Skip to content
A folder per day or per value when saving to a destination

Security

Your reports never leave your control.

KPImailer is self-hosted software. It runs on your server, connects to your BI platform and sends through your mail service. Here is exactly how data flows and how access is protected.

ISO/IEC 27001

Certified company

Information security, certified.

Relevance Management, the company that builds and supports KPImailer, operates an information security management system certified to ISO/IEC 27001. The certificate is available on request for your vendor assessment.

Request the certificate

How report data flows

  1. 01

    Your BI platform

    Qlik Sense, Qlik Cloud or Power BI

  2. 02

    KPImailer server

    Your Windows server, your network

  3. 03

    Your mail service

    Your SMTP server, or SendGrid or Mailgun on Power BI

  4. 04

    Recipients

    Email and files, no BI login

Everything in this chain runs on infrastructure you control or choose. Relevance Management is not in the data path.

Deployment

  • Self-hosted on Windows inside your network. There is no KPImailer cloud that processes your reports.
  • One installer that brings its own database, scheduler and web app, and rolls back cleanly if installation fails.
  • Generated files stay on your server or in destinations you configure: SharePoint, OneDrive, shares and folders.

Identity and access

  • Two-factor authentication on Qlik Sense edition; enforced MFA and Sign in with Microsoft on Power BI edition.
  • Roles (User, Admin, Superuser) with granular permissions.
  • API keys for automation, and an activity log of changes.

Data protection

  • Recipient personal data is masked by default and visible only to users with permission.
  • Connection secrets such as OAuth client secrets are stored encrypted and never shown again.
  • Retention rules control how long logs and generated files are kept.

Operations

  • Scheduled backup and restore.
  • Step-by-step execution logs, report health status and advanced logging.
  • Debug mode sends only to debug recipients while reports are being tested.

AI features

  • Optional and marked as preview.
  • An administrator chooses the model and uses your organisation's own API key.
  • Numbers in AI content are computed from your data and validated by code before the model writes commentary.

What we receive

  • KPImailer checks its licence status with the Relevance Management licence server. That exchange concerns the licence, not your report data.
  • Report content, recipients and generated files are never sent to Relevance Management.
  • Support happens on your terms, for example a screen-share session or an exported run log you choose to send.

Security questionnaires

Need answers for your vendor assessment? Send us your questionnaire and we will return it completed, together with our ISO/IEC 27001 certificate.

Contact us

Report a vulnerability

Found a security issue? Email office@relevance.ro with details. We acknowledge reports promptly and credit researchers who wish to be named.

security.txt

Send your first automated report this week.

Install the 30-day trial, connect your BI platform and design a report. If you get stuck, a product specialist will walk you through it.

Start 30-day free trial Book a 30-minute demo

No credit card. Every feature included. Nothing is deleted when the trial ends.