You never gave Point your email password. There was no box to type it into. The connection was made on your provider’s own sign-in page, and what Point came away holding was the permission rather than the secret.
That is the sixth question answered in a line, and it is the least useful line on this page. The reassurance is real and it is narrow, because it settles something about a company, and what you were asking about was people. Who else can get in. Not what the software will do with the mail, which was the five chapters behind you, but who: which person, on which evening, could reach eleven years of client correspondence, and what they would be able to do once they were in there.
That question has a property none of the other five have. It was already live before you opened the tab. It stays live if you close it for good. And the arrangement it is asking about is one you have been running for a decade without ever once looking at it.
The question that was never about software
Everything so far has been a question about behaviour. What gets read, what leaves, what is written down, how far it goes, where the line between two businesses falls. Every one of them is about a thing that acts, and every one of them was answerable by holding a supplier to a document.
This one is about a door, and the door is older than the subject. Your mailbox has been reachable since the day it existed. Something has always stood in front of it, and that something has never been examined, because nothing has ever gone wrong with it in a way you noticed.
So the honest framing is not whether connecting Point adds a risk to a clean sheet. It is an audit of a route you already keep, with a new thing added at one end of it. The first chapter said that weighing something new against zero is the most common error in this subject, and nowhere is it a worse error than here.
The reason it gets asked last is that it feels like the plumbing question, sitting underneath the interesting ones. It is in fact the question the other five stand on. If somebody can be you, then the dial you set is theirs, the record is a record of them working, and the line you drew between the practice and the other venture is drawn around them too. Every answer in this series is an answer about what happens when the person at the keyboard is who they claim to be.
A key nobody can count
Start with what is guarding it now, and be unsentimental about it.
The password on your mailbox is probably older than the practice’s current filing software. It has been typed into a phone, and the phone before that phone. It sits in a browser at the office and possibly in one at home. It went to the person who covered January the year everyone was ill. Some version of it, or something close enough that guessing the difference is not hard, is on three other services you signed up to and forgot.
The defect there is not that it is weak. Plenty of them are strong. The defect is that nobody, including you, can say how many copies exist, because a password is the only kind of key that is duplicated by being read. Nothing happens when a copy is made. No event, no record, no notice, no moment. And taking it back is not a small act aimed at one holder; it is a change that reaches everything at once, which is why it never happens and why the copies accumulate for years.
Sit with the shape of that, because this series has been circling it from the beginning. The failure with no signal attached. The thing that goes wrong by being absent and gives you nothing to notice. It has turned up in a blind spot that quietly stops ranking a message and in a setting left too low for a year, and here it is again, sitting in the arrangement you were treating as the safe baseline.
What Point holds instead is an item on a list. Not a secret with an unknown number of duplicates but a named, bounded authorisation, issued to one company, that exists in a place where it can be seen and ended. Which is not primarily a claim about how careful Point is. It is a claim about what kind of object the thing is, and the difference is the same one the record turned on: something enumerable can be checked, and something invisible can only be believed in. The anatomy of that authorisation, where it is kept and what it covers, is set out properly in where your email credentials are kept. What matters here is only that the way in stopped being uncountable.
Your mailbox was always the master key
Now the part that reframes the worry, and it is the reason this chapter exists rather than a paragraph pointing at the reference page.
Point has no password of its own either. Getting in runs through your email address, which is one fewer secret for anybody on the team to invent, reuse or mislay. That reads as a convenience, and underneath it is a statement about where the lock actually sits: whoever can read your mail can get into Point.
Which sounds like a weakness until you notice it has been true of nearly everything you own for years.
Think about what your mailbox already is. The filing portal will send a reset there. So will the bank, the practice management system, the payroll software, the company registry login, and the insurer. Every one of them treats an email address as proof of identity, and every one of them will honour it without asking you anything else. Your mailbox is not one account among your accounts. It is the account that can reissue the others, and it has held that position quietly since long before anybody was worried about AI.
So the question “who else can get in” has had exactly one important answer the whole time, and the answer was never about email at all. It is about the provider account underneath it.
That has a consequence worth more than anything else in this chapter, and it points away from the product. The highest-value thing you can do about the sixth question is not a Point setting. It is turning on two-step verification at your provider, if it is not on already, and knowing which people can reach that account. It costs an afternoon at most, it improves every one of those services at once, and it has been waiting three years precisely because it protects something that has never visibly failed. Connecting anything to a mailbox is a good occasion to do it. Not because the tool is dangerous, but because the tool is the first thing in a decade to make you look squarely at an account you have been betting the practice on.
What somebody else would inherit
Be exact about the new door, because the comforting sentence and the complete sentence are not the same sentence.
Someone signed in as you would be inside Point, and inside Point is the accurate extent of it. They would see what Point sees, and could work through Point’s own surfaces, on each kind of work, at whatever level that kind of work is currently set to. What they would not come away with is the mailbox password, since it is not held anywhere in there to be taken.
“They cannot get my password” is true. “They could not do anything” is not, and a supplier who lets you hear the first as the second has not been straight with you.
Which hands you a second test for every row on the dial, and it takes about ten seconds to apply. The last-but-two chapter gave you one: the safe position is the one you will still be keeping properly in November, on a bad week, with a deadline on Thursday. Here is the other. For this kind of work, at this setting, what could a stranger do in the hour before anybody noticed?
For filing and sorting, a mess inside your own account, and a mess you can put back. For the row covering what you say to clients, the answer is the one thing in this entire series with no way back at all, because a message that has reached somebody is past everything you administer. Two entirely separate arguments now point at the same row and say move it slowly: the mailbox is a partial account of a relationship, and a raised setting is inherited by whoever is holding the account.
None of which is an argument against raising anything, and it is not an exposure this category invented. Somebody who gets into a plain mailbox this evening can write to every client in it immediately, with no setting standing anywhere in the way. Ordinary email has one autonomy level and it is the top one, for anybody who arrives holding the key. What the dial changes is that the exposure has positions in it now, and you picked them. What the record changes is that the question stops being what could have been done and becomes what was done, at what time, to which thread, which is the instrument built for a different purpose doing the most useful work of its life on the worst morning you will have.
Letting somebody in, and letting them go
The other half of who else is a shorter subject than the intruder and a far more likely one.
How a colleague gets into a practice mailbox today is that you tell them the password. Which does the exact thing this chapter has been about: it makes another copy that nobody can count, held by somebody whose reason for holding it expires. The seasonal preparer from three Januaries ago has it still. Nothing marked the moment it stopped being appropriate, because there was no moment. The only way to take it back is to change it, which lands on everybody including you, so it waits.
Access to Point is a membership instead, and a membership has an end that belongs to one person. Somebody joins, and later somebody leaves, and the leaving is an act aimed at them alone rather than a disruption everyone has to absorb. That is the whole improvement, and it is unglamorous, and it is worth more over a decade than most of the features anybody sells you.
The honest scoping, since this series has not softened one yet. Removing somebody ends what they can do next. It does not travel backwards through what they already read, and it is not a claim that the shape of a workspace protects you from the people inside it, which the chapter on two businesses worked through from the other direction. Point’s terms put the responsibility for admin roles, account access and authorisation settings on the customer, and the duty to tell Point promptly about suspected unauthorised access on you as well (terms, section 5, checked 19 August 2026). That is not a supplier dodging something. It is the accurate division: they can build a door that opens for one named person, and only you know which people ought to be named.
What six questions were for
Six chapters ago there was a closed tab and a feeling with no parts in it.
What you have now is not trust in AI. That was never on offer, and a verdict at that size would have had the same defect as the doubt it replaced: nothing inside it to revise. What you have is six answers, each attached to something a person can be held to, and not one of them a mood. The first five have been totted up twice in these chapters already and do not need a third telling. The sixth is the one that changes what the other five are worth: the way in is a list rather than a secret, and it rests on an account that was always the important one.
Notice what the last of the six did that the other five could not. It sent you outside the product, to a job on your own provider account that no vendor benefits from you doing. That is worth taking as evidence about the questions themselves, because a set of questions that only ever produces answers a supplier is glad to give is a set of questions the supplier wrote.
And the floor stays where it always was. Point’s own terms say it in as many words: “No method of transmission, storage, or processing is completely secure. Point does not guarantee absolute security” (terms, section 14.5, checked 19 August 2026). Every serious supplier says a version of that, and the ones who do not are the ones to worry about. It is not a let-down at the end of a long argument, because you were never comparing against zero. You were comparing against what is in the building already: one person, one password of unknowable reach, no record of what was done, and everything sitting at the top of a dial that does not exist.
Which is where the reading stops being the useful part. Six questions have taken the lump apart and given each piece somewhere to be checked, and every remaining thing you want to know about this arrives from a fortnight of watching rather than another page. Point is the thing to point at a mailbox, the full inventory is what it does once you have, and your first two weeks is the doing rather than the deciding. If what is still holding you is the professional question rather than the personal one, questions to ask any AI tool about your data is the list to put to a supplier in writing.
You were right to stop at that screen. You were right that nobody had given you an argument. What was missing was never nerve.