Embershot Outbound

Every attachment, tracked, protected.

Every PDF your company emails becomes a verified link. You see who read it, where and how far, and the reader has no file to drag into an AI tool.

Running on our own company mail since November 4, 2026.

One mail rule. Senders change nothing.

  1. 1

    You send

    Someone at your company attaches a PDF in Gmail, Outlook or any mail app, as always.

  2. 2

    Your mail rule

    One rule in Google Workspace sends outside mail with a PDF through Embershot. Microsoft 365 is next.

  3. 3

    The Embershot relay

    Each PDF becomes a verified link at the top of the message. The message is still delivered from your domain and signed by it.

  4. 4

    They read

    The recipient confirms their email and reads a copy watermarked with it. Forwarded, the next reader does too.

Your mail always goes out: if a PDF can’t be converted for any reason, the message is delivered exactly as it was sent, attachment included.

What the recipient sees

  1. The verified link page: the document title and who shared it, and a box to confirm an email address

    1They confirm their email

    No account and no password. The page shows the document’s title and who shared it.

  2. The code step: a verification code was sent to the reader's email address

    2They enter the code

    Embershot sends a one-time code to that address, so every reader is a confirmed email, forwarded readers included.

  3. A sample earnings summary with the reader's email address watermarked diagonally across it

    3They read their own copy

    Every page carries their email as a watermark. Printing, downloading and copying text are off.

Real Embershot screens, shown with a sample document. Readers see page images in Embershot’s viewer, never the PDF itself, so there is no file to drag into an AI tool.

It forwards like a PDF, and you still know who has it

By default, anyone with the link can open it after confirming their email, so it travels the way an attachment does. Each new reader confirms their own email, gets their own watermarked copy and shows up in your record, marked as not on the original email.

Anyone with the link, after confirming their email

The default. Passed to a colleague, a lawyer or a partner, every reader is named and every copy is their own.

Only the people on the email

Choose it in your settings, and a forwarded link opens for nobody else.

What your company sees

Who opened it

Every reader confirms their email. A forwarded link adds the new reader, marked as not on the original email.

Where they were

Country, city and network, recorded for every open.

How far they read

Seconds spent on each page, for every reader.

Whose copy it was

Every page carries the reader’s email, so even a photo of a page shows whose copy it was.

AI agents, caught

When an AI agent drives the reader’s browser, the pages hide and the attempt is logged.

Take it back

Turn a link off, take a reader’s access away, or replace the file after it was sent.

Run it from two pages

Outbound Link Reports

  • Every link made in the last 7, 30 or 90 days, from the mail relay, the add-ins and the API.
  • People sent to, readers, opens, and readers who were not on the original email.
  • The readers of each link, one by one, and a CSV download.

Outbound Link Settings

  • Turn the relay on, run it in test mode or pause it.
  • Who can open: anyone with the link after confirming their email, or only the people on the email.
  • Link expiry, and how the link looks in the email.
  • Attachment types: PDFs today; Word, Excel, PowerPoint and images next.

Both pages are in the Embershot web app, for your company’s site admins.

Add-ins for Gmail and Outlook

For people who send from their own inbox. Embershot for Gmail and the Embershot add-in for Outlook turn a PDF into the same verified link, inside the message being written.

Choose who can open it

Anyone with the link after confirming their email, which is the default, or only the people on the email.

Each person signs in

Every sender connects their own Embershot account. No shared key sits in anyone’s mail app.

In the company’s record

Links made from the add-ins show up in Outbound Link Reports next to the relay’s.

Included with Pro and Enterprise

No extra charge. Write to us and we’ll set them up for your team.

Outbound plans

Outbound Business

Contact us for pricing

Priced per mailbox.

  • The mail relay for your company’s outgoing mail
  • Sending policies: who can open, link expiry, attachment types
  • A company-wide record of every link and every reader
  • The Embershot API

Outbound Enterprise

Contact us for pricing

Priced per mailbox, billed annually, with a lower rate per mailbox as you add more.

  • Everything in Business
  • Read depth: seconds on every page, for every reader
  • The AI-agent log
  • Single sign-on
  • Coming: hidden reader codes, your own link domain and SIEM export

Outbound adds to any Embershot Enterprise plan. Ask sales for pricing or compare all plans.

Questions

Which mail systems does it work with?

Google Workspace today. Your admin adds one mail route and one rule, and can try it on a test group first. Microsoft 365 is next.

Do senders need to install anything?

No. They attach PDFs as always, in any mail app, phones included. The change happens after they press Send, so their Sent folder still shows the PDF.

What if something goes wrong?

Your mail still goes out. If a PDF can’t be converted for any reason, the message is delivered exactly as it was sent, attachment included. Mail without a PDF never reaches Embershot at all.

Does the email still come from our domain?

Yes. The message is delivered from your domain and signed by it, like the rest of your company’s mail.

Which attachments become links?

PDFs today. Embershot already handles Word, PowerPoint, images, video and audio, and the mail relay gets them next.

Can people forward the link?

Yes, by default. The next reader confirms their own email, reads a copy watermarked with it, and shows up in your record as not on the original email. If you would rather a forwarded link open for nobody else, set links to open only for the people on the email.

Does this stop AI tools from reading our documents?

It helps. Readers get page images with printing, downloading and copying turned off, so there is no file to drag into an AI tool, and when an AI agent drives the reader’s browser the pages hide and the attempt is logged. It is not a guarantee: anyone can still photograph a screen, which is why their email is on every page.

See where your documents go

One mail rule, and every PDF your company sends becomes a verified link.