Security
Read-only. Work only. Hosted where you are. Revocable any time.
Dayfile is trusted with your correspondence. Here is exactly how it is handled — and what we never do.
Read-only, via Microsoft 365
Dayfile connects through your Microsoft 365 admin centre using a read-only, publisher-verified Microsoft application. It never sends email on your behalf, never modifies or deletes messages, and never impersonates users.
Work only
Dayfile works out which correspondence is project or business work and files only that. Personal email, HR and personnel matters, payslips, bank statements, family threads, marketing and system notifications are left out — they never go into Dayfile.
Sensitive correspondence is restricted
Commercially sensitive correspondence — director-to-director discussions and similar — is recognised and restricted, so it isn’t automatically shared with the wider team. It is visible only to the people you nominate.
Folder access is yours to set
Connecting a mailbox doesn’t grant anyone access to anything. You decide who sees which folders, who can ask questions and who receives reports. An admin can remove a person at any time; their mailbox stops being processed immediately, and the project record already captured stays with the project.
Teams and WhatsApp, on your terms
Teams chats and recorded-meeting transcripts come through the same read-only Microsoft connection. WhatsApp is only captured from the project groups you choose to include — never from anyone’s personal chats or phone.
Every answer shows its source
When Dayfile tells you something — in a summary, a report or an answer — it quotes where it came from: sender, date, word for word. If it can’t show you the source, it says “nothing found”. It never fills the gap.
Where your data lives
UK-hosted by default. If you are in the USA, Australia or Canada, we host your Dayfile there instead — your data stays in your country. Encrypted in transit and at rest. Each customer’s data is logically isolated. No AI model — ours or anyone else’s — is trained on your data.
Retention, export and deletion
Your data is kept for as long as you’re a customer, and you can take a full export whenever you want it — including when you leave. On cancellation, data is deleted within 30 days. You can request deletion at any time.
Revocation
You can revoke Dayfile’s access at any time from your Microsoft 365 admin centre. Processing stops immediately.
Certifications
Cyber Essentials certified. Publisher-verified Microsoft application. Data handling aligned to UK GDPR, with written ownership, retention and deletion policies. Ask us for the security pack and we will send it.
Questions about how your data is handled? Email privacy@getdayfile.com — Rob, our CTO, answers these himself.
Your information stays yours.
Dayfile can’t send, edit or delete anything in Microsoft 365, and you can disconnect it at any time. Personal, HR and irrelevant conversations stay out, while sensitive information is only visible to the people who should see it. Your data is securely stored in the UK and is never used to train AI models.
Cyber Essentialscertified
UK GDPRcompliant
UK hostedUSA, Australia & Canada available
Microsoftverified partner
Ask us anything
Thirty minutes. Bring your IT lead.
We will walk through the connection, the filtering and the access controls on a real setup.
Book a 30-minute demoOr start a 30-day free trial — unlimited users, nothing to install, disconnect any time.