Confidentiality in a practice has always rested partly on friction. Threads too long to read, attachments nobody opens, history that scrolls further than anyone scrolls. All of it arrived by accident, and all of it behaved like a control. An AI inbox clears that friction on purpose, because clearing it is the product. That’s the change to work with.
- What this software is built to do is what used to limit who read what. When that limit lifts, the software is working as sold.
- Access inside the firm feels it first. The standard you answer to runs person by person and record by record. The software’s boundary is the business.
- Software that drafts for you makes one mistake your habits miss. The recipient is right, the tone is right, and one fact came from another engagement.
- What you seal off is chosen by the one person who must stay out of a particular message. Sensitivity is too broad a test.
The friction that was doing the work
A practice mailbox holds far more than anyone in the practice reads. That happened by accident, out of sheer volume, and it quietly did a great deal of work.
Think about an ordinary Tuesday on a plain mailbox. Your colleague can open any thread on the shared address. They leave it, because finding out whether the Halloran chain matters means reading forty messages to the bottom. The seasonal preparer has the password from January and uses it for the eleven returns in front of them. A bank statement that arrived in February stays unread by everyone except the one person who needed the closing balance.
Now put an AI inbox over the top of it. Ranking says which threads matter before anyone opens one. A summary hands you what a thread says in a line, and the forty messages stay where they are. Ask a question of an attachment and the number comes back with the file still closed.
Every one of those is a reason to buy the thing. Every one of them also removes a cost. That cost used to sit between a person who had access on paper and information they had little reason to see.
You can make this trade with your eyes open, and the vendor is doing exactly what you bought. Whether to accept it is a question you settle before you connect, and it sits with the duty and the questions to put in writing. The question after you connect is narrower, and it’s the one that gets skipped. Which of those frictions was your practice leaning on, and what goes in their place? The rest of this page is that list.
It’s a change of degree. Search was already chipping away at this. Search hands you the thread and leaves you to read it, and a summary hands you the substance. Most of what follows sits between those two.
Who else has a seat
Start with the boundary these products actually hold. Separation runs between the businesses you operate. Inside one of them, what a colleague can reach is decided by which mailboxes and shared addresses are connected there. Which clients they happen to work on sits outside that. If your firm runs a shared address for client correspondence, and most do, that’s the whole practice in one surface.
The standard you answer to is finer. The FTC Safeguards Rule requires implementing and periodically reviewing access controls that “limit authorized users’ access only to customer information that they need to perform their duties and functions” (16 CFR §314.4(c)(1), checked August 19, 2026). Person by person, record by record. Products in this category work at the grain of the business and the mailbox, which is coarser.
So the grant you actually make is a seat, and a seat is a blunt instrument. That was already true of a shared mailbox, and it sat comfortably for years, for the reason the section above gives. A seat used to buy you a haystack. It now buys a ranked, summarized, searchable account of the same haystack. The preparer you bring in for the season used to work eleven returns, because eleven was what fitted in a week. That same preparer can now take in the state of two hundred clients over a coffee.
All of that is allowed. It’s also a disclosure you made in January, and you made it without thinking of it as one.
Which makes “periodically reviewing” the phrase that matters most. It’s also the first thing a busy season swallows. Seats opened in February stay open through May, and the person who left in April is on a list somebody means to get to. Put the seat list beside the extension list and read them on the same afternoon. Five minutes, once a quarter, on the one access control you actually operate.
What a forward carries under it
Confidential material leaves a practice through a forward far more often than it leaks. The forward is the ordinary act with the most concentrated client information in it. A thread history is a relationship: nine years of questions, corrected figures and second thoughts, sitting under the line nobody scrolls past.
Practices do this constantly, and they have to. The lender wants the file history. A client is introduced to a lawyer, or to the specialist who handles the state they just moved to. Someone is looped in on a return at the point it stops being routine.
What the AI inbox changes is the price of the covering note. Ask for a summary of where a client stands, and one comes back well organized, in a paragraph you’d have taken twenty minutes to write. That paragraph is a disclosure wearing the clothes of an admin task. A good one is unusually hard to cut down afterwards, because everything in it is relevant to something. So decide what the third party is getting before you ask for the draft. After that you’re editing, and editing is where things stay in.
Then the case that slips past everyone: a thread that grew a reader. Your client added their business partner at message forty, or the bookkeeper’s replacement was copied in last spring. Everything below that point is one reply-all away from a person who arrived after it was written, and every inbox stays quiet about it, including the one you have now. What’s genuinely new is that you can ask. Who has been added to this chain since it started is exactly the sort of question an inbox you can talk to will answer. It’s worth asking before you reply to anything that’s been running since March.
The mistake you cannot see
Every confidentiality failure a firm trains its people for shows up in the header. The wrong Baker offered by autocomplete. The reply-all. The attachment picked up from the row above. That’s why the training is always the same sentence: look at who it’s going to before you send it.
Software that composes for you produces a second kind, and in that one the header is perfect. A reply to the right client, on the right thread, in something close to your voice, carrying one figure that came from a different engagement. A sentence recapping a decision this recipient never made. A chase quoting a deadline agreed with someone else.
It’s rarer than the envelope mistakes, and most drafts you read will be clean. What makes it different is where it sits. Every check a firm has is an envelope check, and this one is in the body. It also reads correctly to the person receiving it. That’s how it survives long enough to become an actual disclosure rather than an awkward email.
So it earns a habit of its own, and the habit is short. Read a draft for its facts. Tone is the thing these systems are best at, so let it go by. Go through the specific claims instead: the figure, the date, the name, the commitment. For each one, point at where in this thread it came from. If the thread in front of you can’t supply it, the draft waits, and whether the fact is true is beside the point.
That check costs about fifteen seconds on a reply. It’s the honest reason to keep client correspondence on review rather than raising it early. It’s also the reason to watch a season of drafts before you decide how much you trust them.
Being able to say what happened
The duty has a second half, and most firms remember it on the day they need it. Alongside avoiding disclosure, you account for what was disclosed. A client asks who at your firm has seen their file. An insurer asks after a laptop goes missing. A partner asks whether the September letter went to the old address. Each one needs an answer you can produce, and “I’m fairly sure not” falls short.
Until now the answer was your sent folder plus your memory of who was copied. That was adequate for a reason worth naming: you performed every action yourself, so recall covered the ground. Memory scales to what one person did.
Once software is acting for you, recall runs out first. Something was filed. Something was forwarded. A scheduling exchange ran to a conclusion while you were with a client. If that’s written down where you can read it, all of it is answerable. If it lives only inside the software, the truthful answer to who saw this is that you don’t know.
So the record is a confidentiality control rather than a convenience, and it’s worth judging as one. Is it in plain words or in event codes? Can you get at it by client and by thread, or only by day? The question always arrives months late and about one person. Does it show what was read as well as what was done? How long is it kept, measured against how long you might be asked?
This is the one place where the trade runs your way, and it’s worth saying plainly. Your old mailbox kept an account of what left it, and that was all. A practice that can produce a readable history of what happened on a client’s correspondence is holding something new. It’s the sort of evidence firms are usually asked for and usually improvising.
What actually needs sealing
Every product here offers some version of a lane that stays sealed, and firms arrive asking which data belongs inside. That sorts the wrong thing, and the reasons run deeper than they look.
The practical reason comes before the legal one. In a practice nearly everything qualifies as sensitive, so a lane you use for everything becomes a mode. It carries a real price too. A sealed message comes through with no ranking, no summary and no task lifted out of it, because the seal holds against your own software as well. Seal the mailbox and you’ve paid for an ordinary mailbox.
What does select is the second reader. The question isn’t whether a message is confidential. It’s whether one person, legitimately on this thread or legitimately inside your firm, must stay out of this particular one. That set is small, and you can usually count it on your fingers.
One partner writing to you about another partner, on an address the practice shares. A client telling you about a separation before their spouse knows, on the chain you’ve both used for four years. An employee raising something about their employer, who is your client. A letter to one shareholder that the board’s own inbox must stay clear of.
Every one of those turns on the audience being wrong by exactly one person. The contents are ordinary. That judgment is yours alone, and software has no way to reach it. You’re holding it at the moment you write, which is the moment the lane is offered. A handful of messages a year, and the entire reason to have it.
Where does Point fit?
Point is one of these, so the whole page applies here. What Point does with the mail is the friction removal described above. Threads are ranked before you arrive. Every thread carries a summary. Ask a question of an attachment and you get the answer, with a link to the page it was read from. The habits are the other half of that.
- The separation Point holds is between the businesses you run. A practice and a rental company stay apart. Inside the practice, everyone you invite works in the same surface. That’s what makes the shared address useful, and it’s what makes the seat list your real access control.
- Every action Point takes is written down in plain language, and you can approve it, turn it down or reverse it. One thing stays done: a message already delivered sits on somebody else’s server, and Point says so plainly.
- How far Point goes is a dial, set separately for each kind of work, from suggest only, through preparing and waiting on you, to handling it. Every kind starts on review. Review is what gives you room for the drafting check above. Push one kind to the top of the dial and Point acts without asking, which is the whole reason to push it.
- A message that must stay between two people is locked in the composer, sealed on your device and opened on theirs, and the seal holds against Point too. Point states the cost up front: no summary, no ranking, no task.
Who else touches the mail is a list of names in subprocessors rather than a paragraph of reassurance. What Point will and will not do with your content, and which data the standard service excludes, are settled in the terms. The complete inventory of what the product does sits on the benefits page, and Point for accountants reads it back in the language of a firm.
Common questions
Does a summary count as a disclosure?
To the person who reads it, yes, in every way a client would care about. It’s worth going further than that. A summary is easier to read than the thread it came from, which is the point of having one, so it travels further inside your firm than the original ever did. Treat summarizing as a change in who effectively reads what. Then let it drive the review of your seat list. Your vendor’s answers are a separate question.
How do I stop a draft quoting one client’s figures to another?
You can’t stop it happening, and an honest vendor says so. What you can change is what you check. The habit your firm already has looks at the header. This mistake is in the body, with a correct header above it. So add one pass over the specific claims in the draft. For each figure, date and commitment, point at where in this thread it came from.
Our seasonal staff only touch a few clients. Is a seat really a problem?
The rule limits access to the information a person needs for their duties, record by record, and this category of product works one mailbox at a time. So a seat is the grant you actually make, and it’s worth more than it used to be, because ranked and summarized mail goes down far faster than a mailbox. Open those seats as late as the season allows, and close them in May with the extensions.
A client asks who at my firm has seen their file. Can I answer?
Run that question on yourself before a client runs it for you. Your sent folder and your memory cover what you did, which used to be everything. What software did on your behalf lives somewhere else. If those actions are logged in plain words and you can reach them by client, you have an answer. If they’re missing, the honest answer is that you don’t know, and today is a better day to learn that than the day you’re asked.
Which threads should be locked end to end?
The ones where somebody legitimately on the thread, or legitimately in your firm, must stay out of that particular message. Sensitivity is too broad a test, because in a practice most mail is sensitive, and a lane used for everything costs you the ranking and the summaries you bought. The partner writing about the other partner is the case. The routine K-1 chain stays where it is.
The short version
- Some of your confidentiality was resting on how expensive reading used to be. This software makes reading cheap, so that support lifts on the day you connect, by design.
- Inside one business the software’s boundary is the mailbox, and the standard you answer to runs per person and per record. The seat is the grant you actually make, so read the seat list every season.
- A forward carries the whole relationship under it, and an AI inbox makes the covering note cheap. Decide what the third party gets before you ask for the draft.
- The new mistake has a correct header and a foreign fact in the body, which is where your existing check stops looking. Read drafts for claims you can source.
- Sealing is chosen by the one person who must stay out of a message, and the record of what happened is a control worth judging as carefully as anything else.
For the category itself, start with what an AI email client is. The duty, the vendor interrogation and who should stay on a plain mailbox are in the client data guide. Which of the five kinds of product a firm is choosing between is in AI email for accountants. If two of you share the surface this page is about, one inbox for a two-person company covers the working half. The calm version of all of it is Point.