Security and privacy at Akera

Connections use TLS and stored data is encrypted. The sections below explain the protections available, who can access content, and the differences between Mail, Chat, and Akera Intelligence.

Encryption differs by product. Mail is encrypted in transit and at rest but is not end-to-end encrypted. Akera Chat messages, files, and conversation names are end-to-end encrypted before they leave your device; account names, membership, timing, message size, and storage usage remain visible to Akera.

We plan to bring end-to-end encryption to Akera. The goal is the same as Akera Chat: stored mail encrypted with keys Akera does not hold. This is a long-term plan, and we do not have a release date to share. Before any release, we will publish what it covers and what it does not, such as mail exchanged with other email providers and content you choose to send to Akera Intelligence. Until then, the access policy below applies.

Akera. Mail is encrypted at rest but is not end-to-end encrypted. Authorized Akera staff can access stored mail only when necessary to support, secure, or operate the service, or to comply with the law. That access is limited and logged.

Akera Chat. Messages, files, and conversation names are end-to-end encrypted before they leave your device. Account names, membership, timing, message size, and storage usage remain visible to Akera.

Akera Intelligence. AI is on by default. When it is on, mail content is processed on infrastructure Akera operates to provide AI features. It is not sent to a third-party AI provider. Akera Intelligence saves your conversations, including results it retrieved from your mailbox and files you upload, so you can return to them; you can delete any chat at any time, and Akera staff access to stored content follows the same limited, logged policy as your mail. You can turn AI off at any time in Settings; this stops new AI processing and does not by itself delete saved chats.

Secure sign-in. Your password is sent over an encrypted connection and stored only as a secure hash, never in readable form. Sessions support rotation and revocation, and two-factor authentication with an authenticator app (TOTP) is available.

Isolated multi-account sessions. Each account uses its own session and storage scope. Switching accounts does not share data between mailboxes.

Spam and virus filtering. Incoming mail is checked for spam and viruses as it arrives.

Sender verification on every message. Each message shows its SPF, DKIM, and DMARC results, which help verify that it came from the domain it claims, plus a virus-scan result.

No advertising. Akera does not sell advertising or scan mail to build ad profiles. Revenue comes from subscriptions.

No third-party trackers. The web client includes no third-party advertising, analytics, or social trackers.

Stored in the United States. Mail and account data are stored and processed in U.S. data centers. Our cloud provider secures the facilities and hardware. Akera, not our cloud provider, controls access to your data.

The Subprocessors page lists every third party that processes data, with its purpose and region. View subprocessors.

Data export. Download individual messages as a standard email file (.eml) from the preview. Full-account export is available on request from privacy@akera.tech.

Email security@akera.tech with reproduction steps. We ask that you give us time to investigate and respond before public disclosure.