New Pair with DMARC Report for complete email authentication

Enterprise Email Security

Protect your email infrastructure with encryption, access controls, and compliance built into every layer.

Try 1000 Free Credits
Security Features

Security at every layer

TLS Encryption

All connections require TLS 1.2 or higher. Your email content is encrypted in transit between your application and our servers.

Authentication

SMTP authentication with API keys, per-subaccount credentials, and optional two-factor for portal access.

IP Access Restrictions

Lock down API and SMTP access to specific IP addresses or CIDR ranges. Only authorized networks can send through your account.

Data Privacy

We process email for delivery and do not store message content after delivery. Logs are retained per your account settings.

Real-Time Alerts

Receive alerts for unusual sending patterns, authentication failures, bounce spikes, and account security events.

Audit Logging

Complete audit trail of account changes, API access, and configuration modifications. Export logs for compliance audits.

TLS Encryption

Encryption details

Feature Details
Minimum TLS Version TLS 1.2 required for all connections
Cipher Suites AES-256-GCM, ChaCha20-Poly1305 preferred
Certificate SHA-256 signed, auto-renewed
SMTP Ports 587 (STARTTLS), 465 (Implicit TLS)
Opportunistic TLS Enabled for outbound delivery to recipient servers
TLS Reporting TLS-RPT support for monitoring delivery encryption
MTA-STS Respected when receiving servers publish MTA-STS policies
Compliance

Built for regulated industries

GDPR

Data processing agreements, data minimization, right to erasure support, and EU data handling practices. We process email for delivery without unnecessary data retention.

HIPAA

Business Associate Agreements available. TLS encryption, access controls, audit logging, and data handling practices that support HIPAA compliance for healthcare email.

CCPA

Consumer data rights support, data handling transparency, and privacy-first design. We do not sell or share personal data from email processing.

PCI DSS

Secure infrastructure practices aligned with PCI DSS requirements. Encryption, access controls, and audit trails support cardholder data environment compliance.

FAQ

Security questions

Do you store email content after delivery?

No. We process email content for delivery and do not retain message bodies after successful delivery. Delivery metadata (timestamps, status, recipient) is retained per your account log retention settings.

Can I restrict SMTP access to specific IP addresses?

Yes. You can configure IP access restrictions per sub-account. Only connections from authorized IP addresses or CIDR ranges will be accepted. This is configurable via the portal or API.

Do you offer a Business Associate Agreement for HIPAA?

Yes. We provide BAAs for customers who require HIPAA compliance. Contact our team to discuss your healthcare email requirements and to initiate the BAA process.

Secure email delivery starts here

Enterprise security included with every plan. Start with 1,000 free credits.