Webmail
A whole mail client sitting inside the CRM, so the thread and the record it belongs to are one screen apart rather than one tab apart, and reading it never runs anything the sender wrote.
Opening a message in the reading pane
4 of 4 turned away<script>fetch(...)</script>sanitiserremoved before the document is built, along with every on-event attribute<a href="javascript:...">sanitiserjavascript, vbscript and data-html addresses are taken out<img src="https://.../px.gif">policyleft in the document and refused by the policy, so it never fires<div style="background:url(...)">policysender CSS is allowed to be inline and still cannot fetch anything
default-src 'none'; img-src data: blob:; style-src 'unsafe-inline'Product figures from the platform’s own defaults - not customer averages
How it works.
The body renders somewhere that cannot run
Message HTML is put in a frame that is never granted script permission, under a policy that forbids fetching anything, in its own document. Sender CSS therefore cannot reach the app around it either.
Remote images stay off until you ask
Anything the message would fetch from elsewhere is withheld and a bar offers to load it for that one message. Simply opening something tells its sender nothing.
Two of the folders are not folders
Starred is not one. It filters on the flag, because starring never moves a message anywhere. Drafts is a real row in the eight, and what it shows is what you began writing here merged with the draft messages the provider already had.
Read here means read on your phone
Marking something read or starred is pushed back over whichever connection carried it, so the mailbox in your pocket agrees with this screen. Archiving and deleting travel out too on a Gmail or a Microsoft mailbox, and not on one you wired up by hand.
Two moments in every message.
Every message passes through the same seven. Webmail is the lit ones, and everything either side of it is a different page in this category.
- 01Connect
the account it syncs with
- 02Compose
writing it, and from what
- 03Send
leaving now, or on a schedule
- 04Arrive
landing, and what it lands as
- 05Attach
pinning it to the right record
- 06Book
the meeting that comes of it
- 07Govern
who may use what, and see what
The specifics.
8 facts- Keyboard
- Eleven single keys, c to write and ? for the cheat sheet among them, so the list of them is on the key that opens it
- Rendering
- Sandboxed frame, no scripts, remote content withheld until you allow it for that message
- Paging
- Twenty rows a page, which is what the list asks for. Fifty is only what the endpoint falls back to when nobody says, and two hundred is the ceiling no screen reaches
- Folders
- Eight system rows per mailbox, Drafts among them. Starred is the one that is a filter on a flag rather than a place
- Mailboxes
- One active per person across all six connection kinds, checked by every route in before a second one is allowed
- Manual fetch
- Seven, fourteen or thirty days on demand, and three of those requests a minute per person
- Disconnecting
- Messages attached to a lead or a deal are kept. Everything else is deleted
- Not the same as
- This is the client you read in. How the mail got here is whichever of the six connections carried it
What this sits beside.
Mail and diary are one surface with several parts. These are the ones a person passes through in the same minute.
More in Email & Calendar
11 capabilitiesWebmail, four sync providers, tracking, calendar and meetings.
Google Calendar writes out the moment you save and mails the invitations, and reads back on demand, so a meeting booked on a call is there before it ends.
Outlook and Microsoft 365 sync through Graph with delta queries and subscriptions, so large mailboxes stay current without re-reading themselves.
A Microsoft mailbox brings its calendar and address book over Graph, on subscriptions that renew themselves, with a ten-minute pass running underneath.
Any mailbox that speaks IMAP and SMTP connects with a form and a live login test, so a provider nobody built an integration for is still a real inbox here.
Grant a whole template folder to particular roles and teams, so regulated copy stays with the people allowed to send it. Filing is the act of sharing here.
Opens and clicks recorded against the record, with signed link identifiers so the tracking endpoint never trusts a parameter it was handed.
One signature per connected mailbox, added by the send path to new messages and forwards, so mail from the platform arrives looking like mail from a person.
Book from the conversation, with the invitation, the joining link and the record all created together instead of in three separate tabs afterwards.
Connect Zoom and a booking creates, moves and cancels the meeting for you, with the joining link and passcode riding inside the calendar invitation.
Pick Google Meet on a booking and the calendar write mints the link with the invitation, so everyone on the account gets it rather than finding it in a note.
Connect Teams and a booking makes the meeting through Microsoft's own interface, carrying its joining address into the invitation the guests receive.
The rest of the platform.
Five more categories, all on the same record and the same bill. Each card names three of its capabilities, so you can tell from here whether it is worth opening.
Email & Calendar
See webmail on your own floor.
Thirty minutes, your numbers and your data. We will set webmail up live and you can decide from the thing itself rather than from this page.
14-day trial · no card · migration included