Security
Built to work when Microsoft can’t.
A backup for your email has to be independent of what it’s backing up, and as careful with your mail as you are. Here’s how Break Glass is built.
Independent of Microsoft
Hosted by Asfalia outside Microsoft’s cloud, with its own DNS and its own sign-in. Nothing in the outage path waits on Microsoft.
Phishing-resistant sign-in
Passkeys (Face ID, Touch ID, Windows Hello) or a one-time code by text. Break Glass never asks for a Microsoft password. Sessions are kept on our servers and can be ended at any time.
Least access to your Microsoft 365
Directory and Teams access is read-only: team and channel names and who is in them, never their messages. Mailbox access is granted by your admin in Exchange and limited to user mailboxes, never organisation-wide.
Chat encrypted with your own key
Each customer’s chat is encrypted with its own key, which is itself encrypted by a master key kept only on our application servers, never in the database. A copy of the database alone reveals no chat. People see only the channels and chats they belong to.
Encrypted in transit and at rest
Mail is received and passed on over TLS, and delivery to Exchange Online requires it. Stored mail and data are encrypted at rest.
Kept only as long as needed
The copy of recent mail covers the last 7 days. Mail received during an outage is kept for 30 days by default and chat for 90, both adjustable, then deleted automatically.
Your mail stays trustworthy
Microsoft’s spam filtering still judges the real sender. Mail you send is signed for your domain (DKIM) and passes DMARC.
Every admin action recorded
Changes need a passkey or a recent sign-in, and every change is logged with who made it.
Where your data lives
Application servers run in our own data centre. Mail and data are stored with Supabase on AWS in the United States (us-east-2).
Questions from your security team are welcome. Ask a security question
Be ready before the next outage.
Setup takes an afternoon. After that, Break Glass waits quietly until the day you need it.