Email compliance, audit evidence and legal correspondence

Create an email compliance report for legal correspondence

Use Email Compliance when you need a clear, chronological record of business email correspondence for an audit, dispute, regulatory review, internal investigation or legal evidence pack. The tool searches only mailboxes you are allowed to read, then compiles the complete stored conversation - received and sent messages - into a branded PDF with technical evidence and integrity hashes.

Audience: compliance, legal, operations and authorised mailbox usersPermission: Mailbox Exchange: View mailbox + account read accessRead-only search and evidence export
Jump to steps
Where to goAdmin Area → Tools → MailboxAI → Email Compliance

What Email Compliance is for

Email Compliance is designed for situations where a normal email screenshot or single-message printout is not enough. It helps you locate relevant correspondence across authorised mailbox accounts and create one professional email compliance report covering the full stored conversation in date order.

The generated legal email correspondence PDF starts with the earliest message and continues to the latest. It includes incoming and sent correspondence that belongs to the conversation, so reviewers can follow what was said, by whom, to whom and when without manually stitching emails together.

Before you create an evidence report

  • Make sure you are working in the correct authorised mailbox account. Private and shared mailbox access rules still apply.
  • If the correspondence is recent, confirm the mailbox has synchronised so the stored conversation includes the latest received messages.
  • Use the narrowest useful search criteria when the mailbox contains a large history. A person, email address, subject, Message-ID, Thread ID or date range can quickly isolate the right conversation.
  • Open or review the result before relying on it. The PDF reflects the data stored by Britixo at the time you generate the report.

Generate a legal email correspondence PDF

  1. Open Tools → MailboxAI → Email Compliance.
  2. Choose one mailbox account, or leave All accessible accounts selected if you need to search every mailbox you can read.
  3. Type a word, phrase, person or email address into Live search. Results refresh while you type.
  4. Use the additional filters if needed. You can narrow by date, direction, attachments, read status, flags, importance, local trash state, subject, Message-ID or exact Thread ID.
  5. Review the returned conversation row. Check the mailbox, sender information, date range and sent/received indicators before exporting.
  6. Select Generate Legal PDF for the correct conversation.
  7. The system rebuilds the complete stored conversation, not just the message that matched your search. Messages are ordered from the first email to the last.
  8. Save the downloaded PDF in your organisation's approved case, matter, audit or evidence location and follow your normal retention and chain-of-custody process.

Search and filter options

The Email Compliance page provides several ways to find the exact correspondence you need without changing the original mailbox records:

  • Mailbox account: search all readable mailboxes or one selected account.
  • Live keyword search: search stored subject, sender/recipient details, email content and Message-ID data.
  • Email address: narrow matches across From, To, CC and BCC fields.
  • Subject contains: find conversations by a full or partial subject.
  • Message-ID: search a stored transport Message-ID when you have an exact technical reference.
  • Thread ID: go directly to a known conversation thread.
  • Date from / date to: restrict the search to a defined correspondence period.
  • Direction: search sent and received messages together, received only, or sent only.
  • Attachments: find conversations with or without stored attachments.
  • Read, flagged and important states: narrow results using stored mailbox flags.
  • Mailbox record state: search active records, local trash only, or both.

These filters identify matching conversations. The legal PDF itself compiles the complete stored conversation so the surrounding correspondence is not silently omitted just because one message matched the filter.

What compliance details the report generates

The report is intentionally split into a readable correspondence section and a technical Compliance & Legal Evidence Log. This keeps the email conversation easy to read while retaining the underlying evidence needed for audit and review.

  • Conversation identity: subject, mailbox account, message count, thread reference where available, correspondence date range, export reference and export timestamp.
  • Export accountability: the authorised staff member who generated the report, including the staff identity recorded by the system.
  • Email addressing: From, Sender, Reply-To, To, CC and BCC values where stored.
  • Message timing: sent time, received time and stored/sort timestamp where available.
  • Transport references: Message-ID, In-Reply-To, References, IMAP UID and RFC822 size where these values were stored.
  • Storage identifiers: stored row ID, outbox ID, account ID, folder ID and thread ID where applicable.
  • Mailbox state: received/sent direction, outbox status, seen/read state, flagged state, importance, local trash state and attachment presence where available.
  • Record timestamps: stored-at and last-updated values when present in the source record.
  • Raw transport headers: included in the evidence section when Britixo stored them for that message.
  • Cryptographic integrity evidence: SHA-256 digests for the stored message record, HTML body, text body and raw headers, plus a conversation-level SHA-256 digest.
  • Attachment evidence: filename, MIME type, file size, inline status, Content-ID and SHA-256 for locally stored attachments.
  • Attachment exhibits: supported image attachments are shown in the PDF; supported text-like files are rendered as readable exhibits; PDF files can be rendered page-by-page when the server decoder is available. Unsupported binary formats remain identified by metadata and SHA-256 without altering the original file.

How the correspondence is presented

  • The report uses Britixo branding and a professional print layout.
  • Messages are compiled chronologically from the first stored email to the last.
  • Received and sent messages in the conversation are included; unsent drafts, queued messages and failed sends are not presented as completed correspondence.
  • Stored HTML email content is preferred so configured signatures, table layouts, emphasis, colours and safe links remain close to the original email presentation.
  • Known Britixo signature logo references are resolved to the trusted local brand asset instead of making a remote tracking request during PDF generation.
  • Unsafe active content, scripts and untrusted remote resources are not executed as part of the evidence export.

How to verify the PDF before using it

  • Confirm the subject and mailbox account at the top of the report.
  • Check that the conversation starts with the earliest expected email and ends with the latest expected email.
  • Review sender, recipient, CC/BCC and sent/received timestamps for each message.
  • Check that expected attachments appear in the conversation and attachment exhibit section.
  • Review the Compliance & Legal Evidence Log for Message-ID, storage references, raw headers and SHA-256 values where available.
  • If a message, header or attachment is missing from the source mailbox data, resolve that source-data issue before treating the export as complete.

The Email Compliance report is an evidence-compilation tool. It records what Britixo stored at the time of export and adds cryptographic SHA-256 digests that can help demonstrate whether the exported stored data changes afterwards.

It does not independently prove external delivery, authorship, identity, receipt or legal admissibility. Those questions can depend on the source mail system, surrounding records, chain of custody, jurisdiction, court rules and the circumstances of the matter. For litigation or regulatory disclosure, follow your organisation's evidence-preservation procedure and obtain appropriate legal advice where required.

Security and access controls

  • Email Compliance is permission-aware. A staff member must have Mailbox Exchange view access and read permission for the mailbox account.
  • The search workflow is read-only and does not change the source message simply because you search or generate a report.
  • Private mailboxes are not exposed to unrelated staff. Shared mailboxes remain subject to explicit account membership and read permission.
  • Do not send legal evidence PDFs to unapproved recipients. The report can contain personal data, confidential business information and attachment content.
  • Keep the generated report with the underlying case or audit records according to your organisation's retention policy.

Frequently asked questions

Does the report include both sent and received emails?

Yes. When the messages belong to the stored conversation, the legal correspondence PDF compiles received and completed sent messages in chronological order from first to last.

Does the report include attachments?

Yes. Attachment metadata and SHA-256 evidence are recorded, and supported attachment types are also included as visual or text exhibits inside the PDF.

Can I search by email address or keyword?

Yes. You can use live keyword search plus dedicated email address, subject, Message-ID, Thread ID, date and mailbox filters.

Does a SHA-256 hash make the PDF legally admissible?

No. A SHA-256 digest is useful integrity evidence, but admissibility and evidential weight depend on the relevant legal process, source records and chain of custody.