The backend reads the Origin header, derives your workspace, and starts queueing tickets. The classifier tags every message. Your webhooks fire.
Gemma 4 classifies in 180ms p50. Each classification routes through a per-workspace rule table. Payloads are HMAC-signed. Every delivery is logged with retries visible in your dashboard.
Sign in with alice@acme.com → workspace for acme.com is yours. Freemail and EDU/GOV blocked from this path.
Add a TXT record at _feedback.yourdomain.com with the token we hand you. Verified via DoH in seconds.
Owner invites members via magic-link email. GitHub sign-in works too. SSO wiring is deferred to production workspaces.
Claim requires DNS TXT OR an email on the matching domain (with freemail and EDU/GOV blocked). First valid claimant becomes owner, subsequent become members. Every claim is audit-logged.
They queue under your Origin-derived workspace in a pending state, capped at 100 tickets. Once you claim you see everything; you can also purge them on claim.
No. Every ticket stores a sha256(ip + daily_salt) only. The salt rotates daily so even the hash can't be used to correlate across days.
Not yet. The entire platform runs on Cloudflare (Workers, D1, R2, Queues). Self-host story is post-GA.
Claim when you're ready. Cancel whenever. Your data travels with the domain.