# Email Data Handling

> How Lev integrates with email providers and handles data.

Source: https://www.lev.com/docs/learn/trust/email-data-handling

Last updated: December 2025

---
Overview
  
    Lev's email integration enables users to send deal-related emails directly from the platform
    and automatically track lender responses. The integration connects to users' existing email
    accounts (Google, Microsoft 365, or any IMAP-compatible provider) and provides workflow
    automation without requiring users to leave the platform.
  

  Technical architecture
  
    Our email integration uses an industry-standard middleware layer to securely connect
    with email providers while maintaining strict data isolation.
  

  

  
    
  

  
    
  

  Data access
  
    Understanding exactly what data we access — and what we don't — is critical for
    evaluating our email integration.
  

  
    
      
        
          
          Full access — stored
        
        
          
            Emails sent via Lev
            We created the thread
          
          
            Replies to Lev threads
            thread_id matches
          
        
      

      
        
          
          Headers only — discarded
        
        
          
            All other emails
            from, to, subject checked then discarded
          
        
      

      
        
          
          No access — never requested
        
        
          
            Non-Lev email bodies
            No thread_id match
          
          
            Personal emails
            Not in any Lev thread
          
        
      
    
  

  How Lev processes your emails
  
    See how different types of emails are handled — what triggers automation,
    what data is extracted, and what stays private.
  
  

  Security & compliance

  

  
    
      
        Redundancy
        No single points of failure — if one system goes down, others remain operational
      
      
        Isolation
        Database instances physically separate from application servers {/* pragma: allowlist secret */}
      
      
        Single Function
        Each server handles one purpose
      
      
        Deployment
        Continuous deployment with up-to-date images and configuration management
      
    
  

  Compliance
  
    
      
      SOC 2 Type 2
      Certified
    
  

  
    SOC 2 compliance covers
    
      
    
  

  LLM usage
  
    How we handle your data when processing with AI is critical to our security posture.
    For detailed information about our LLM providers, data protection guarantees, and
    what data is sent to AI models, see our dedicated documentation.
  
  
    LLM usage documentation
  

  Data handling

  Data Stored
  

  Data Retention
  

  Data Ownership
  
    
      
        
        Customer owns their data
      
      
        
        Data is private to the customer's organization
      
      
        
        Customer data is **NOT used to train AI models**
      
    
  

  Privacy safeguards

  Thread-Based Isolation
  
    The core privacy safeguard: **we only ever receive the body of emails
    on threads we initiated.**
  
  

  Manual Inclusion Options
  
    For emails started outside the platform that users want to track:
  
  
    
      1
      
        CC method
        CC assistant@lev.com on the email — automatically picked up
      
    
    
      2
      
        Forward method
        Forward the email to assistant@lev.com
      
    
  
  
    After manual inclusion, future replies on that thread are tracked automatically.
  

  

  
    PII considerations
  

  
    
      
      
        Current state
        
          No automatic PII detection in emails or attachments. If PII appears on a Lev-tracked thread, it gets stored.
        
      
    
  

  

  Mitigations
  

  AI features
  
    The email integration powers several AI capabilities to automate deal management workflows.
  

  

  
    
      
      
        Data privacy guarantee
        
          Customer data is **NOT** used to train AI models.
          AI features process your data for your benefit only.
        
      
    
  

  Frequently asked questions

  
    
      Will you read all my emails?
      
        No. We only access emails on threads launched through Lev. For all other emails,
        we receive only headers (to check for thread ID matches) and immediately discard them.
        We never request or receive the body of non-Lev emails.
      
    
    
      Can my company see my contacts/emails?
      
        Contacts are shared within your team on Lev, but your email inbox remains private.
        Only emails you explicitly send through Lev become visible to your teammates on a deal.
      
    
    
      What if our brokers won't integrate their email?
      
        The email integration is optional. The platform is fully usable without it.
        Alternatives: send-only mode, manual CC to{' '}
        assistant@lev.com, or use Lev for deal management only.
      
    
    
      What happens if Lev goes down?
      
        Emails you've already sent continue to exist in your inbox normally. When service
        resumes, we resync and catch up on any missed replies. Your email functionality
        is never affected — we are an overlay.