Connecting an AI assistant to a business mailbox sends personal data to one more party: the AI provider. Business mail holds names, phone numbers, invoices and HR matters, and under the Digital Personal Data Protection Act your organisation is the Data Fiduciary and stays responsible for it. DPDP does not ban AI assistants. It asks you to know who sees the data, why, and how you would show it was protected. These are the questions to settle first.
This is guidance, not legal advice. Penalty and timeline figures come from the Government's own press release on the DPDP Rules, which we read on 1 November 2026. Our DPDP and email page summarises the Act's text on processors and transfers, checked on 6 September 2026. Confirm specifics with your counsel.
What changes when an assistant reads your mail
Three things change. There is another processor in the chain, the assistant's AI provider. There may be new copies of your mail, in that provider's chat history. And there is a new way in, a credential that can read the mailbox. Each one maps to a duty you already have.
Ten questions to ask before you connect
| Question | Why it matters under DPDP | Where XgenPlus helps |
|---|---|---|
| 1. Which AI provider will see our mail, and under what contract? | A processor may be used only under a valid contract, and you stay responsible for the data. | XgenPlus is not that provider and does not run AI on your mail. Choose a provider on business terms. |
| 2. May the provider train on it? | Using personal data for a new purpose needs a lawful basis. | Our guide warns that some provider plans allow training. Read the terms before you connect. |
| 3. Where is it processed? | Transfers are allowed except to countries the government restricts, but accountability is harder to show abroad. | The MCP server runs on XgenPlus's own infrastructure next to the mail system. The provider's location is a separate question to ask them. |
| 4. Are there reasonable security safeguards around the assistant? | Failing to keep them is the highest penalty tier, up to ₹250 crore. | Separate agent password, permissions chosen one by one, held risky sends, no permanent delete. |
| 5. Can we show who accessed what, and when? | Accountability means evidence. | Tool, time, address and result are logged for 60 days, without message content. Admins can see who has created agent passwords. |
| 6. What if the token leaks? | Affected individuals must be told without delay after a breach, and not notifying can cost up to ₹200 crore. | Pause or delete the agent password at once. It is separate from the mailbox password, so that password is not exposed. |
| 7. Does the provider keep our mail in chat history, and can we delete it? | Personal data should not be kept once its purpose is served. | The MCP service keeps no copy of your mail. The provider's history is theirs to delete. |
| 8. Who in the company may connect an assistant? | You need to control who handles the data. | MCP is off for each user until that user creates an agent password, and admins can see who has. |
| 9. Have employees and customers been told? | Notice should say how personal data is processed. | Update your privacy notice and staff policy. We cannot do this for you. |
| 10. Do sector rules apply on top? | RBI, CERT-In, SEBI and IRDAI set their own data and log duties. | See our DPDP page for where those duties come from. |
Where the penalties sit
The Government's release lists up to ₹250 crore for failing to maintain reasonable security safeguards, up to ₹200 crore for not notifying a breach, and up to ₹50 crore for other violations. The Rules give organisations an 18-month phased period to comply. Both numbers are caps, not typical fines.
A simple policy you can adopt this week
- Allow assistants only from providers on a business plan, with terms someone has read.
- Start every assistant on read permissions, and add drafts before sending.
- One agent password per assistant or workflow, so each can be cut on its own.
- Never let an automation send mail to an address that came from the content of a mail.
- Review the list of agent passwords once a month and delete what is unused.
- Mention AI assistants in your privacy notice and staff policy.
The safety checklist covers the technical side, and the MCP page has the setup. DPDP does not say your mail must be hosted in India, and our DPDP page explains where localisation duties really come from.
