Pre-Send Compliance

Compliance before send, not after.

Surveillance and archiving tools read risky emails after they are already in someone's inbox. VerbaPulse moves the check to the only moment the wording can still change: while it is being written.

The inherited model

Send first, capture, review later

The standard compliance stack was built around recordkeeping: capture every message, archive it, sample it, review it. That model satisfies the regulator's filing cabinet, but it has a structural flaw: by the time a reviewer reads the risky sentence, it has been sitting in the recipient's inbox for days.

Everyone in that process is careful and diligent. The control simply arrives after the risk. We wrote about this pattern in more depth on the blog: compliance after you hit send.

Side by side

What changes when the check moves before send

Post-send reviewPre-send (VerbaPulse)
When risk is caughtDays later, in a sampled review queueWhile the draft is being written
State of the messageDelivered; it cannot be unsentStill a draft; one click fixes the wording
The writer's experienceA remediation conversation after the factA quiet nudge with a safer rewording, in the moment
What compliance can showRecords of incidents foundAnonymized evidence that risk is caught and fixed before it ships
Cost of one incidentRemediation, disclosure, sometimes a regulatory filingNear zero: the risky version never left the building
Positioning

Not a replacement. The missing layer.

Pre-send review does not eliminate recordkeeping or supervision obligations, and it is not designed to. Archiving answers "can we produce the records?". Pre-send answers a different question: "did the risky sentence ever reach a client?".

Firms run both. The archive stays the system of record; VerbaPulse becomes the control at the keyboard, where outcomes are still negotiable.

In practice

What pre-send looks like day to day

FAQ

Common questions

Isn't Microsoft Purview DLP already pre-send?
For data patterns, yes. Purview DLP shows policy tips while composing when it detects sensitive information types: card numbers, national IDs, labeled documents. That is valuable, and VerbaPulse does not replace it. The gap is language. A guarantee, a forward-looking promise, a pressure tactic, or a confidential disclosure phrased in plain words contains no detectable data pattern, so DLP does not see it. Purview's language-aware product, Communication Compliance, reviews messages after they are sent. VerbaPulse covers the remaining quadrant: judgment-based language risk, before send, with a suggested rewording.
Do we still need archiving and supervision tools?
Yes. Recordkeeping and supervision obligations do not go away, and archiving platforms exist to serve them. Pre-send review is the complementary layer: it changes outcomes instead of documenting them.
Does pre-send checking slow people down?
No. Analysis runs while the draft is being written and flags appear alongside the message with one-click safer rewordings. There is no gate to wait for and no approval queue.
Is this employee monitoring?
No. VerbaPulse does not read inboxes, store message content, or score individuals. Drafts are analyzed in memory and discarded; the audit trail records anonymized risk events only. The product exists to protect the writer in the moment, not to watch them.
What happens when someone dismisses a flag?
The event is logged anonymously (risk type, severity, action) so compliance teams see patterns and trends, not people. Most teams use this to target training, not discipline.
How long does deployment take?
About five minutes per user: an Outlook add-in deployed through the Microsoft 365 admin center and a Chrome extension for Gmail. There is no mail-flow change and no server integration.

Move the control to before send

Book a demo →