Watch our 90-second explainer to see exactly how GraceBox works.
You know the one person in your inbox whose emails you dread opening. Maybe it's a qualifier still in active addiction. Maybe it's a difficult co-parent, an adversarial colleague, or a hostile client.
GraceBox intercepts hostile emails from senders you flag and uses AI to rewrite them in a calm, civil tone before delivering them to your inbox. The original is always saved in a separate Gmail folder — you can read it anytime. You just don't have to absorb the hostility in real time.
Built with the recovery community in mind — Al-Anon, AA, NA, ACOA, CoDA, treatment-center alumni — and for narcissistic-abuse survivors, post-separation-abuse survivors, and high-conflict co-parents. Your nervous system isn't supposed to be someone else's punching bag.
GraceBox Achieves Google CASA Tier 2 Security Approval
We are proud to announce that GraceBox has successfully passed Google's Cloud Application Security Assessment (CASA) Tier 2 review, conducted by TAC Security. This milestone validates that GraceBox meets Google's rigorous security standards for applications that access sensitive user data through Google APIs.
What is CASA?
The Cloud Application Security Assessment is Google's security review program for third-party applications that request access to Google user data. CASA Tier 2 requires an independent security firm to perform vulnerability scanning, penetration testing, and a comprehensive Self-Assessment Questionnaire (SAQ) covering 35 security requirements based on the OWASP Application Security Verification Standard (ASVS).
What was assessed?
The assessment covered GraceBox's entire application stack:
Data protection — Encryption at rest (AES-256), TLS for all data in transit, secure credential storage
Authentication & authorization — Google OAuth 2.0, server-side session management, principle of least privilege
Infrastructure — Automated CI/CD deployment, secure configuration management, no debug endpoints in production
What this means for you
With CASA Tier 2 approval, GraceBox is now fully verified by Google for production use. The previous 100-user testing limit has been removed, and the safety warning that appeared during Google sign-in is gone. Your emails are processed by an application that meets enterprise-grade security standards.
GraceBox achieved a 9.7 out of 10 security score on the TAC Security vulnerability assessment, with all identified issues remediated.
Our commitment
Security is not a one-time achievement. We continue to monitor our application for vulnerabilities, keep dependencies updated, and follow Google's API Services User Data Policy and Limited Use requirements. Your data privacy remains our top priority.
5 Ways to Stop Hostile Emails From Ruining Your Day
You can't always avoid the difficult sender. A co-parent. A boss. A client. A family member you can't go no-contact with. Here are five strategies that actually work for protecting your peace when their messages keep arriving.
1. Delay your read
The single most effective change is creating space between when an email arrives and when you read it. Turn off push notifications. Check email at fixed times. The hostility loses 80% of its power when you're not blindsided by it.
2. Read it twice before responding
Your first reading interprets through your nervous system. Your second reading sees the actual words. Often what felt like an attack is just a poorly worded request. Sometimes it really is an attack — but now you know that, and you can choose your response with intention.
3. Strip the emotion before extracting the facts
Hostile emails usually contain a legitimate request buried under personal attacks. Train yourself to ignore everything except the actionable items. "You never do anything around here, the kitchen is a disaster again" becomes simply: kitchen needs cleaning.
4. Never respond from your phone
Phone responses are shorter, more reactive, and easier to regret. Even if you compose the response immediately, save it as a draft and review on a desktop later. Most regrettable emails are sent from phones.
5. Let GraceBox do the rewriting for you
The above strategies require constant emotional discipline. GraceBox automates the work. We intercept the hostile email, rewrite it in calm professional language, and deliver the cleaned version to your inbox. The original is preserved in a separate folder if you ever need to reference what was actually said. You get the information, not the punch.
GraceBox didn't start as a productivity tool. It started as a recovery tool.
If you've spent any time in Al-Anon, ACOA, or any program working with families of addicts, you know the inbox problem. The qualifier sends a message, and your nervous system fires before your cortex catches up. Heart racing. Stomach tight. The rest of your day rearranged around their words.
The traditional advice — detach with love, don't engage, set boundaries — works in person. It's harder when their words are sitting in your inbox demanding a response. You can't unread them.
Protecting your peace is sobriety work
That's the principle GraceBox was built around. If hostility from a flagged sender is going to derail your recovery, your meditation practice, your therapy work, your relationships with everyone else — that hostility doesn't get to land in your inbox unfiltered. It gets translated first.
The original is always saved. We don't hide information from you. You can read exactly what was said, anytime. We just buy you the moment of regulation that traditional inbox management can't.
Who GraceBox is for
Al-Anon, Nar-Anon, CoDA members protecting peace from a qualifier
ACOA members navigating contact with family of origin
