A mailbox is where an organisation keeps personal data without ever deciding to: customer names and phone numbers, employee leave and pay, bank details inside an invoice. When an AI email assistant starts reading that mail, India’s Digital Personal Data Protection Act (the DPDP Act) governs what the assistant does with it, with most obligations due to apply from May 2027 under the Rules as notified. This post is a practical checklist, not legal advice.
Why a mailbox is personal data
Under the DPDP Act, personal data is any data about an identifiable person. Company mail is full of it, in places a policy never looks: a supplier’s contact in a quotation, an employee’s leave request, a customer’s address in a complaint, a bank account in a payment advice. Nobody chose to store this as a database. It accumulates.
An AI assistant that reads the mailbox therefore processes personal data, whether or not the task looks personal. A summary of today’s inbox is processing.
Who is responsible
For personal data your organisation collects, your organisation is normally the Data Fiduciary. A tool that reads the mail for you is acting as a processor. Two points carry most of the weight. Under section 8(1), the fiduciary is responsible for compliance whatever arrangement it has with a processor. Under section 8(2), a processor may be engaged only under a valid contract, for activities related to offering goods or services to individuals, so how that applies to staff mail is a question for counsel. Choosing a tool does not move the responsibility to the tool’s vendor.
Using a public AI service on company mail is not barred outright. Section 16 allows transfers outside India except to countries the government notifies, and sector rules such as the RBI’s can be stricter. The point is that the arrangement has to be one you can explain. For the general case, see the DPDP questions your compliance team should ask about enterprise AI.
Six questions to ask any AI email assistant
The right-hand column shows how ZenithAI’s XgenPlus Mail connector answers each one. Ask a vendor for the same level of detail.
| Question | Why it matters | XgenPlus Mail connector |
|---|---|---|
| 1. Where does the mail go when the AI reads it? | Locates the processing, and the processors involved | ZenithAI’s own models on your organisation’s server read it. The mail stays hosted at XgenPlus, which remains your mail provider |
| 2. Is a copy kept? | Every copy is another store to protect, correct and erase | No mailbox copy for this connector. Answers are kept in chat history like any chat, so decide how long you keep chat history. AI Inbox, a separate feature, keeps the last 30 days, up to 2,000 messages, on your server |
| 3. Can the tool act on the mail? | Sending or deleting is a different level of risk from reading | No. In chat it only reads. It cannot send, draft, move, mark or delete |
| 4. Who can switch it on, and for whom? | Access should follow purpose, not default | Off by default. The administrator switches it on and can restrict it to named people. Each person connects with their own token, which the administrator never sees |
| 5. How do you stop it and remove it? | Withdrawal and erasure have to be possible in practice | Disconnect deletes the stored token and tool settings from ZenithAI. It removes access, not answers already in your chat history, which you manage separately. Pausing or deleting the agent in XgenPlus Webmail cuts access at the source in about 10 seconds |
| 6. What record exists? | You may need to show what was accessed and when | The server records which tool ran and when, not the text of your mail. It does not list which messages were read |
What stays your job
No product discharges these for you. ZenithAI’s security and governance page lists the controls it provides, and deployment options shows where it runs.
- Notice and purpose. Where notice or consent is the basis for processing, check that the purposes you gave cover an assistant reading this mail. Mail also holds data from suppliers, staff and others, so the basis can differ by person.
- The contracts. A valid contract with your mail provider and with whoever deploys and supports your AI. The connector adds one more tool on your side of that chain.
- Staff rules. Whose mailbox may be connected, and what staff may ask. A person connecting a shared or another person’s mailbox is a policy question before it is a technical one.
- Retention. Answers that quote mail become chat history. Decide how long it lives.
- Incident response. Treat a leaked token as an incident in your own process. Reset or delete the agent in XgenPlus Webmail, then Disconnect.
When a different approach fits better
- You are a bank or other regulated entity. Sector rules can be stricter than the Act. See the RBI’s AI rules for banks, and take advice before connecting any mailbox.
- Your mail is not on XgenPlus. The connector cannot reach it. AI Inbox works with IMAP and SMTP mail but keeps a copy of recent mail on your server, which changes the answers to questions 2, 3 and 5.
- The mailboxes hold unusually sensitive data. Health, children’s or financial data may justify keeping the assistant away from those mailboxes altogether. Not connecting is an answer too.
For timing, read the DPDP Act countdown checklist. Dates can move with amendments or court rulings, so confirm with counsel. This post describes how ZenithAI supports obligations; it is not legal advice and does not state that any organisation is compliant.
The data path in detail is in Can an AI assistant read your company email without sending it to the cloud?, and the risks of connecting an assistant to a mailbox are in What is MCP, and is it safe for enterprise email?
Availability
The XgenPlus Mail connector went live on our servers on 31 October 2026. It is not in installer 4.6.0 and comes with the next installer. A server gets it when it is updated and the administrator switches it on. AI Inbox, mentioned here, is also not in installer 4.6.0.
Questions
Does the DPDP Act apply when an AI assistant reads company email?
Yes, in general, with most obligations due to apply from May 2027. Company mail holds personal data such as customer details, employee records and bank details, and an AI assistant that reads it is processing that data on your behalf. Your organisation, as Data Fiduciary, stays responsible. Confirm your own position with counsel.
Is an AI email assistant DPDP compliant?
No tool makes an organisation compliant. A tool can support your obligations. ZenithAI's XgenPlus Mail connector reads on request on your own server, keeps no mailbox copy, is read only in chat, and is controlled by an administrator switch. Notices, purposes and contracts remain yours.
Who is responsible under the DPDP Act, the company or the AI vendor?
The company, as a rule. Section 8(1) makes the Data Fiduciary responsible whatever arrangement it has with a processor, and section 8(2) requires a valid contract with a processor engaged for activities related to offering goods or services. Using a vendor's tool does not transfer that responsibility to the vendor.
Can I use a public AI service on company email under the DPDP Act?
It is not barred outright. Section 16 allows transfers outside India except to countries the government notifies, and sector rules such as the RBI's can be stricter. You still need a valid contract, a lawful purpose and a way to explain where the mail went.
Does ZenithAI store my emails?
The XgenPlus Mail connector keeps no mailbox copy; it reads on request, and answers are kept in chat history like any chat. AI Inbox, a separate feature, keeps the last 30 days of mail, up to 2,000 messages, on your own server, and Disconnect deletes them.
To walk through these six questions on your own setup, request a demonstration, or get in touch.