Shared mailbox retention: why sales@, support@ and ap@ are records

Why are shared mailboxes worth keeping as records?

Role mailboxes such as sales@, support@, ap@ and orders@ hold complete workflows, not just messages: a vendor dispute from first complaint to credit memo, an invoice query through approval, a customer escalation through apology and fix. Personal inboxes mix that with scheduling and small talk. Because many people read and reply from the same address, a shared mailbox also records how the company handles a task, not how one person does.

For an MSP or finance advisor, that makes role mailboxes the first thing to protect when a client trims licenses, offboards staff or changes tenants. A company with 50+ full-time employees at peak (contractors excluded) and years of role-mailbox history may hold material that AI developers license. SourceX assesses it; you only introduce.

What does a shared mailbox hold, and how useful is it?

The finance and operations mailboxes are the most structured. HR, legal and payroll mailboxes are normally kept out of scope because of employee privacy.

How should an MSP keep role mailboxes?

Keep them as a separate decision from license cost. Tenants may convert departed users' mailboxes to shared mailboxes, delete inactive ones, or apply a short retention rule without anyone checking what is inside.

1. List every shared and converted mailbox with its owner, size and oldest item.
2. Tag each as keep, review or discard, with the business owner signing off.
3. Check holds first. Confirm with the company that no legal or regulatory hold applies before any deletion rule is changed.
4. Preserve before you purge. Export or place an archive copy of keepers in a location the company controls.
5. Document the policy so a future admin does not clean it up by accident.
6. Do not read the content. Inventory counts and date ranges are enough.

For the chat equivalent, see Slack retention policy; the same decision order applies.

How do you describe a mailbox at a high level in a referral?

Say what exists, never what it says. Use facts such as the mailbox purpose, years covered, rough monthly volume and whether it has been continuously maintained.

Illustrative wording for a referral note:

Do not quote vendors, amounts, names or message text. Those are confidential records, and partners never export, upload or describe them.

What are the rights questions?

Role mailboxes hold third-party content: vendors, customers and staff. Whether a company can license its mailbox history depends on contracts, notices and redaction, which the company decides with its own counsel before any work begins. FTC staff have stated that a company's promises not to use customer data for undisclosed purposes, such as training models, are enforceable, as set out in the FTC's staff note on privacy and confidentiality commitments. This is general information, not legal, tax or financial advice. Confirm with your own counsel before acting.

Mailboxes that mostly handle client data on behalf of other companies, such as an outsourcer's per-client queues, are a red flag.

What does a mailbox screen look like in practice?

Use three questions per mailbox, answered by the business owner rather than by reading mail.

• Has the address been in continuous use for at least several years?
• Do threads usually reach an outcome (paid, refunded, shipped, resolved)?
• Is the content the company's own, not a client's?

Illustrative: a fictional 180-person wholesaler converts the mailboxes of three departed finance staff to shared mailboxes during a license clean-up. The MSP lists them, the controller marks ap@ and billing@ as keepers, and the owner asks IT to export both before the tenant move. The MSP never opens a message.

When should you raise it?

What are the limits of a mailbox archive?

Email threads lose context when attachments are stripped, when threading breaks during export, or when an address was reused for different purposes over the years. Ask the business owner whether the address was ever repurposed, whether attachments are included in any archive, and whether the mailbox fed a ticketing or ERP workflow that holds the other half of the story. A mailbox with intact threads, attachments and outcomes is worth far more than a bare list of subject lines, and the difference is usually decided at the moment of export.

How do rewards work for MSPs and advisors?

Partners earn 25% of the eligible platform fees SourceX actually collects from the referred company's licensing deals, capped at $100,000 per referred company. The reward is paid only after the buyer pays and SourceX receives its fee; an introduction, meeting or signed agreement alone does not trigger payment, and no reward is guaranteed.

Review your client contracts and your own professional rules before accepting any referral reward. Licensed advisors should confirm their position with their regulator or body. Read the program terms and the page for managed service providers.

When is it not worth the effort?

• The mailboxes are already deleted or were only ever personal.
• The company never reached 50+ full-time employees at peak (contractors excluded), or the mailbox history covers under a couple of years.
• Most of the mail is client-owned or regulated personal data with no basis for use.
• A court, trustee or assignee controls the tenant and has not been involved.

Next step

Pick one client with a tenant change coming and list its shared mailboxes. If it passes the who qualifies baseline, register as a partner and introduce it, or send the owner to sourcex.si/apply. The introduction email builder drafts the owner note.