OBH Audit Engine

Connect your mailbox

Any Obsidian employee can connect here. Connecting only grants read-only access for the audit; only admins can run audits, and every access is logged.

The OBH Audit Engine asks for read-only Gmail access (gmail.readonly) — it cannot send, modify, or delete anything.

• Message headers: subject, sender, recipients, date, message-ID.
• Counts and facts derived from them (e.g. “LOIs sent this week”).
• If the admin has enabled AI reply analysis: the text of a broker's reply is read transiently to label its intent (interested / rejected / …) and immediately discarded.

• Audit findings, message-IDs, and bounded snippets (≤280 characters).
• Never email bodies — reply text is never stored, only its intent label.
• Your refresh token, encrypted (AES-256-GCM) with a key held outside the database.

Audit results are accessible only to allowlisted admins and every view is logged.