# Built-in protections

alfred_ reads mail and calendars written by other people, so it's built to treat that content carefully. These protections apply automatically.

Source: https://get-alfred.ai/docs/trust/protections  
Updated: 2026-11-03

## Content from other people is treated as data

Someone could write instructions into an email hoping an assistant follows them. alfred_ treats text from these sources as information to read, not instructions to carry out:

- **Incoming email** and the threads it quotes
- **Calendar events** and invites from other people
- **Attachments and connected apps** such as Slack and CRM records

## Sends and bulk changes check with you

Sending email, inviting people, and sweeping cleanups show you a preview first, so a bad instruction can't quietly become an action. See [Approvals](https://get-alfred.ai/docs/trust/approvals).

## Accounts stay separate

Routines and the assistant work only with accounts you've connected. On a team, a teammate's mail and calendar stay private unless they say yes to sharing.

> **What you can do.**
>
> Review rules and routines that send on their own, and connect only the apps you need.