For CPAs and insurance partners: give your clients monitoring they can prove

Continuous Microsoft 365 and Google Workspace monitoring at $4 per user/month — with timestamped alerts, documented responses, and downloadable reports your clients can produce when a carrier, examiner, or auditor asks.

N°001sectionyour clients' inboxes are where your work gets undone

Section 01

Your clients' inboxes are where your work gets undone

Clients move money and sensitive documents by email, which makes business email compromise relevant to both accounting and insurance conversations.

InboxGuards records its own monitoring activity so a customer can share alerts and reports with its advisers. It does not determine whether a control satisfies an insurer, affects coverage, or changes a claim outcome.

N°002sectionwhat continuous microsoft 365 and google workspace monitoring actually does

Section 02

What continuous Microsoft 365 and Google Workspace monitoring actually does

InboxGuards connects to a client's Microsoft 365 tenant or Google Workspace with read-only access to supported audit logs and checks them at roughly 5-minute intervals. It checks supported audit events for configured account-takeover indicators and turns a finding into a plain-English alert with general response guidance.

  • Sign-ins from IP addresses and locations the account has never used
  • Inbox rules that forward, hide, or auto-delete mail — the concealment step in invoice fraud
  • Repeated failed sign-ins followed by a success — the password-guessing signature
  • Mailbox permission and delegation changes
  • Admin role grants, OAuth app consents, and MFA or audit-logging changes
  • Daily dark-web check of every directory email address against Have I Been Pwned and LeakCheck, including info-stealer logs
N°003sectionwhy a recorded monitoring trail matters

Section 03

Why a recorded monitoring trail matters

Microsoft 365 and Google Workspace audit logs may record sign-ins, rule changes, and administrative activity, subject to provider, licensing, retention, and API limits. Relevant supported events can go unreviewed when no one checks those records.

InboxGuards turns supported records into timestamped alerts, documented customer responses, and exportable reports. These records describe InboxGuards activity only; they are not an audit, certification, or insurer approval.

N°004sectionthe economics for your clients

Section 04

The economics for your clients

$4 per active user per month, no minimums — a 10-person client pays $480 a year, or $400 billed annually. Setup is self-serve and requires read-only consent from the customer's Microsoft 365 or Google Workspace administrator. The customer or its separately authorized IT provider remains responsible for responding to alerts and changing the tenant.

Evaluate InboxGuards on its monitoring, alerting, reporting, contract, and refund terms. Obtain the actual application or policy requirements from the customer's broker or carrier before representing that any control or document satisfies them.

The evidence trail, piece by piece

These records describe InboxGuards activity and customer-entered response status. They do not establish compliance, control effectiveness, or incident outcome:

Timestamped detection

An alert retains the supported provider evidence available to the matching rule, such as actor, source, event type, or configuration change, together with InboxGuards timestamps. Available fields vary by provider event.

Documented response trail

Alerts support a response-status field and comments so the customer can document its own follow-up. Those records describe customer-entered status; they do not prove that remediation was complete or effective.

Recorded monitor-run history

InboxGuards schedules checks at approximately 5-minute intervals and records monitor-run results. Gaps, provider delays, and failed runs can occur; status records do not prove complete event coverage.

Downloadable activity reports

Alert history and summaries can be exported for customer review. A broker, carrier, auditor, or other recipient decides whether the records are relevant to its purpose.

Printable monitoring certificate

A dated document describing the monitoring subscription, configured provider, and scheduled check frequency. It is not a certification, audit, attestation, or carrier-approved form.

One honest boundary: whether any control satisfies a specific insurer's requirements is always that insurer's determination. InboxGuards provides the records — the carrier decides what qualifies.

Send a client to start monitoring

$4 per user / month · Customer-admin authorization · 30-day money-back guarantee