Does Ojja read our emails, our documents or our conversations?
In two lines #
No. We read registers and configurations, never your documents, never your business data.
The steps, to check it #
- Read, at /en/trust#manifeste, the closed list of endpoints Ojja calls: none serves any content.
- In your workspace, “Connections and access”, “The requested permissions” block: the same list as the published manifest.
- What Ojja reads, read-only: licenses and how they are assigned; usage, aggregated by application, never by person; the settings of AI features; agents and their rights; the vendor's announcements.
The Microsoft 365 regime is “We never touch it”: when the only key available also opens content, Ojja accepts it on four conditions: a closed list of endpoints without content, published in the manifest; each call logged and visible to the company; the key stored in France, with minimal rights, rotation and one-click revocation; a switch to a limited key as soon as the vendor offers one.
Usage is never reported for a group of fewer than ten people.
On the Arvenne example #
On the Arvenne example, the readout says that 14 accounts have connected ChatGPT; it never says which ones.
What Ojja does not do #
Ojja never reads an email, a document, a meeting or any content.