Trust Center

Yes. Noon uses AI to triage email, write course content, and write phishing simulation templates. In Device Protection, Noon uses AI in the cloud to triage alerts from your devices. AI usage monitoring is separate. It records which AI tools your team uses and doesn't read their prompts.

Device Protection sends device status, which install attempts were allowed, blocked, or flagged, firewall events (the website domain only), and a daily list of installed software. It doesn't send page content. For AI usage monitoring, it records the model, provider, MCP server, and tool name. Prompts and conversations stay on the device. For passwords and keys, it records the type, a few characters so you can recognize the finding, and the file name. The full password or key stays on the device.

‍

It depends on the feature. Email Protection and phishing simulations work through the Google or Microsoft connection, with nothing to install. Device Protection and AI usage monitoring need Device Protection installed on macOS or Windows devices. Deploy it with mobile device management (MDM), or install it on a single device.

No. The Google Workspace or Microsoft 365 connection doesn't request access to Google Drive, OneDrive, SharePoint, calendar, contacts, or chat. It accesses email and, for an organization connection, your directory of people and groups. Where Device Protection is installed, it reads certain local files on that device to look for passwords and keys. Noon doesn't upload those file contents.

When Noon marks a message as safe and the scan is more than 24 hours old, Noon removes its content: subject, body, headers, sender, recipients, and attachments. The result and the overview counts stay. Suspicious and malicious messages keep their content so you can review the evidence. The content stays until someone reviews the message.

No. Noon never asks for permission to send email as a person. Noon can read email. With a separate admin permission, it can also move a message to trash, to spam, or back to the inbox, and place a phishing simulation in a mailbox. Noon doesn't send the simulation as the person.

Noon covers email, devices, and AI usage. Email Protection detects phishing, business email compromise (BEC), fake sign-in pages, and malware. Device Protection blocks malware and unapproved software, lists installed software once a day, and can monitor or block websites. AI usage monitoring records the model, provider, Model Context Protocol (MCP) server, and tool that ran, so you can spot an unapproved tool. Prompts and conversations stay on the device.

Noon uses three separate applications: one for signing in, one for reading email, and one for moving email. Each appears as its own entry in Google Admin Console or Microsoft 365 admin center. Onboarding asks only for read access to your personal inbox. Permission to move email is a later grant, and only an admin can give it for the organization. You can revoke that permission and keep read access. You can connect the whole organization, or only your own inbox.

Use your existing Google or Microsoft work account. Noon has no separate sign-in or password. Signing in doesn't connect your email. You choose that during onboarding.