# PGB Business

> Business email on your own domain and the complete workplace suite, priced per workspace with zero per-user fees. Built on PGBHub (`https://business.pgbhub.com`).

PGB Business replaces per-seat business email and fragmented SaaS subscriptions with a single unified workspace on your own custom domain. Every workspace includes custom-domain email (IMAP, SMTP, JMAP), Calendar, Contacts, Drive, Docs (live co-editing), Sheets, Slides, PDF tools, e-Signatures (Sign), Chat, Video Meetings (Meet), Tasks, Notes, Forms, Invoices & Quotes, Email-to-Data Collections, Learn (courses & verifiable certificates), Vault & Secrets (Bitwarden-compatible password manager), Payment-Fraud Shield, AI Assistant, and a unified Admin Console.

## Four Core Differentiators

1. **The Commitment Inbox (`commitments`)**:
   - Every email thread carries an explicit workflow state: `Needs reply`, `Waiting on them`, `I promised`, `FYI`, or `Done` — classified automatically on arrival and changeable in one click.
   - Tracks two-way promises (what you promised to send and what others owe you) with due dates, nudges, and a unified **Today** briefing (`/today`).
   - Shared team inboxes (`sales@`, `support@`, `billing@`) with assignment, internal notes, and live collision detection ("Ada is replying").

2. **Agent-Safe Mailboxes (`agents`)**:
   - Give AI agents dedicated mailboxes (`info@`, `invoices@`, `triage@`) with server-enforced read/send policies instead of unrestricted human credentials.
   - Scope who an agent can read from and send to (existing contacts, internal domain only, or allowlisted domains) and cap daily send volume.
   - Out-of-policy sends, bulk recipients, or sensitive attachments are held in the human **Approvals** queue (`/approvals`) for one-click approve/reject. Every action is logged with a per-agent kill switch.

3. **Email Becomes Data (`data` / `Collections`)**:
   - Define structured collections (e.g., *Invoices* with `vendor`, `invoice_number`, `amount`, `currency`, `due_date`) and incoming mail/attachments matching the rule are automatically extracted into typed database rows linked to the source message (`/collections`).
   - Low-confidence extractions route to a human review queue before counting.
   - Export to CSV, query via REST API (`/api/v1/collections`), or trigger automations (notifications, tasks, signed webhooks).

4. **Payment-Fraud & Impersonation Shield (`shield`)**:
   - Learns your workspace's communication graph (solely from your own mail, never shared across customers) to detect lookalike domains, display-name spoofing of colleagues/executives, and first-time senders requesting wire transfers or urgent payments (`/shield`).
   - When a known vendor changes bank details (IBAN/routing/account number) on an invoice, Shield triggers a **Two-Key Verification** hold requiring out-of-band confirmation and two human approvals before payment.

## Complete Workplace Suite (21+ Integrated Apps)

### Communication
- **Mail (`/mail`)**: Custom-domain inbox with unlimited aliases, group addresses, rich signatures, snooze, scheduled send, templates, vacation responder, and commitment tracking.
- **Calendar (`/calendar`)**: Personal and shared team calendars, room/resource booking, availability scheduling links, and automatic PGB Meet video links.
- **Contacts (`/contacts`)**: Shared workspace directory and personal address books with vCard (`.vcf`) import/export.
- **Chat (`/chat`)**: Public/private channels, direct messages, threads, reactions, file sharing, and incoming webhooks.
- **Meet (`/meet`)**: WebRTC video meetings (powered by LiveKit) with screen sharing, guest lobby (`/meet/g/<token>`), permanent rooms, and recordings saved directly to Drive.

### Productivity
- **Today (`/today`)**: Daily executive briefing combining today's meetings, promises due, mail needing a reply, tasks, learning deadlines, overdue invoices, and unread mentions.
- **Drive (`/drive`)**: Pooled team cloud storage with folders, granular permissions, file versioning, preview, and password-protected or email-verified share links (`/drive/s/<token>`).
- **Docs (`/docs`)**: Real-time collaborative documents (Yjs + ProseMirror) with comments, suggestions, templates, and Markdown/HTML/DOCX import/export.
- **Sheets (`/sheets`)**: Spreadsheets with formulas, multi-sheet workbooks, and CSV/TSV import/export.
- **Slides (`/slides`)**: Presentations and full Office document editing (`.docx`, `.xlsx`, `.pptx`, `.odt`, `.ods`, `.odp`) via Collabora Online WOPI integration (`/office/<id>`).
- **PDF (`/pdf`)**: View, annotate, merge, split, reorder, compress, and convert PDF documents in the browser.
- **Tasks (`/tasks`)**: Personal to-dos and shared Kanban/list project boards with assignees, due dates, and sub-tasks.
- **Notes (`/notes`)**: Fast Markdown notes, checklists, and pinned reference cards.
- **Learn (`/learn`)**: Internal courses, onboarding modules, quizzes, and tamper-evident PDF completion certificates with public verification (`/learn/verify/<code>`).
- **Assistant (`/assistant`)**: Privacy-first workspace AI that answers questions across your mailbox, summarizes long threads, extracts action items, and drafts replies without ever training on customer data.

### Operations
- **Sign (`/sign`)**: Legally binding multi-party electronic signatures on PDFs with signing order, email OTP verification, SHA-256 tamper seals, and full audit trails (`/sign/s/<token>`).
- **Forms (`/forms`)**: Internal workspace forms and public surveys (`/f/<slug>`) with conditional fields, file uploads, and response analytics.
- **Collections (`/collections`)**: Automated structured data tables extracted from incoming emails and attachments.
- **Invoices (`/invoices`)**: Quotes, tax invoices, credit notes, recurring billing, PDF generation, and online customer payment portals (`/i/<token>`) with Stripe & bank transfer tracking.

### Security & Administration
- **Shield (`/shield`)**: Vendor bank-change verification, BEC/impersonation quarantine, and two-person payment approvals.
- **Vault (`/vault`)**: End-to-end encrypted team password manager and developer secrets store (`/secrets`), compatible with Bitwarden browser extensions and mobile apps.
- **Admin (`/admin`)**: Central console for custom domains, automated DNS/DKIM/SPF/DMARC/MTA-STS setup, mailboxes, groups, API keys, OpenID Connect SSO, compliance retention, legal hold, DLP, full data export, and audit logs.

## Workspace Pricing (No Per-User Fees)

All plans are billed per workspace (in USD or local currency via your PGBHub wallet), never per seat:

- **Free Plan ($0/month)**: Up to 5 mailboxes on a shared domain, 2 GB pooled storage, and access to the workplace suite.
- **Starter ($5/month)**: 1 custom business domain (plus free domain aliases), up to 10 mailboxes, 10 GB pooled storage, unlimited email aliases & groups, and 100 AI requests/month.
- **Growth ($25/month — Most Popular)**: Up to 5 custom domains, up to 50 mailboxes, 50 GB pooled storage, unlimited aliases & groups, and 1,000 AI requests/month.
- **Business ($100/month)**: Unlimited custom domains and unlimited mailboxes (fair use: reviewed past 250 mailboxes), 250 GB pooled storage, 5,000 AI requests/month, plus Enterprise controls (Company SSO, compliance retention, legal hold, DLP, and full workspace export).
- **Flexible Add-Ons**: `+5 mailboxes` ($5/mo) and `+1 domain` ($2/mo) on Starter and Growth; extra pooled storage packs on any plan (`+10 GB` $2/mo, `+20 GB` $3/mo, `+50 GB` $6/mo, `+100 GB` $10/mo, `+250 GB` $20/mo, `+500 GB` $35/mo, `+1 TB` $60/mo).

## Open Standards & Interoperability

- **IMAP & SMTP**: Works with Apple Mail, Microsoft Outlook, Mozilla Thunderbird, and native iOS/Android mail clients.
- **JMAP**: Modern JSON Meta Application Protocol for fast, stateless mail synchronization.
- **OpenID Connect (OIDC)**: Use PGB Business as the identity provider ("Sign in with PGB Business") for your internal tools, or connect your existing enterprise IdP.
- **vCard, CalDAV & CardDAV**: Open address book and calendar portability.
- **Bitwarden Protocol**: Connect standard Bitwarden desktop, browser, and mobile clients to PGB Business Vault.

## AI Agent & MCP Integration (`@pgb/mcp`)

AI agents can interact with PGB Business via the official PGBHub Model Context Protocol server (`@pgb/mcp`) using a scoped `PGB_BUSINESS_KEY` issued in **Admin -> API keys** or bound to an Agent-Safe Mailbox:

- **Mail Tools**: `business_mail_search`, `business_mail_read_thread`, `business_mail_send`, `business_mail_update`
- **Calendar & Contacts**: `business_calendar_events`, `business_calendar_create_event`, `business_contacts_find`, `calendar_*`, `contacts_*`
- **Suite Tools**: `drive_*`, `docs_*`, `sheets_*`, `tasks_*`, `notes_*`, `forms_*`, `chat_*`, `meet_*`, `invoices_*`

## Key Links

- Landing Page: https://business.pgbhub.com/
- What's Different (4 Architectural Moats): https://business.pgbhub.com/whats-different
- Complete Workplace Apps (21+ Apps): https://business.pgbhub.com/apps
- Admin, Security & Open Standards: https://business.pgbhub.com/security
- Compare & Per-Seat Savings Calculator: https://business.pgbhub.com/compare
- Workspace Pricing & Plans: https://business.pgbhub.com/pricing
- Frequently Asked Questions: https://business.pgbhub.com/faq
- Full AI & Technical Reference: https://business.pgbhub.com/llms-full.txt
- Sign In: https://business.pgbhub.com/login
- Get Started / Provision Workspace: https://business.pgbhub.com/api/sso/start
- PGBHub Cloud Platform: https://pgbhub.com
- Sitemap: https://business.pgbhub.com/sitemap.xml