Skip to content
Comma Compliance

Email

Not everyone runs on Microsoft 365 or Google.

Comma captures those mailboxes too.

Any IMAP-compatible mailbox captured into the same SEC Rule 17a-4 and FINRA Rule 4511 compliant archive as your WhatsApp, Signal, and iMessage records. On-prem Exchange, FastMail, Zoho, and ProtonMail Bridge all supported. Email archiving software that works with the server you already have.

Enter your IMAP credentials once. Comma connects, polls for new messages, and writes every email — headers, body, and attachments — to WORM storage.

Get in Touch

Capture and Archive your Email

Not every firm runs on Microsoft 365 or Google Workspace, and most email archiving solutions are built as if they do. Comma connects to any IMAP-compatible mailbox using standard credentials you enter once in the dashboard. Capture is automatic from that point forward: every inbound and outbound message, across every folder, written to a WORM archive that satisfies SEC Rule 17a-4 and FINRA Rule 4511 recordkeeping requirements.

Supported providers

If your provider exposes an IMAP endpoint, Comma can connect to it. Email lands in the same archive as your WhatsApp archiving, Signal archiving, and iMessage archiving: one search interface, one export, one supervision queue for every channel.

FastMail

Requires an app-specific password; your regular login or 2FA password will fail with a silent auth error, so generate one under Settings > Password & Security. FastMail also supports IMAP IDLE, so new messages land in the archive near-instantly rather than waiting on the poll cycle.

Zoho Mail

IMAP is off by default at the org level. A Zoho admin needs to enable it in the Admin Console under Mail Settings > Account Restrictions before Comma can connect, and check that users aren’t blocked from toggling it themselves. Once enabled, capture works the same as any other IMAP mailbox.

ProtonMail (via ProtonMail Bridge)

ProtonMail’s end-to-end encryption normally blocks third-party IMAP access. ProtonMail Bridge exposes a local IMAP endpoint so Comma can still capture and archive every message without compromising ProtonMail’s encryption model.

On-prem Microsoft Exchange

If your Exchange server has IMAP enabled, Comma connects directly with no Microsoft 365 migration or cloud dependency required.

Set up IMAP archiving →

Frequently asked questions

Where do my credentials go, and how are they protected?
Credentials are encrypted at rest using AES-256 and never stored in plaintext. We recommend using an app-specific password rather than your account password. Most providers generate one under account security settings, and it can be revoked independently without changing your login. For on-prem Exchange and providers that support OAuth, Comma can connect via OAuth instead of stored credentials entirely. If you ever disconnect the integration, the credentials are wiped immediately.
Which email providers does this cover?
Any mailbox that speaks IMAP: FastMail, Zoho Mail, ProtonMail (via ProtonMail Bridge), and on-prem Microsoft Exchange with IMAP enabled. If your provider exposes an IMAP endpoint, Comma can connect to it.
Does anything need to be installed on user devices?
No. Comma connects to the mail server directly using the credentials you provide. There is no client agent, no email client plugin, and no change to how users send or receive email.
What gets captured?
Full message headers, body (plain text and HTML parts), and attachments. Comma preserves the folder structure — INBOX, Sent, Drafts, and any custom folders — and keeps deleted messages in the archive under your retention policy.
How quickly do messages appear in the archive?
Comma polls the mailbox every five minutes by default. For IMAP servers that support IDLE (push notification), new messages appear within seconds of delivery.

Built to the standards regulators ask about

  • SEC 17a-4 WORM archive
  • SEC 17a-3 Supervision
  • FINRA 3110 Review & retention
  • FINRA Reg S-P Books & records
  • MiFID II EU comms recording
  • GDPR Data protection
  • FCA SYSC 10A UK taping
  • CIRO 3800 Canadian records
  • SFC Hong Kong
  • MAS SF(LCB)R SG 5-year order records
  • ASIC Australian financial
  • CASL Consent archiving

Running a mailbox that isn't Microsoft or Google?

Most archiving tools aren't built for it. Comma is.

Get in Touch Pricing