Built to be trusted with your email.

Encryption everywhere

• TLS on every interface: HTTPS API and console, STARTTLS/TLS SMTP
• Secrets (provider credentials, webhook secrets, 2FA seeds, SMTP passwords) stored AES-256-GCM encrypted
• API keys and sessions stored only as hashes - never in plain text

Account protection

• Passwordless sign-in by verified email link or Google
• TOTP two-factor authentication on every sign-in method
• Login throttling and lockout against brute force
• Sessions revoked instantly when a member is disabled

Access control

• Role-based team access: owner, admin, developer, read-only reports
• API keys and SMTP users can be blocked, rate-limited and pinned to allowed IP addresses or CIDR ranges
• Every sensitive action lands in an audit log

Sending integrity

• Sender ownership enforced - mail only from DNS-verified domains
• Header injection and spoofing blocked at submission
• Automatic suppression of bounces, complaints and unsubscribes
• Abuse thresholds that pause problem traffic before it hurts anyone else

Webhook authenticity

Every webhook is HMAC-SHA256 signed over a timestamp and the exact payload, so your systems can reject forgeries and replays. Verification code ships in the docs.

Data handling

• Tenant isolation throughout - your data is never visible to another account
• Configurable email retention; content is deleted on schedule
• Payments happen on the card networks' hosted pages - card data never touches our servers