Perplexity's Computer Jumps Into Your Inbox to Handle Work Automatically

Perplexity has plugged its agent platform directly into email. Send, forward, or CC [email protected] on any thread and Computer will read the entire conversation, run the task, and reply back in the same thread with the finished work attached. The feature is live for every Computer user starting today.

The pitch is simple: Computer is an AI orchestrator that manages a team of AI agents on your behalf, coding in Claude Code and GPT Codex, performing deep research, orchestrating tools across 400+ connectors, and creating files. Until now, invoking it meant opening the web app, or pinging it through Computer in Slack and Computer in Teams. Email is the third surface, and arguably the one where the raw material of knowledge work already lives.

How the inbox handoff works

The mechanics are deliberately boring, which is the point. Computer verifies the sender, ingests the full thread and any attachments, and runs the task with that user's own connectors and permissions. Deliverables like Excel models, PDFs, and decks come back as attachments in the reply. Every email invocation is still a full Computer session that is viewable on the web and mobile app, with the same step-by-step audit trail as any task launched from the web interface.

Two details matter for anyone thinking about deploying this on a team:

• Memory carries over. Tasks kicked off from email tap the same self-improving memory, called Brain, that Computer builds on the web and in Slack. Team terminology, output formats a partner expects, and positions taken in earlier rounds are all available to the email task.
• Replies are locked down. For security, Computer only replies to the sender who triggered the task. Reply-all behavior for Enterprise is coming soon but is not enabled at launch.

The workflows this actually unlocks

Perplexity is aiming squarely at the professional-services stack where email threads are the workflow. The blog post walks through three canonical examples: a private equity associate forwarding a CIM and data room thread with instructions to build a first-pass LBO model and getting an Excel file back in reply, a law firm associate CCing Computer on a redline exchange to get a summary of open issues across three rounds of comments, and an investment banking analyst emailing Computer directly to build a five-year DCF for a target without ever opening the web app.

The framing Perplexity leans on is that nearly a third of knowledge work still happens over email, and that lawyers work through redlines and investors iterate on models as attachments in threads. Pulling the agent into the thread instead of asking users to copy content into a chat window removes the context break.

Where this fits in Perplexity's broader push

Computer is not a small side product for Perplexity. The company announced Computer for Enterprise at its Ask 2026 developer conference, launching a multi-model AI agent with Slack integration, Snowflake connectors, and 20 orchestrated AI models to compete directly with Microsoft Copilot and Salesforce in the agentic AI market. Unlike single-model AI assistants, Computer routes queries across 20 different AI models depending on the task. A question about customer behavior might pull from a reasoning model; a request to draft a proposal might shift to a writing-focused one. Users and administrators don't manage the routing, the system handles it automatically.

That orchestration layer is what makes the email drop-in interesting. A single forwarded thread can trigger research, spreadsheet generation, and document analysis in one session without the user picking a model or a tool. Perplexity claims that in the first two weeks of limited availability, Computer saved Max subscribers over $91M based on benchmarks compiled from McKinsey, Harvard, MIT, and BCG and Nielsen, and has since performed over $776M in labor-equivalent work. Those are self-reported numbers, but they hint at the volume the company is trying to route through these new surfaces.

The catch and the competitive read

The agent inherits the sender's connectors and access, which is convenient and also the exact reason security teams have been cautious about this class of product. The Comet browser has been flagged as vulnerable to prompt injection attacks, a structural concern for any agent that reads arbitrary web content as part of task execution. Email is a similar surface: any forwarded thread with a hostile attachment or instruction becomes input to an agent operating with your permissions. Perplexity's sender verification and reply-only-to-sender defaults address part of that, but teams handling sensitive redlines or deal documents will want to think carefully about which mailboxes get access.

Competitively, the move slots Computer next to Microsoft's Copilot inside Outlook and Google's Gemini inside Gmail, but with a different shape. Instead of being embedded in the mail client, Computer is a service address any client can reach. That means it works the same from Outlook, Gmail, Superhuman, or a mobile mail app, without a plugin, which is a reasonable bet in a market where the mail client is finally becoming a real choice again.