Security
Is it safe to give Ettore your ERP and your sales mailbox?
It is the right question to ask any AI tool that reads your customers’ emails and writes to your ERP. Here is what Ettore does with that access, stated plainly — including the part that leaves the EU.
Sample data
How the access is shaped.
Your ERP stays the source of truth
Products, customer price lists and stock are read from your ERP. The language model turns an email into line items; the price comes from your price list, not from the model.
Write-back is switched on when you trust it
Until your team trusts the drafts, Ettore writes nothing back to the ERP. It costs you review time and nothing else.
You decide what may go on its own
By default a person approves every quote and order. Autopilot applies only to the request types you explicitly choose, and only when the match is clean. You can leave everything on review.
It starts with one mailbox
You do not connect the whole back office on day one. One inbox, real requests, and a decision about the second one afterwards.
The questions to ask, and our answers.
Ask every vendor the same questions. These are Ettore’s answers.
| Question | Why it matters | Ettore |
|---|---|---|
| Where is our data stored? | Location decides which law applies to it | On DigitalOcean servers in Frankfurt, Germany |
| Which AI models read our emails? | The model provider handles your data too | OpenAI and Anthropic, through their APIs. That processing may happen outside the EU |
| Can those models train on our data? | Training would put your data inside a model others use | No. Their API terms don’t allow training on API data |
| Is our data used for another customer? | A shared model or synonym list can carry your catalog into someone else’s results | Never shared with another client, never used to serve one |
| Who on your side can see our data? | Standing access is the real risk | Nobody by default. Access is granted per incident |
| Is there a log of what it did? | Without one, nobody can check a decision afterwards | Every action is logged. Your admin sees it; we see it only during an incident |
| What can it write to our ERP? | Reading and writing are very different risks | A quote or order, once a person approves it — or on Autopilot, only for request types you chose and only on a clean match |
| What does it do when it is unsure? | A confident wrong match becomes a wrong price on a customer document | Unrecognized lines default to Check match, never to Ready |
Security questions.
Does our data leave the EU?
It is stored in Frankfurt. To read your emails, Ettore sends their text to OpenAI and Anthropic models through their APIs, and that processing may happen outside the EU. Their API terms don’t allow training on it.
Will our catalog or prices improve results for another distributor?
No. Your emails, catalog, prices and quotes are never shared with another client, never used to serve one, and never used to train a model.
Can your team read our emails?
Not by default. Access is granted per incident, and everything Ettore reads and does is logged where your own admin can see it.
Which mail and ERP systems does it connect to?
Mail intake works with Outlook and Gmail. Odoo, SAP Business One and Microsoft Dynamics are connected.
Can we stop using it?
Yes. You can turn it off anytime.
Bring your security questions to the demo.
Connect one mailbox, see exactly what Ettore reads and what it drafts, and decide on the rest afterwards.