https://mailbuttons.com/blog/ Notes on giving AI agents an email address your security and compliance teams can sign off on. en-GB Tue, 14 Jul 2026 00:00:00 GMT https://mailbuttons.com/blog/watching-an-agent-misdirect-an-email/ https://mailbuttons.com/blog/watching-an-agent-misdirect-an-email/ Tue, 14 Jul 2026 00:00:00 GMT A step-by-step walkthrough of a governed mailbox blocking a misdirected send: the policy, the refusal, the audit row, and the owner's view. Every step is a passing CI test. https://mailbuttons.com/blog/ai-on-the-ops-inbox-accreditation-evidence/ https://mailbuttons.com/blog/ai-on-the-ops-inbox-accreditation-evidence/ Thu, 09 Jul 2026 00:00:00 GMT TIC firms run on process control — accreditation to ISO/IEC 17020, 17025 and 17065 is the licence to operate. When email automation reaches the operations inbox, an assessor will want to see the controlled process behind it. Here's what a defensible answer looks like. https://mailbuttons.com/blog/the-misdirected-certificate-problem/ https://mailbuttons.com/blog/the-misdirected-certificate-problem/ Thu, 09 Jul 2026 00:00:00 GMT In inspection, the inbox is the business — and one certificate to the wrong counterparty is not a productivity problem, it's a process-control failure in a firm that sells process control. Here's what an actual control looks like. https://mailbuttons.com/blog/openclaw-agent-email-lessons/ https://mailbuttons.com/blog/openclaw-agent-email-lessons/ Tue, 30 Jun 2026 00:00:00 GMT OpenClaw put autonomous agents on millions of machines — then became 2026's first agent security crisis. Here's what it means for anyone about to give an AI agent an email address. https://mailbuttons.com/blog/ai-agent-email-security-review-checklist/ https://mailbuttons.com/blog/ai-agent-email-security-review-checklist/ Fri, 22 May 2026 00:00:00 GMT Email lets anyone put input in front of your software. Before an AI agent gets an inbox, here are the questions a security or compliance reviewer should ask. https://mailbuttons.com/blog/ai-agents-gdpr-where-email-data-lives/ https://mailbuttons.com/blog/ai-agents-gdpr-where-email-data-lives/ Fri, 22 May 2026 00:00:00 GMT Putting an AI agent on email creates a new flow of personal data. Here's where it goes under GDPR — international transfers, processors, and the questions your DPO will ask. https://mailbuttons.com/blog/prompt-injection-is-an-inbound-email-problem/ https://mailbuttons.com/blog/prompt-injection-is-an-inbound-email-problem/ Fri, 22 May 2026 00:00:00 GMT Prompt injection isn't only a model problem — for an AI agent on email it's an ingestion problem, and ingestion problems have known controls.