Audit and privacy
What the audit trail records, and what stays in Google.
Every read, reply, send, forward, assignment, status change and label change is written to one searchable timeline with the actor, the timestamp, the alias and the thread. Admins filter it and export the result as CSV. Audit entries are kept 90 days and workflow run history 30, which covers the two questions that actually get asked: who replied, and what did the automation do.
What is deliberately not recorded matters as much. Message bodies are never copied into our database — threads render from the Gmail API on demand, so your mail keeps living in Google Workspace and leaves with it. Workspace metadata and audit logs sit in Postgres hosted in the EU, OAuth tokens are encrypted at rest, and deleting a workspace revokes Google’s grant and clears metadata within 30 days.
100% of the AI features stay off until you enable them, then call the OpenAI-compatible provider you configured with your own API key, so no model is ever trained on your mail. Automation sends exactly 0 messages on its own: a person presses send, every time. The terms commit to a 99.9% monthly availability target, a GDPR data export is delivered within 7 days, and a DPA is available on request.
- Audit entries kept 90 days, exportable as CSV
- Workflow run history kept 30 days — a third of the audit window
- 0 messages sent without a person pressing send
- 100% of AI capabilities off until you enable them
- Message bodies read on demand, never stored by us
- Metadata in Postgres hosted in the EU
- OAuth tokens encrypted at rest
- 99.9% monthly availability target
- 2 roles: admins see everything, members see their aliases
- GDPR export delivered within 7 days; DPA on request
The limits it runs inside
Six numbers from Google, read off Google's own pages.
Google sets the ceilings a shared inbox lives under: 30 email aliases per user, 5,000 recipients across all address maps, 2,000 messages a day on a paid account and 500 external recipients per message, 30 GB of pooled storage per person, and $7.00 per user per month for Business Starter. Unibox is built to fit inside all six.
- 30email aliases per user
- The ceiling Unibox routes within. Starter covers 5 of them, Growth 20, Agency as many as Google will issue.Google Workspace Admin Help
- 5,000recipients across all address maps
- The overflow path past 30 aliases: Recipient Address Mapping, where a domain with more published addresses than aliases keeps going.Google Workspace Admin Help
- 2,000messages a day, paid accounts
- Replies from a shared queue count against the sending mailbox, not the person who wrote them. A trial account gets 500, or 25% of that.Google Workspace Admin Help
- 500external recipients per message
- Out of 2,000 total across To, Cc and Bcc — worth knowing before anyone treats a shared alias as a mailing list.Google Workspace Admin Help
- 30 GBpooled storage per person
- Business Starter's allowance. The shared mailbox behind your aliases draws on the same pool as everyone else.Google Workspace Admin Help
- $7.00per user per month, Business Starter
- Google's list price, promotions aside. It is charged per person, which is the arithmetic Unibox is built to sidestep.Google Workspace Admin Help
“You can add up to 30 email aliases for each user at no extra cost.”
“The maximum number of recipient addresses for all address maps is 5,000.”
Two decisions of our own sit on top of those limits: nothing sends without a person approving it, and nothing happens without being recorded. That is the order the product was built in — the audit trail shipped before the AI drafts did, and 100% of the AI capabilities arrive switched off. It is also why the alias, rather than the mailbox, is the unit Unibox is priced and built around: one shared seat at $7.00 can carry 30 published addresses, where 30 mailboxes would cost $210 a month.
Get started today
Your team's shared inbox, set up in minutes.
No new domain. No migration. Connect Google Workspace and the whole team is in: aliases, routing, and all.
- No migration: your Gmail and domain stay put
- Connect Google Workspace in a few minutes
- Every reply, assignment and label change in the audit trail
- Nothing sends until a person approves it