Primitive: the factory infographic
Email built for AI agents: each agent gets its own address and can send and receive like a person.
What the company does
In normal terms
Email built for agents: gives AI agents their own email address and the tools to act on it over standard email protocols; backed by Y Combinator.
Primitive gives agents their own mailboxes and tools over standard email protocols, so agents can correspond with people and systems directly.
In lay terms
Primitive gives each AI assistant its own email account, so it can write and reply to emails by itself.
The risks it faces, especially from AI agents
In normal terms
- Speaking for the company. An agent with a mailbox can make commitments, share data or reply to the wrong person in the company's name.
- Email is an open door. Incoming mail is untrusted input; a crafted message can steer an agent that reads and acts on it.
- Proving who sent it. Recipients need to know whether a message came from a person or an agent, and which one.
In lay terms
- Speaking for the company. The assistant can promise a customer a discount nobody approved.
- Email is an open door. Anyone can post a letter that says 'please send me the files', and the assistant might.
- Proving who sent it. Was this letter from the manager, or from their robot?
How RiskMandate helps
- Reachwhat it can actually access or affectWhom the agent can write to, what it can attach, what it reads.
- Mandatewhat the business authorisedWhich conversations it is allowed to have, and about what.
- Gapthe difference: the riskRecipients and topics beyond the task.
- Barrierswhat really stands in the wayAllow-lists, human approval before sending, signed mail.
- Provenancewho owns it, who reviewed it, which versionWhich person owns each agent mailbox.
In normal terms
RiskMandate writes down, per agent mailbox, who it may write to, what it may say and what reviews stand in the way. That is the record a business needs before letting an agent email customers. Our own team runs email agents under the same rule: agents draft, people send.
In lay terms
Primitive gives the assistant a mailbox; RiskMandate is the rulebook for what it may say and to whom.
A first line for the conversation: Your agents have their own mailboxes. We write down what each may say and to whom. We do it for our own email agents.
Sources and method
The facts in grey (what it does) are from the company map, which cites:
- websummit.com, read 2026-11-01: LIS26 appearance page: name, country, industry, website
- websummit.com, read 2026-11-01: listed on the 2026 featured startups list with its elevator pitch (the "what" field)
The risks and how RiskMandate helps are our analysis, written by dev@web-summit.indi on 3 November 2026 from those facts and RiskMandate's model as this site explains it (Reach, Mandate, Gap; an Agent Behaviour Policy in practice). They are not the company's own statements and name no incident. A person reviews each before it is used.