Compliance & security

Problem When an inbound email's From and Reply-To addresses differ — a common signal of impersonation or phishing — Front shows no visual indicator, making these messages harder for teammates to identify as suspicious. Request Add a visual indicat...

Problem GDPR data export requests must be handled through Front Support, creating delays and back-and-forth communication. Request Provide a self-service option in the app for admins to initiate and download GDPR data exports without needing to co...

Problem PEC (Posta Elettronica Certificata) emails are not natively supported. Instead of displaying the email directly, they appear as attachments with an XML certificate, complicating the reading experience. Request Add native support for PEC em...

Problem Front provides no visibility into email deliverability metrics, leaving teams unable to detect bounces, spam placement, or sender reputation issues. Request Provide a deliverability dashboard covering send/delivery/bounce rates, authentica...

Problem Front does not hold HDS (Hébergeur de Données de Santé) certification, which is mandatory in France for any organization hosting or processing personal health data. This blocks adoption by healthcare-related organizations subject to French...

Problem Front may display only sender names without email addresses, making it harder to identify phishing attempts where display names are spoofed. Request Provide a setting to always display the full email address alongside the sender name, so t...

Problem Admins cannot selectively disable specific actions like contact field editing or message replies. Edits to contact fields in Front do not sync back to CRMs, causing data quality issues. There is also no way to dynamically restrict actions ...

Problem Audit logs are only accessible within Front's UI, with no way to programmatically export or stream them to external monitoring and SIEM platforms. Request Provide API endpoints and/or webhook notifications for audit log events, so organiza...

Problem There is no dedicated log for security-related events such as user logins, logouts, MFA successes and failures, or IP addresses. Security activity is not systematically tracked, limiting admin visibility into authentication and access patt...

Problem Organizations that handle a high volume of external email are exposed to phishing, viruses, and malware. The current level of protection may not be sufficient for companies that are frequent targets of bad actors. Request Provide additiona...