Where this lives. Sign in and open /mail/admin/deleted in the app.
What it does
Everything a person throws away at your mail door (moved to Trash, deleted outright, or removed when Trash is emptied) leaves a copy here for your review, graded for how sensitive it looks: who was copied, who was outside the company, whether the person was even named, whether a contact list went out with it. This page also reads each mailbox's live Trash folder without changing anything in it. The people whose mail this is see nothing of this page. Reviewing and purging deleted mail is for administrators only.
Mail kept here is limited to mailboxes on your own verified domains; guests and anything on a platform domain are never included.
Before you start
You need the admin role on a mailbox at this door, the same requirement as the main administration console.
Set it up, step by step
- Open "Deleted mail" from the administration console, or go straight to it. Pick a person in the "People" list on the left, or leave "Everyone" selected.
- Choose the "Kept copies" tab for what's been held, or "In their Trash now" to read straight from that person's mailbox. The second tab is disabled until you pick a person, and its grades are provisional until you open a message.
- Filter "Kept copies" by Level (Every level, Copied and above, Outside the company and above, Hidden recipient and above, or Contact exposure only) or by Action: Any action, Moved to Trash, Deleted for good, or Trash emptied. Clicking one of the five grade tiles at the top does the same as picking that exact level.
- Read the grade on each message: 0 Ordinary (grey) means named on To, everyone inside the company, nobody copied. 1 Copied (blue) means received as a copy or as part of a wider list. 2 Outside the company (amber) means somebody outside was on it. 3 Hidden recipient (red) means the message reached this mailbox without naming it on To or Cc: bcc, a group address, a forward, or hidden recipients. 4 Contact exposure (purple) means a contact list of five or more outside addresses, a contact file, or several outside parties on one thread went with it.
- Open a message to read it. Underneath the subject, "Why this level" lists the exact reasons, for example "Sent with 2 on copy and 1 hidden," "3 outside addresses (theirbrand.com, gmail.com)," or "In this mailbox without naming it on To or Cc — bcc, a group address or a forward."
- If addresses are masked, type an optional Reason and click "Reveal addresses." It's allowed up to 120 times a day for you as this door's administrator, and every reveal is written to your workspace's activity log.
- To remove a copy for good, open it and click "Remove for good…," then confirm. This cannot be undone. To remove several at once, check them in the list and click "Remove N for good…" at the top.
What you should see
Each person in the left list shows a small coloured bar across their row; its proportions match how many of their kept copies fall at each grade. A message that hasn't been opened yet carries a "New" chip. A mailbox that's since been closed still appears here, with its copies reviewable until you remove them.
Common problems
"The kept copy is missing from disk; only what is listed above remains" means the message details are still here but the body can't be shown. "Nothing kept at this filter" just means no message matches the level or action you picked. Clear the filter to see everything again. A live Trash read that fails shows "Try again," since it's reading the mailbox directly rather than a stored copy.
Related
Is this legal to run?
It is a retention and oversight control over mailboxes your organisation owns, and how you may use it depends on your jurisdiction and your own staff notices. Take advice, write the policy down, and tell your people what your policy is. The platform gives you the control and the audit trail; the policy is yours.
Who can see a masked address?
An administrator, after giving a reason, within a daily limit, and the reveal is recorded. That combination is deliberate: oversight without a free-for-all.
Read next
Common questions
Is this legal to run?
It is a retention and oversight control over mailboxes your organisation owns, and how you may use it depends on your jurisdiction and your own staff notices. Take advice, write the policy down, and tell your people what your policy is. The platform gives you the control and the audit trail; the policy is yours.
Who can see a masked address?
An administrator, after giving a reason, within a daily limit, and the reveal is recorded. That combination is deliberate: oversight without a free-for-all.
Read next
Last updated September 19, 2026. Written by the team that operates the platform.