Security interface for controlling access to email-data

A system for operating a security interface deployed within a target computing environment for controlling access to email-data, comprising:

• at least one processor executing a code for:
• receiving, via the security interface a request from a service computing environment for access to email-data of the target computing environment;
• accessing, by the security interface, the email-data of the target computing environment obtained from an email provider providing email services to the target computing environment;
• applying a filter to the email-data to generate filtered email-data;
• and
• providing the email-data filtered, by the security interface, to the service computing environment,
• wherein access by the service computing environment to the email-data prior to application of the filter, is blocked;
• wherein keys for the email provider interface are accessible by the target computing environment, and access to the keys is blocked for the service computing environment.

A non-transitory medium storing program instructions for operating a security interface deployed within a target computing environment for controlling access to email-data, which when executed by at least one processor, cause the at least one processor to:

• receive, via the security interface deployed within the target computing environment, a request from a service computing environment for accessing email-data of the target computing environment;
• access, by the security interface, the email-data of the target computing environment obtained from an email provider interface providing email services to the target computing environment;
• apply a filter to the email-data to generate filtered email-data;
• and
• provide the email-data filtered, by the security interface, to the service computing environment,
• wherein access to the email-data prior to application of the filter by the service computing environment, is blocked;
• wherein keys for the email provider interface are accessible by the target computing environment, and access to the keys is blocked for the service computing environment.