support@yourcompany.com). When someone sends an email to that address, Serval creates a ticket, threads replies into the right conversation, and can automatically respond — depending on your team’s settings and whether the sender is trusted.
This guide covers how email intake works, when Serval responds, how subscribers and CC recipients are managed, and how external users are handled.
How Email Intake Works
When someone sends an email to your team’s intake address, Serval processes it as follows:- The email is received and scanned for viruses.
- Serval checks whether this is a new request or a reply to an existing ticket. It uses standard email threading headers (
References,In-Reply-To) to match replies to the correct ticket. - If it’s a new email, a ticket is created and the sender becomes the ticket requester.
- If it’s a reply, the message is added to the existing ticket conversation.
- An auto-response is sent to the sender confirming the ticket was created (if enabled).
When Serval Responds
How Serval responds to an inbound email depends on two things: whether the sender is trusted and whether the email is a new request or a reply to an existing ticket.Sender trust
A sender is considered trusted when both of these are true:- Their email domain is in your team’s domain allowlist.
- The email passes DKIM verification (proving it actually came from that domain).
Response behavior by scenario
| Scenario | AI responds? | Auto-response sent? | What happens |
|---|---|---|---|
| Trusted sender, new ticket | If applicable | Yes (if enabled) | Serval creates a ticket with AI active. The AI may respond if it has a helpful answer. A confirmation email is also sent if auto-response is enabled. |
| Trusted sender, reply | If applicable | No | The reply is added to the existing ticket. The AI processes the new message and may respond. |
| Untrusted sender, new ticket | No | Yes (if enabled) | Serval creates a ticket but immediately escalates it to a human agent. The AI does not respond. A confirmation email is still sent if auto-response is enabled. |
| Untrusted sender, reply | No | No | The reply is added to the existing ticket and synced to connected channels (e.g., Slack), but the AI does not respond. A team member needs to reply manually. |
What “AI active” means
Each ticket has an AI active flag that controls whether Serval’s AI agent processes new messages and generates responses.- Trusted sender tickets start with AI active.
- Untrusted sender tickets start with AI inactive and escalated to a human.
- When a team member escalates a ticket, AI is deactivated.
- A team member can re-enable AI on any escalated ticket by mentioning @Serval in the conversation, or by manually toggling it.
Email Settings
Each team’s email channel has its own configuration. Navigate to Team Settings > Channels > Email to manage these settings.Trust and domain settings
These settings control who can send emails to your team and how Serval treats those senders.| Setting | What it does |
|---|---|
| Domain Allowlist | Restricts which sender domains can create tickets. When “Allow all domains” is off, only emails from allowlisted domains are accepted. |
| Allow all domains | Accepts emails from any sender, regardless of domain. Senders from non-allowlisted domains are treated as untrusted. |
Reply and auto-response settings
These settings control how Serval sends emails back to requesters.| Setting | What it does |
|---|---|
| Auto-response | Sends a confirmation email to the sender when a new ticket is created. Can be toggled on or off. |
| Custom auto-response | Replaces the default confirmation message with your own text. |
| Sender name | Customizes the display name on outbound emails. |
Subscriber settings
These settings control how subscribers are managed based on email CC headers.| Setting | What it does |
|---|---|
| CC subscribers on reply | When enabled, all ticket subscribers are automatically CC’d on outbound email replies from the ticket. Inbound CC’d recipients are also added as subscribers. |
Subscribers
A subscriber is anyone who receives notifications about activity on a ticket. There are several ways someone becomes a subscriber:- Requester — The person who created the ticket via email is automatically subscribed.
- Assignee — The team member assigned to the ticket is automatically subscribed. Assignees cannot unsubscribe.
- Email CC — When “CC subscribers on reply” is enabled, anyone in the To or CC headers of an inbound email is automatically subscribed.
- Manual — A team member can manually add someone as a subscriber from the ticket.
Subscriber notifications
Adding someone as a subscriber does not notify them or tag them. They are not alerted about being added, and they do not see past messages unless they open the ticket. They will only start receiving notifications on future activity on the ticket.Removing subscribers
Any subscriber can be removed from a ticket, which stops all future notifications for that ticket. This removes all subscription reasons at once (requester, commenter, mentioned, etc.). The one exception: assignees cannot be unsubscribed. If someone is both the assignee and a subscriber for other reasons, removing them as a subscriber has no effect while they remain assigned. A removed subscriber can always be re-added later.CC Handling
Default behavior
By default, when a team member sends an outbound email reply from a ticket, Serval sends the email only to the ticket requester. Other subscribers are not CC’d. To include subscribers on outbound emails, enable CC subscribers on reply in your team’s email settings.CC subscribers on reply
This setting changes behavior in both directions: Outbound emails (Serval to external):- All active ticket subscribers are automatically added to the CC line.
- The primary recipient (usually the requester) appears in the To field; everyone else is CC’d.
- Deactivated users and shared mailboxes are excluded from the CC list.
- Anyone in the To or CC headers of an incoming email is automatically added as a subscriber (with reason “mentioned”).
- If the CC’d person does not already have a Serval account, one is created for them (see External Users and Guests below).
BCC handling
BCC recipients on inbound emails are not added as subscribers and are not visible to Serval. This is standard email behavior — BCC headers are stripped by the sending mail server before delivery.External Users and Guests
When an email arrives from someone outside your organization, Serval handles them based on your domain allowlist:Trusted domains (allowlisted)
If the sender’s domain is in your allowlist and passes DKIM verification, they are created as a regular organization member. They have the same access as any other user in your org.Untrusted domains
If the sender’s domain is not allowlisted (and “Allow all domains” is on), they are created as an organization guest. Guests have limited access:- They can only see and interact with tickets they are associated with.
- They cannot browse other tickets, teams, or internal data.
- Their access is scoped to the specific conversations they are part of.
Mailing lists and forwarded email
When emails arrive through mailing lists (e.g., Google Groups) that rewrite the From header, Serval looks forX-Original-From and X-Original-Sender headers to identify the actual sender. This ensures the ticket is attributed to the right person, not the mailing list address.
Best Practices
Keep CC subscribers on reply disabled unless you need it
Keep CC subscribers on reply disabled unless you need it
The default (no CC) is the safest option for confidentiality. Only enable CC subscribers on reply if your team’s workflow requires keeping external parties in the loop on every reply. When in doubt, leave it off and add subscribers manually as needed.
Use domain allowlisting to control who can create tickets
Use domain allowlisting to control who can create tickets
Rather than allowing all domains, maintain an explicit allowlist of trusted domains. This prevents spam and ensures only legitimate senders can create tickets. Add partner or vendor domains as needed.
Review subscribers before sending sensitive replies
Review subscribers before sending sensitive replies
Before replying to a ticket with sensitive information, check the subscriber list. If CC subscribers on reply is enabled, every subscriber will receive your reply. Remove any subscribers who should not see the message before sending.
Understand the guest boundary
Understand the guest boundary
External users from untrusted domains become guests with limited access. However, they can still see messages on tickets they are subscribed to. If a ticket contains internal-only information, remove external guests from the subscriber list before discussing it, or use internal notes instead of email replies.
Use a custom From address for brand consistency
Use a custom From address for brand consistency
Set up a custom From address (e.g.,
support@yourcompany.com) so recipients see a familiar sender. Replies still route back to Serval automatically via the Reply-To header.
