Inkbox handles sensitive communications and identity data. Its September 2, 2026 Privacy Policy says Customer Data may include emails, messages, attachments, call records and transcripts, contacts, notes, identity details and account configuration, and that authorized MCP clients may receive Customer Data within the permissions granted by the customer.6 The DPA governs customer-data processing and provides for data-protection obligations, subprocessors and customer assessment rights.7
Credential handling has a useful separation boundary: the vault documentation describes client-side, zero-knowledge encryption for API keys, login credentials, SSH keys and other secrets, with encryption and decryption occurring client-side.8 API keys are scope-bound, allowing agent-scoped keys to operate only as a specific identity while admin keys retain organization-level authority.9
Messaging compliance controls are unusually concrete for an agent communications product. Inkbox's phone documentation says recipients on the default SMS campaign must opt in by texting START, that STOP updates the recorded consent state, and that inbound calls/texts can be filtered with identity-level whitelist or blacklist rules.10 For higher-volume U.S. application-to-person messaging, Inkbox documents 10DLC brand/campaign registration, opt-in flows, STOP/HELP behavior and carrier review requirements.11 Shared iMessage requires the recipient to initiate the connection, while dedicated iMessage lines can initiate conversations; the pricing page states recipients can reply STOP to opt out.4
These are meaningful safeguards, but they do not remove the customer's responsibility for lawful outreach or independently prove operational security. The product is very young and the current fixed independent panel provides little exact-product validation. Y Combinator independently corroborates the active Summer 2026 company and the same agent-identity/communications product surface, but its profile is not a reliability or security benchmark.12