Gatewatcherشروط الاستخدام والبيع.
ما يفعله SAFE MAIL، وكم يكلّف، وكيف يمكن التوقف، وما نفعله ببياناتكم.
Gatewatcherما يفعله SAFE MAIL، وكم يكلّف، وكيف يمكن التوقف، وما نفعله ببياناتكم.
النسخة الإنجليزية من هذه الوثيقة هي النسخة المعتمدة؛ وتعرضها هذه الصفحة دون تغيير.
Version of 29 October 2026. This is a translation; the French version prevails. Version française (fait foi)
These terms govern access to and use of the SafeMail service. They apply to any organisation that activates it, on trial or on a paid plan. Activating the service, or subscribing to a plan, constitutes acceptance. SafeMail is for businesses only and is not offered to consumers.
SafeMail is published by Gatewatcher, a French simplified joint-stock company (SAS) with a share capital of €672,418, registered with the Paris Trade and Companies Register under number 810 505 248, EU VAT number FR72810505248, whose registered office is at 75 boulevard Haussmann, 75008 Paris, France (“Gatewatcher”). Contact: contact@gatewatcher.com.
“Customer”: the organisation that activates the service. “User”: any person of the Customer who accesses the Console. “Console”: the SafeMail interface. “Protected mailbox”: a Customer Microsoft 365 mailbox covered by the service. “Plan”: SafeMail, a single plan that includes every feature of the service, subscribed on its own or with AI SOC for Microsoft.
SafeMail uses an artificial intelligence model to analyse messages received in the Customer’s Microsoft 365 mailboxes after delivery, in order to detect fraud: payment fraud, credential theft, impersonation, malicious attachments and QR codes.
Depending on the Plan and the Customer’s settings, SafeMail flags the message, applies a label, or sets it aside in a dedicated folder. SafeMail never deletes a message. A message the service could not analyse is never considered safe and triggers no action; it is automatically retried for 72 hours.
SafeMail complements the Customer’s existing protections (spam filter, antivirus) and does not replace them. It does not scan for viruses. No solution detects every fraud: Gatewatcher is bound by an obligation of means.
The service is activated by a Microsoft 365 administrator of the Customer, who grants SafeMail two permissions: read and write mail, read the directory. The Customer warrants that this person is authorised to grant them. The Customer may withdraw these permissions at any time from Microsoft Entra; the service then stops working.
Every new organisation receives a 7-day free trial, with no credit card, with every feature of SafeMail. A quote request extends the trial by 30 days, once.
At the end of the trial, without a subscription, analysis stops. The Customer can still view the Console, subscribe, return a message that was set aside, or leave the service. Its configuration is kept for 30 days so that it can resume without setting everything up again.
SafeMail is billed per Protected mailbox per year, excluding tax, according to a tiered sliding scale published on the Pricing page of the website. The price of a tier applies to every mailbox. The amount billed never exceeds that of the next tier up. A subscription covers a minimum of 25 Protected mailboxes.
The Customer chooses a 1-, 2- or 3-year commitment. The commitment discount is shown on the Pricing page. Subscribed together with AI SOC for Microsoft, SafeMail carries an additional discount, also shown on that page.
The number of Protected mailboxes is counted every day. Every mailbox covered by the service is counted, shared mailboxes included. An increase is billed pro rata until the annual renewal date. A decrease takes effect at the renewal date, with no credit.
Prices are expressed in euros or US dollars. The currency is set at subscription. The choice of processing region is included at no extra cost.
The price is guaranteed for the whole term of the commitment. Gatewatcher may change its price scale with at least 30 days’ notice to the Customer. The new scale only applies from the next renewal.
The invoice is annual and payable in advance, including for a 2- or 3-year commitment: one invoice per year. Payment is made by card or SEPA direct debit, through Stripe. Above the direct-debit ceiling shown at subscription, the Customer is invoiced for payment by bank transfer within 30 days.
Late payment incurs penalties equal to three times the French statutory interest rate, plus the fixed €40 recovery fee provided by the French Commercial Code. A declined or late payment is followed by reminders. If it is not settled, the service may be suspended 30 days after the due date, or 7 days after the deadline of an invoice payable by bank transfer.
The commitment is for 1, 2 or 3 years. At its end, it is renewed for 1 year at the price of the scale then in force. A Customer who recommits no later than 60 days before the renewal date keeps its price. Termination, or the withdrawal of a plan, must be requested no later than 30 days before the anniversary date, and takes effect at the renewal date. Leaving before the end of a 2- or 3-year commitment is possible, against repayment of the commitment discount granted. Under a negotiated contract: as per the contract. When it expires, the service is maintained for 30 days before any stop.
Termination takes effect IMMEDIATELY on the service: as soon as it is requested, SafeMail stops all monitoring, returns every quarantined message to its original folder, deletes its subscriptions to the Client’s mailboxes and erases the Client’s data. The Client does not have to wait for the end of the period for access to stop.
The current period remains payable. Termination gives no pro-rata refund: the committed year remains payable. In short, access stops at once, billing stops at the end of the period already begun.
One last step belongs to the Client alone: removing the authorisation granted to SafeMail in their Microsoft Entra directory (Enterprise applications → SAFE MAIL → Delete). Gatewatcher cannot do it on their behalf — the application does not hold the permissions that would allow it, and that is deliberate. Until this removal is done, the authorisation remains at Microsoft, without any data reaching us since every subscription has been deleted.
On termination, SafeMail first returns every message that was set aside to its original folder, then stops all monitoring and erases the Customer’s data. Only a record of the erasure (domain name, date, author) is kept, as evidence.
For subscribed SafeMail, and unless the contract provides otherwise, Gatewatcher commits to: (a) a monthly availability of the analysis service of at least 99.5%; (b) judging 95% of messages within 60 seconds of their notification by Microsoft. These measurements are calculated monthly and shown to the Customer in the Console.
Not taken into account: unavailability of Microsoft 365, maintenance announced at least 48 hours in advance, force majeure and causes attributable to the Customer.
If an objective is missed in a month, the Customer may request, within 30 days, a credit of 10% of one twelfth of the annual amount of SafeMail per missed objective, capped at 30%. This credit is the sole compensation owed under the service level. The free trial carries no quantified service level.
The Customer uses the service lawfully. It informs the people whose mailboxes are protected that the processing exists and, where applicable, its employee representative bodies. It secures access to the Console and does not attempt to circumvent the service’s technical limits or to use it to the detriment of third parties.
For the analysis of messages, the Customer is the controller and Gatewatcher acts as processor, on the Customer’s instructions, within the meaning of Article 28 GDPR. These provisions constitute the data processing agreement; a separate agreement may be signed at the Customer’s request.
The content of messages and attachments is read in memory for analysis and is never stored. Kept in order to alert the Customer: sender, subject, date, score, reasons for the verdict, attachment names and its Users’ decisions — for 365 days by default, a period the Customer can set between 30 and 1,095 days. No data is used to train an artificial intelligence model.
The Customer chooses its processing region. When the chosen region is not yet open, analysis is performed by the provider shown in the Console, which displays, for each message, the provider actually used. Gatewatcher’s sub-processors are the platform host (OVH, in France), the analysis model provider shown in the Console, and Stripe for billing.
Gatewatcher notifies the Customer of any personal data breach concerning it without undue delay and no later than 48 hours after becoming aware of it, and assists it in responding to data subject requests.
Each party keeps confidential the other’s information it learns through the service, for its entire duration and three years afterwards.
The service, its software, its question sets and its documentation belong to Gatewatcher. The Customer receives a personal, non-transferable right of use for the duration of its subscription. The Customer’s data remains its property.
Gatewatcher is bound by an obligation of means. It does not guarantee the detection of every fraud and is not liable for losses resulting from undetected fraud, nor for indirect damages. Except in case of gross negligence or wilful misconduct, its liability is limited to the amounts paid by the Customer in the 12 months preceding the event giving rise to the claim.
When the Customer goes through a Gatewatcher partner, it alone decides what access to its Console it grants that partner, and may withdraw it at any time.
Gatewatcher may change these terms with at least 30 days’ notice to the Customer. A Customer who refuses them may terminate before they take effect.
These terms are governed by French law. Failing an amicable settlement, any dispute falls within the jurisdiction of the competent courts of Paris.