• Subject prefix works again on Microsoft 365. On Microsoft 365 accounts, the "Add subject prefix" task failed. As a result, all subsequent tasks on the same profile match were skipped with "Skipped - previous task failed" (set category, mark as read, move). The same fix applies to the subject prefix in the "Copy email" task.
• Replace attachments and restore attachments work again on Microsoft 365. The "Replace attachments" task (with .attlnk link files) as well as the "Restore attachments" action from the log view were affected by the same Microsoft API limit as the subject prefix.

• Microsoft 365 processing no longer gets stuck after an access token expires.
• Throttled Microsoft accounts are skipped for the remainder of the run.
• Throttling is now made visible. AEP now displays a warning message in the user interface when Microsoft throttling occurs (account name + note about the 5-minute pause), so that noticeable delays in profile processing no longer appear unexplained.
• Locked accounts are displayed during the catch-up run. If an account involved in the catch-up run is currently locked due to a server throttling, AEP now asks before starting whether the account should still be attempted or skipped - displaying the end time of the lock. Previously, AEP skipped such accounts without comment, and the user wondered why their catch-up run had once again failed to process the affected account.
• Security update for the processing of Outlook .msg files.

• Regression fixed: AEP paused for the duration specified under Options > Processing > Pause until the next message is processed after every single message was checked — even if the message did not match any profile and therefore no external system was addressed. As in AEP 3, the pause is now applied only after messages that were actually processed by a profile and, as a precaution, after errors. It is omitted for messages with no matches.
• Microsoft 365 profiles are no longer blocked during long processing runs. For large mailboxes or many shared accounts, a full scan can take hours. During this time, the Microsoft login for the access token retrieved once during connection establishment expired, causing all subsequent requests for the affected account to fail. The result: Individual profiles appeared to stop running at a certain point, but manually clicking "Catch up..." worked immediately. AEP now detects this state and automatically retrieves a new login.
• Improved handling of ongoing Microsoft mailbox migrations. When Microsoft moves a mailbox to a different server, the current run is now ended immediately for the affected mailbox, and AEP retries in the next cycle.
• Visibly earlier sign of life after program start. AEP used to run the full check right after start - on large mailboxes it correspondingly took a long time before the first profile produced a result. Instead, a quick check over the current time window now runs first, producing matches in the log list within seconds. The full check follows immediately afterwards.
• The status bar now shows which account sent the IMAP IDLE push. Previously the message was generic ("IMAP IDLE: push notification received ..."). With multiple IMAP accounts it was not possible to tell which mailbox just fired. The account and monitored folder are now included, e.g., "IMAP IDLE push received for 'info@mydomain.com\Inbox' ...".
• Backup directory paths inherited from AEP 3 installations are detected on startup. If you migrated from AEP 3 to AEP 4 and had configured the AEP 3 default path under Options > Backups, your backups continued to land in the AEP 3 directory. An exact AEP 3 default path is now automatically and silently switched to the AEP 4 default path on startup. For paths that differ but still contain "Automatic Email Processor 3", the value is left unchanged and AEP issues a hint that the path should be reviewed.

• When two active profiles monitored the same account and the same physical folder, but the monitored folder path was stored with a different letter case (e.g., "Invoices" and "invoices"), AEP treated the two as separate folders. Folder comparison is now consistently case-insensitive throughout AEP.
• When ticking "Use profile-specific processing times" under the General section of a profile, in some setups the Edit button only appeared after closing and reopening the profile settings. The area now behaves like the other option-dependent input fields: grayed out before the option is enabled, immediately usable afterwards.

• Microsoft 365: access to delegated mailboxes without prior mailbox conversion. Until now, delegated access in AEP only worked on true shared mailboxes (license-free, no separate login). Regular user mailboxes that an administrator delegated via full-access permission were rejected by the Microsoft Graph service with "403 ErrorAccessDenied" - even though the delegate had full access. With the extended permission scopes, both types now work without mailbox conversion.
  • When first connecting an existing Microsoft 365 account, a new Microsoft login prompt may appear to confirm the additional permissions.
  • The sender address for delegated access is automatically set to the address of the shared mailbox - without an explicit "Override sender" value, the login user would otherwise appear in the From header.
  • If the shared mailbox address or another connection parameter (client ID, tenant ID, login name) is changed later, AEP automatically discards the internal synchronization markers. Previously, new mails could be polled silently against the old mailbox in the background and would only appear during a manual "Catch up..." run.
• Imported Microsoft 365 profiles with subfolders under the inbox are processed reliably again.

• Microsoft 365: All subfolders are now displayed again in the folder selection dialog. For some Microsoft 365 mailboxes (likely only with certain third-party providers) , the Graph service returned an incorrect subfolder count for top-level folders, so that only Inbox, Sent Items, and similar default folders were visible in the selection dialog. User-created subfolders were completely missing.
• No more stuttering interface when loading very large folder structures. The folder query now runs in the background; a progress bar displays "Loading..." while the list is being built.
• More robust folder selection dialog with clearer error messages. In case of server issues or unusually deep folder hierarchies, a 15-second timeout now applies instead of making the user wait for minutes.

• Attachments from Apple Mail, etc. are now correctly recognized as regular attachments. Single-page PDFs (e.g., air waybills, tickets) that these mail programs tag with an internal preview identifier were previously treated as embedded images and skipped by tasks such as 'Print attachments' or 'Save attachments'.
  • Profiles using the "Has attachments" filter criterion now also match such messages.
• Folder paths are now displayed consistently in the Outlook style.
• Minimum interval for the quick check can be lowered to 1 minute again. The default remains 2 minutes; setting it to 1 minute now displays a clear warning in the options dialog. When importing a backup, values below 2 minutes are still raised to 2 minutes so that the current user does not unknowingly start with an unstable interval.
• During account setup, the SMTP server is no longer auto-filled from the IMAP server while typing.

• Faster recovery after connection problems.
• Notification "Processing is running normally again" as soon as the connection is possible again.
• The minimum interval for the quick check has been raised to 2 minutes. For accounts with multiple monitored folders, this prevents server rate limits. Existing configurations with shorter intervals will be automatically adjusted on the next load.
• New menu item: "Create backup for support assistance..."
  • Creates a reduced backup that you can send to support.
  • Automatically excludes sensitive data: email accounts, database connections, license data and processing history.
  • Contains an info file that transparently lists what is in the archive and what is not.

• Filter lists and subject prefixes were forgotten during import
• The ‘Recipient Type’ filter is now imported correctly
• Minor fixes

Automatic Email Processor 4 is a completely redesigned major release. The program no longer requires an installed Outlook client and instead connects directly to your email accounts - via IMAP, POP3 or the Microsoft Graph API for Microsoft 365 and Outlook.com. Exchange Server mailboxes can still be connected as long as the server's IMAP service is enabled.

• Direct access to email accounts - no Outlook installation required; native support for IMAP, POP3 as well as Microsoft 365 and Outlook.com (via the Microsoft Graph API)
• Real-time detection of new emails via IMAP IDLE and Microsoft Graph delta sync
• Redesigned user interface with a clear profile list, status and processing indicators and consistent keyboard navigation
• Bounce detection for forwarded emails - automatic recognition of undeliverable messages (DSN/NDR) and notification of the sender
• Service and headless mode for unattended operation as a separate program instance
• Profile migration from earlier versions - existing profiles from Automatic Email Processor 2 and 3 are imported with automatic format detection
• Enhanced security - AES-V2 encryption, TLS certificate pinning, password storage in the Windows Credential Manager (DPAPI) as well as protection against ZIP bombs and path manipulation
• Comprehensive online help and step-by-step instructions, accessible directly from the program