The governed email assistant for inspection companies.

Your coordinators live in the inbox: nominations, sampling instructions, certificates of analysis, terminal and agent correspondence. Mailbuttons handles the routine flow — and is built so it cannot send a document to a counterparty you haven't approved. Every decision lands in the tamper-evident record your accreditation body already expects.

Book a shadow-mode assessment

What we measure with every partner

Three numbers, reported together. We instrument them from your real traffic and show you where they land — starting in shadow mode, before anything goes live.

Handled rate

The share of routine operational email worked end-to-end without a coordinator touching it.

Zero misdirected documents

Certificates and reports reach only approved counterparties. The number no ungoverned tool can promise.

Coordinator hours returned

The time handed back to your team each week — the figure your finance side actually cares about.

What it does

·Triage the operations inbox. Incoming nominations, amendments and queries classified and routed — everything unrecognised escalated to a human.
·Draft the routine replies. Acknowledgements, status updates, confirmations and document requests — in your house style, sent within scoped limits or held for human approval.
·Distribute documents safely. COAs, inspection reports and timesheets go only to approved counterparties.
·Chase what's outstanding. Missing sample IDs, unsigned instructions, unanswered nominations — followed up on schedule, and logged.
·Escalate by default. Commercial commitments, disputes and unfamiliar senders go to a person. The assistant knows what it isn't allowed to decide.

Why governed matters here

A misdirected certificate, or a wrong figure to the wrong trader, is commercial and legal exposure — and your accreditation depends on process-control evidence. So the rules are enforced server-side, outside the AI; inbound mail is authenticated and screened before the model reads a word; and every action is written to a tamper-evident log. When a counterparty disputes what was said, you have the record.

ISO 17020 — inspection bodies

A hash-chained record of every inspection-related email decision: who requested what, what the message contained, what the assistant decided, what reply went out. Process control made visible to your assessment body.

ISO 17025 — testing laboratories

The audit log doubles as the chain-of-custody record for sample-handling correspondence. Tamper-evident, signed timestamps, exportable in formats your quality team can attach to test records.

ISO 17065 — product certification bodies

Certificate-related email exchanges captured against the certificate record. Surveillance-audit questions and responses kept in a single immutable thread.

ISO 27001 and EU/UK residency

UK-incorporated, EU/UK-hosted. ISO 27001 policies are in force now, with certification planned for 2027. Your procurement review starts from a position of strength, not a year of pleading with a US vendor.

How deployment works

You earn the number before you trust the assistant with a single send. Three stages, at your pace.

1
Weeks 1–4 — Shadow-mode assessment
One forwarding rule from your existing inbox; nothing migrates, nothing is sent. The assistant reads your real traffic and drafts what it would have done. You get the Inbox Assessment Report — your handled rate before you trust a single send, and before you pay the monthly fee.
2
Go-live, first month — Supervised sending
A human approves each outbound message — a one-click approval that arrives by email, so your coordinators never leave the inbox. Policies are tuned against real traffic, and a daily digest shows everything handled, held and escalated.
3
Then — Earned autonomy
Routine, low-risk categories go automatic; everything else stays human-approved. You decide where the line sits, and can move it any time.

We handle the integration. No rip-and-replace — it works alongside your existing mailboxes and systems.

Built by someone who's carried the risk

I spent a decade building trading systems and market-risk platforms at Morgan Stanley, Deutsche Bank and Credit Suisse — where a wrong figure costs real money and a regulator is watching. I then led PE-backed technology companies as CTO and CEO, and today I advise PE firms on M&A technology due diligence, so I know exactly what a security and procurement review asks before it lets AI near a system of record. I still write production Rust, I run my own mail infrastructure, and Mailbuttons is the governance I'd want to see in that review.
You're not being sold a platform by a growth team. You're talking to the person who built it.

Richard Halldearn — Morgan Stanley · Deutsche Bank · Credit Suisse · PE-backed CTO/CEO · M&A technology due diligence · Imperial College CS

Proof

We're currently deploying with design partners in petroleum and commodity inspection. The first results will be published here.

The case study we're building has a fixed shape: the handled rate across routine categories, coordinator hours returned per week, and zero misdirected documents over a named number of months. Real figures from a named partner — no invented numbers stand in for them in the meantime.

Start with proof, not a contract

Begin with a free shadow-mode assessment: one forwarding rule, nothing migrates, nothing is ever sent, and a report in three to four weeks. If the number is worth it, go live from £2,000/mo per site — integration included, cancel anytime. Standard pricing is published after the partner programme.