Built to brand in a real editor, then handed to your company's own Gmail or Microsoft 365 account to deliver. We are never the sender — which changes the deliverability, the pricing and what the tool is able to know about your staff.
A campaign built in SlipperySign, delivered by the sender's own mailbox, as the recipient sees it.
Q3 all-hands: what changed, and what's next
Team — a short summary of where we landed this quarter, and the three things changing in October.
Everything below is also on the intranet, but I wanted you to have it directly.
No relay address, and no “via” line beside her name. It is her mailbox, so it is simply her email.
Into her inbox, in the same thread, where she can actually answer them. Nothing is stranded in a marketing tool.
It travels the same path as every other internal mail, so it arrives where internal mail arrives.
Because she sent it. There is no separate system of record to reconcile at audit time.
Each of these is a property of how the system is built, not a setting someone promises to leave switched off.
Opens and clicks are counters. There is no recipient column in the tracking tables, so no per-person report can be produced — by us, or by an employer.
Campaigns address the distribution lists already in your directory. Your staff list never leaves your tenant.
There is no password field and no password store. Google or Microsoft authenticates, and we receive an address.
Set against the customer record, not the deployment. EU storage carries a jurisdiction restriction.
| Area | Implementation |
|---|---|
| Identity | Federated to Google Workspace or Microsoft 365. No credential is seen or stored. |
| Sending | Gmail API and Microsoft Graph, from the user's own mailbox, under a revocable gmail.send / Mail.Send grant. |
| Token custody | The send token lives in the browser for the duration of the send. It never reaches our servers. |
| Recipients | Existing distribution lists and group aliases, resolved by your mail provider at send time. |
| Measurement | Aggregate counters and a daily rollup. No per-recipient identity is recorded. |
| Retention | Per-customer policy; campaigns and tracking detail delete themselves on schedule. |
| Audit | Sent campaigns are immutable. Administrative actions, including impersonation, are logged. |
| Infrastructure | Runs at the edge. No cold starts, and cost does not scale with your headcount. |
Components on the left, the email in the middle, properties on the right. Built on MJML, so it survives Outlook.
Mark a section and the table of contents reorders itself. Long updates stop being a scroll.
Freeze what must not move. Everyone edits around it and the template still looks like your company.
Send stays locked until the named reviewer signs off, and any edit afterwards voids the approval.
Viewer and editor roles, and a check-out lock so nobody overwrites anyone mid-sentence.
Sign in with the Google or Microsoft account you already have. Nothing to install, and no contact list to upload.
Open the appSlipperySign Mail — first of a family. Tools for learning experiences follow.
SlipperySign
