What Signaria can see
Short version: staff directory profiles, yes. Email, no. Signaria has no permission to read, send or relay mail, and your mail flow in Microsoft 365 or Google Workspace is never changed.
Microsoft 365 permissions
| Permission | Type | Why |
|---|---|---|
| User.Read | Delegated | Lets an administrator sign in to the dashboard and reads your organization's name and verified domains once. |
| User.Read.All | Application | Reads staff profile fields (name, title, department, phone, office) to build each signature. |
The Outlook add-in asks for “read/write item”, the narrowest add-in permission that can insert a signature. It never reads the message body or recipients.
Google Workspace permissions
Granted by your super admin through domain-wide delegation, and removable there at any time.
| Scope | Why |
|---|---|
| admin.directory.user.readonly | Reads staff profile fields (name, title, department, phone, address) to build each signature. |
| gmail.settings.basic | Writes each person's Gmail signature. It covers Gmail settings only, not messages. |
What we store
- Your organization’s name, Microsoft tenant ID or Google Workspace domain, and verified domains.
- Your signature templates, rules and company details such as logo URL and website.
- Email addresses of the people who can sign in to the dashboard.
- A daily count of signatures served, with no names attached.
- Google Workspace only: a log of each signature push, with the addresses of up to 20 people whose update failed so you can fix them.
Staff profile data is read from Microsoft 365 or Google Workspace when a signature is needed and kept in memory for up to ten minutes. It is not written to our database.
What we never receive
- Message bodies, subjects, recipients or attachments.
- Anything in mailboxes, calendars, OneDrive or Teams.
- Patient information of any kind.
Removing Signaria
Microsoft 365: remove the add-in in the admin center, then delete the Signaria enterprise application in Entra ID. Google Workspace: delete the Signaria client ID under domain-wide delegation. Access ends immediately. Email us to have your organization’s records deleted.
Need a security questionnaire or a business associate agreement for your compliance file? Email support@signaria.app.