Security & privacy
How we protect mail in transit and at rest, and what we will and won't do with it.
Transport encryption
Opportunistic TLS everywhere, enforced TLS and MTA-STS available per domain.
Storage
Mail is stored on encrypted volumes with per-account isolation.
Account protection
Two-factor authentication, session inventory, and alerts on new-device sign-in.
Sender authentication
DKIM signing per domain, SPF alignment, DMARC reporting into your dashboard.
Abuse handling
Outbound rate limits and anomaly detection so one compromised mailbox cannot burn your domain reputation.
Data portability
Standard IMAP and a full export endpoint. Leaving is a supported operation, not a support ticket.
Placeholder: certifications and audit statements
Compliance claims, sub-processor lists and audit reports belong here once verified. Nothing on this page should assert a certification the platform does not hold.