Recruitment operations
Outlook Shared Mailbox for Hiring: Setup and Limits
By Andre · · 14 min read
Outlook Shared Mailbox for Hiring: Setup and Limits
An Outlook shared mailbox is a good, low-cost way to start collecting applications. An admin creates a mailbox such as jobs@yourcompany.com, adds your recruiters as members, and everyone reads and answers the same inbox. It works well for a small team and a handful of open roles. It starts to strain when CVs pile up, several people touch the same candidate, and you need to find someone by skill six months later. This guide covers how to set it up, how to run it, how to handle candidate data, and where a shared mailbox stops being enough.
TL;DR
- A Microsoft 365 admin creates the shared mailbox and adds members. Recruiters then see it in Outlook and can send as the shared address if given the right permission.
- Define one owner by role, use folders and categories as a status system, and review the inbox weekly.
- A shared mailbox has no candidate profiles, no ownership tracking and no structured search by skills. Candidate data also needs a retention routine.
- When volume grows, keep the inbox and add a layer that reads CV attachments and builds a searchable candidate database from them.
Table of Contents
- How to set up an Outlook shared mailbox for hiring
- Running the inbox day to day
- Handling CVs and candidate data safely
- Where a shared mailbox runs out of road
- Signs you have outgrown the shared mailbox
- What a CV database adds on top of the inbox
- Try it on your own inbox
- A simple plan for the next 30 days
- FAQ
- Sources
How to set up an Outlook shared mailbox for hiring
The setup is short, but it needs someone with admin rights in Microsoft 365. Following Microsoft’s admin instructions for creating a shared mailbox, the admin goes to Teams & Groups, then Shared mailboxes, enters a name (the name determines the email address), saves it, and then adds members.
A few practical choices make the mailbox better for hiring:
- Pick an address candidates will trust. Something like careers@ or jobs@ is easier to put on a job ad than a personal address. Use one address per purpose. Do not mix recruitment with general HR or employee questions.
- Add only the people who work on hiring. Every member can see every message, so keep the list short.
- Decide who may send. Microsoft describes three permissions: Full Access, Send As, and Send on Behalf. Full Access alone lets someone read and manage mail but not send. Send As makes a reply look like it came from the shared address. Send on Behalf shows the individual’s name alongside the shared mailbox.
- Leave direct sign-in off. Microsoft’s support guidance says the shared mailbox account itself should stay disabled. People reach it through their own accounts as members.
For a deeper look at permissions specifically for recruiters, our guide to shared inbox permissions recruiters must check walks through the decisions in more detail.
How recruiters open it
On desktop, the mailbox should appear in the folder pane after the admin adds you and you restart Outlook. If it does not, right-click your account name, choose Add shared folder or mailbox, and type the address. On a phone, add it in Outlook for iOS or Android, or open it in Outlook on the web.
One point to settle early: replies. If your team sends from the shared address, candidates see a consistent sender. That matters for trust, and it keeps conversations findable by the whole team.
Running the inbox day to day
A shared mailbox has no hiring workflow built in, so the workflow is your habits. Three habits do most of the work.
Name an owner and a coverage plan
Give the mailbox an owner by role (for example, the recruiting coordinator), not by person, so it survives vacations and departures. Agree who checks it each morning and who covers when that person is out. Without this, the most common failure is two people answering the same candidate or nobody answering at all.
Build a status system from folders and categories
Outlook folders and color categories can stand in for a pipeline. A simple structure:
| Folder or category | What goes in it |
|---|---|
| New | Applications nobody has looked at |
| Screening | Candidates being reviewed, with a category per recruiter |
| Interview | Candidates with a scheduled conversation |
| Talent pool | People you would contact for future roles |
| Closed | Rejected, withdrawn or hired, ready for deletion on schedule |
Pick one category per recruiter so “who has this?” is visible at a glance. Keep the names identical for everyone. Our guide to managing resumes in a shared inbox covers naming CV files and moving messages without losing any.
Hold a weekly clean-up
Once a week, sweep the New folder for anything unanswered, move finished threads to Closed, and check for duplicates. Fifteen minutes weekly prevents the slow decay that turns a tidy inbox into a pile of thousands of messages.
Use templates for the repeated replies
Acknowledgments, rejections and interview invitations are the same few messages every time. Save them as Outlook templates so the tone is consistent across recruiters. We have collected recruitment email templates for each hiring stage you can adapt.
Widen the funnel without widening the mess
Email is only one source of applicants. If you hire in a trade, a niche board such as an HVAC technician job board can bring in candidates who then land in the same shared mailbox. More sources make a consistent folder and category system more important, because every application arrives in a slightly different shape.
If your team is just starting out, our small-team hiring inbox setup guide lays out the first week step by step.
Handling CVs and candidate data safely
A CV holds a name, phone number, address, work history and sometimes a photo or date of birth. A hiring inbox is therefore a personal data store, whether or not you think of it that way.
Limit who can see what
Every member of a shared mailbox can see every message. Keep membership to people who need it for hiring, and remove members when they change roles. The Spanish data protection authority makes the same point in its guidance on data protection in employment relationships: personal data should be known only to staff whose role gives them a reason to use it. It also says the company is responsible for custody of documents candidates hand over, such as CVs. That is a Spanish and EU position under GDPR, and US rules vary by state and by situation, so check your own obligations with counsel if you hire across borders.
Decide how long to keep rejected candidates
Here is a concrete benchmark from the EU. France’s data protection authority says in its recruitment guide that keeping CVs of rejected candidates for five years to build a talent pool is excessive. For a talent pool, it says retention should in principle not exceed two years from the last contact. Another real example is the recruitment privacy statement published by Digia, which keeps applications for 24 months from submission.
You do not have to follow those numbers in the US, but they show a sensible pattern: choose a fixed period, write it down, and delete on schedule. A shared mailbox has no automatic deletion for candidate data, so the weekly clean-up is where you apply it.
Know what the mailbox cannot do
Microsoft’s documentation on shared mailboxes in Microsoft 365 lists several constraints that matter for sensitive hiring mail:
- Mail sent from a shared mailbox cannot be encrypted, because the mailbox has no security context of its own to hold an encryption key.
- If members encrypt messages with their own keys, other members may not be able to read them.
- You cannot prevent members from deleting messages.
The practical rule: do not send sensitive documents such as ID copies or background check results through the shared address. Move those conversations into a system with proper access control.
Where a shared mailbox runs out of road
The same Microsoft page gives hard limits worth knowing:
- 25 users maximum. With too many people in the mailbox at once, you can see connection failures or duplicated messages.
- 50 GB without a license. At the limit, the mailbox can still receive mail for a while but cannot send, and eventually it stops receiving and senders get a non-delivery receipt. CV attachments fill space faster than most teams expect.
Beyond the technical limits, there are workflow gaps. A mailbox is a stream of messages, not a set of candidate records. In practice that means:
- No candidate profile. A person who applied twice, or sent a CV and later a portfolio, appears as separate messages.
- No ownership field. Categories help, but nothing records who is handling a candidate or reminds anyone to follow up.
- Search by text, not by meaning. You can search for a word in a message, but you cannot filter for “Spanish speakers in Austin with five years of experience.”
- Attachments are buried. The CV is a file inside an email, so its contents are not organized or comparable.
- Duplicates are invisible. Nothing tells you that the person in front of you applied last spring.
Microsoft also notes that deleted items in a shared mailbox are recoverable only within a limited window, so a mistaken clean-up can be hard to undo. Our staffing agency email workflow guide shows what changes when you move from inbox to candidate record.
Signs you have outgrown the shared mailbox
Most teams recognize themselves in a few of these:
- You get more applications than one person can read in a day, and some go unanswered.
- Recruiters keep a private spreadsheet of candidates because the inbox cannot hold the picture.
- You are asked “do we have anyone for this role?” and the honest answer is a long search through old mail.
- You hire regularly for similar roles and want to reuse past applicants.
- Several people have asked for access, and you are near 25 members or worried about who can see what.
- Someone has typed the same CV details into a spreadsheet more than once this month.
If two or three of these are true, the fix is usually not a full enterprise system. A traditional applicant tracking system adds job postings, pipelines, scorecards and onboarding steps that a small team may never use. If your real problem is CVs arriving by email and being hard to find, a lighter layer on top of the inbox solves it.
Our perspective
We built RecrutFlo for teams that already receive applications by email and do not want to move everything to a new platform. Outlook shared mailboxes are a sensible starting point, and we do not think you should abandon them. Our view is that the inbox should stay where candidates write to you, while the data inside it should be organized.
That is why RecrutFlo connects to your existing mailbox, detects CV attachments, extracts contact details, experience, skills, languages and location, and turns each one into a searchable candidate profile. Recruiters stay in control: the automation handles repetitive typing, and people make the decisions.
We also designed it for simple adoption. There is no onboarding call or implementation project, and plan limits are published on the pricing page, so you can see what you will pay before you talk to anyone. Workspace isolation, an audit trail and team access control are part of the product, with candidate privacy built around EU data protection principles.
Marco
What a CV database adds on top of the inbox
The goal is to keep the habit your team already has, writing to and reading from one inbox, and remove the manual part. A candidate database on top of that inbox should do five things:
- Spot CV attachments among all the other email (invoices, newsletters, replies).
- Read PDF, DOC and DOCX files and pull out structured fields.
- Merge or flag duplicates so one person is one profile.
- Let you search by skills, experience, languages, location and role.
- Export to CSV when you need the data elsewhere.
With that in place, the answer to “do we have anyone for this role?” is a search, not an archaeology project. The how it works page shows the flow from inbox to profile. If your mailbox is not Microsoft 365, our guides to connecting a shared CV inbox over IMAP and Gmail filters for recruiting cover the other common setups. When a new recruiter joins, our shared inbox onboarding playbook saves you from re-explaining your system.
Try it on your own inbox
RecrutFlo connects to Microsoft 365, Outlook and IMAP mailboxes, with Gmail coming soon. You can test the workflow on the Free plan before paying. Paid plans on the pricing page are Starter at €19 per month, Professional at €49 per month and Business at €149 per month, based on usage volume. If you need more capacity, extra processing runs are a one-off purchase: 100 runs for €9, 500 for €29 or 1,000 for €49.
Start with your current jobs@ or careers@ mailbox. Nothing about your candidates’ experience changes: they keep emailing the same address.
A simple plan for the next 30 days
Whether you stay with the shared mailbox or add a database, this sequence works.
- Week 1: Create or clean up the shared mailbox. Remove members who do not hire. Assign an owner by role.
- Week 2: Set up folders, categories and templates. Write down your retention period for rejected candidates.
- Week 3: Run the first weekly clean-up. Count how many unanswered applications you find and how long a typical candidate search takes.
- Week 4: If searches are slow or duplicates keep appearing, connect the mailbox to a CV database and compare the same searches.
The point is to make the decision on real numbers from your own inbox, not on a guess about volume.
FAQ
Do I need a license for an Outlook shared mailbox used for hiring?
According to Microsoft, a shared mailbox can hold up to 50 GB without a license. Members use their own licensed accounts to access it. Adding a license to the shared mailbox itself is only needed for extra features or a larger size, so ask your Microsoft 365 admin which applies to your plan.
How many recruiters can use one shared mailbox?
Microsoft documents a maximum of 25 users per shared mailbox. Heavy simultaneous use can cause connection failures or duplicated messages. For hiring, a small group of recruiters and a coordinator is a comfortable size.
Can I send emails to candidates from the shared address?
Yes, if the admin gives the member the Send As or Send on Behalf permission. With Send As, the message looks like it came from the shared address. With Send on Behalf, the recipient sees the individual’s name together with the mailbox.
How long should I keep CVs from rejected candidates?
There is no single answer for every country. In France, the data protection authority says a talent pool should in principle not exceed two years from last contact. Pick a period, document it, and delete on schedule. For US-specific rules, ask your employment counsel.
Sources
- Create a shared mailbox, Microsoft 365 admin
- Open and use a shared mailbox in Outlook, Microsoft Support
- About shared mailboxes in Microsoft 365
- CNIL, Guide recrutement
- AEPD, La protección de datos en las relaciones laborales
- Digia Recruitment Privacy Statement