Transactional messages with highly sensitive data

Question

Hey there &#128075; We're thinking about using Intercom for transactional messages instead of SendGrid. However we've run into a security issue that we haven't been able to solve yet. If we send emails with highly sensitive data (for example a password reset code/link as mentioned in your blog post) then anyone in the team who can access Intercom messages could hijack the customer's account using that sensitive data. That is not acceptable. Is there any way we can mark certain parts of the message as sensitive so that neither the Intercom UI nor any data API/export exposes them? Thank you, Marc

Evan P · Accepted Answer

Hey Marc, &#128075; thanks for reaching out! I'm one of the Support Engineers here at Intercom! &#128295; This isn't something we currently offer within Intercom. Anyone with access to the message / conversation will have access to the sensitive data, I do wish I had better news for you. I am going to include this in my monthly report to the product team for relevant features our customers are looking for. Would you want to share anymore context about how this feature would be useful for your team? I'd be happy to include your use cases with this feedback for the team. &#128591;Also as a note, it's worth keeping an eye on the product changes page as we will announce any new releases to Intercom here!

Marc K12 · Answer

Hey Evan, thanks for answering.Use cases include:Verifying an email address (double opt-in for account creation, or converting a lead to a user, or newsletter sign-up)Log in by email link without passwordPassword reset linkApproval links for certain account actionsThe use cases 2 & 3 would allow anyone in Intercom to hijack customer accounts by following the links themselves.Basically anything where the email address is supposed to act as only authentication or as 2-factor authentication is at risk.We thought about moving all transactional email to Intercom to have all customer communication in one place. However the issue above is one of two reasons that's not possible. And it doesn't make sense to use another system just for those sensitive exceptions. So we stick with SendGrid for the time being.

Join the Intercom Community 🎉

Intercom Customers and Employees

Login to the community

Intercom Customers and Employees

Scanning file for viruses.

This file cannot be downloaded