Superhuman AI Vendor Risk Profile
Premium email client with AI features for auto-drafting replies, email summarization, instant scheduling, and smart triage. Targets professionals and executives who prioritize inbox productivity.
Risk overview
Risk score: 36/100
Risk tier: Moderate
Safety rating: 64/100 (higher is better)
Lower risk scores indicate lower assessed risk.
Last verified: Apr 19, 2026 Aging
Risk dimensions
| Dimension | Risk score |
|---|---|
| Data Handling | 28/100 |
| IP Exposure | 31/100 |
| Jurisdiction | 13/100 |
| Security | 40/100 |
| Regulatory Compliance | 60/100 |
| Transparency | 80/100 |
| Business Stability | 48/100 |
| Dependency Chain | 31/100 |
| Agent Governance | Not assessed |
Analyst summary
Rating: Caution
Superhuman is a premium email client with AI assistant features that integrates directly with Gmail and Outlook mailboxes. The access scope (full mailbox with AI generation) is broad, and enterprises should evaluate carefully given how much sensitive content flows through email. Compliance documentation is lighter than enterprise-first email tools.
Bottom line: Fine for executive productivity; inappropriate for mailboxes containing regulated or legally privileged content.
Strengths
- Clear performance-focused value proposition and active executive user base
- SOC 2 Type II certified with published security summary
- AI drafting and summarization run on established foundation model providers
- Mature product with well-established support and onboarding
Concerns
- Full-mailbox access scope is broad; sensitive content (contracts, HR, legal) flows through the third party
- Subprocessor chain for AI features includes external LLM providers that customers should review
- Compliance posture lighter than Microsoft 365 Copilot or Google Workspace native AI
- No public HIPAA BAA; not appropriate for email containing PHI
Best for
- Executive productivity use cases where speed matters and email is non-regulated
- Sales and BD teams using personal productivity tools without sensitive PHI or classified content
- Founders and power users already paying for premium Gmail or Outlook clients
Avoid if
- You handle regulated data (PHI, attorney-client, classified) through email
- Your security team rejects third-party full-mailbox OAuth for the user base
- You require FedRAMP, HIPAA BAA, or deep DLP enforcement
Citations
- Data Handling — Data Retention Period
Superhuman retains user email metadata and personalization data for the duration of the subscription plus applicable retention periods.
- Data Handling — Trains On User Data
We do not use your email content to train generative AI models. AI features process email only to generate the requested output and do not retain content for training.
- Governance — Privacy Policy Url
Superhuman Privacy Policy describes data collection and processing practices.
- Governance — Tos Url
Superhuman Terms of Service govern use of the Services.
- Ip Profiles — User Owns Outputs
You retain all rights in your email content and any AI-generated drafts or summaries created using the Services.
- Jurisdiction Profiles — Incorporation Country
Superhuman Labs, Inc. is a Delaware corporation headquartered in San Francisco, California.
- Security Compliance — Soc2 Type2
Superhuman is SOC 2 Type II certified and implements industry-standard security controls.