote_extract
AI parses lender responses and extracts term sheet data into a quote matrix
status_updates
Deal status updates automatically based on email activity
follow_ups
Send automatic follow-up emails to non-responsive lenders
note_gen
Auto-generate deal notes from email conversations
next_steps
AI suggests next steps based on conversation context

Data privacy guarantee

Customer data is NOT used to train AI models. AI features process your data for your benefit only.

Frequently asked questions

Will you read all my emails?

No. We only access emails on threads launched through Lev. For all other emails, we receive only headers (to check for thread ID matches) and immediately discard them. We never request or receive the body of non-Lev emails.

Can my company see my contacts/emails?

Contacts are shared within your team on Lev, but your email inbox remains private. Only emails you explicitly send through Lev become visible to your teammates on a deal.

What if our brokers won't integrate their email?

The email integration is optional. The platform is fully usable without it. Alternatives: send-only mode, manual CC to assistant@lev.com, or use Lev for deal management only.

What happens if Lev goes down?

Emails you've already sent continue to exist in your inbox normally. When service resumes, we resync and catch up on any missed replies. Your email functionality is never affected — we're just an overlay.