Controls and audit: limits on what an AI email agent can send

What this covers

Letting software send email in your name is a real decision. This page lists every limit inboxr places around that, what each one does, and where you change it. The short version: nothing is sent automatically until you allow it, the amount it can send is capped, and each automatic reply has to pass checks that do not depend on the AI's own judgment.

Controls on whether anything sends

Co-pilot is the default

Every new mailbox starts in co-pilot mode. Drafts are written and held in the review queue. Nothing leaves your mailbox without a person approving it.

The autopilot lock

Autopilot cannot be switched on until a mailbox has 20 clean approvals, meaning drafts you sent without editing. Edited approvals move the count back. The lock is per mailbox, so each inbox earns it separately.

Back to co-pilot at any time

Switching a mailbox from autopilot to co-pilot takes effect right away. You can also turn off "Process inbound mail" on a mailbox, which stops inboxr reading it at all.

Controls on what autopilot may send

Every failure has the same result: the draft is not sent and waits for a person. There is no case where a failed check sends anyway.

Send-rate caps

Each mailbox has a limit on how many replies it can send per minute, per hour, and per day. The limits protect your sender reputation if something goes wrong, such as a flood of inbound mail. There are two sets:

• Automatic sends have the tighter limit, because nobody is watching each one. When autopilot reaches it, further drafts are placed in the review queue.
• Sends a person approves have a higher limit. If you reach it, the approval is blocked with a message and you can send again shortly.

Send caps are separate from your plan's monthly AI replies, which is a billing limit. When a plan's monthly replies are used up, inboxr keeps receiving mail and pauses new drafting until you upgrade or your period resets. Nothing is lost and there are no extra charges. See pricing.

A record of what was sent

Sample data. Names and messages are fictional.

The Sent tab of the review queue lists every reply that went out and whether a person or autopilot sent it. For each email inboxr keeps the original message, the AI's draft, the confidence score and its reason, the final reply, and whether it was edited. The analytics page shows the split between automatic and reviewed sends over any timeframe, along with how often drafts needed editing.

Behind the scenes, inboxr also writes an audit log of sign-ins, review decisions, sends, mailbox mode changes, and billing changes, with the time and the account that made them. That log is kept on our side and used by our team for support and investigation.

Controls on who can do what

A workspace has two roles. Admins have full access, including billing, settings, and team management. Members get only the areas an admin grants them: review queue, mailboxes, agents, knowledge base, analytics, and, on plans that include them, chat and CRM. Areas a member lacks are hidden from their navigation. New members start with no access until an admin ticks the areas they need.

Controls on what the AI reads

• Ignore rules keep chosen senders, domains, and subjects away from the AI entirely.
• Bounce filtering removes delivery-failure notices automatically.
• First connection is bounded. When you connect a mailbox, inboxr starts with recent mail only. It does not draft replies to your entire back catalogue.

Who it is for

Anyone who has to answer the question "what stops it sending something it should not?" before agreeing to try an AI email agent. For how the automatic checks fit together, see autopilot and confidence scoring. For questions to ask any vendor, the guide to AI email agents has a checklist.