How we protect your data and your sending. Certifications and attestations listed here must be confirmed before publishing.
Plain message
Your code is 482913
On the wire
x7#kQ9$2vLp0
TLS 1.2+ required
Scoped keys
Never logged
Protected from your app to the recipient server
TLS enforced
Keys rotated
Encrypted in transit and at restConnections require modern TLS, and stored data and secrets are encrypted. Keys are scoped, rotated and never written to logs.
Security settings
Two-factor for all usersEnforced
Single sign-onSAML or OIDC
Role-based accessAdmin, developer, analyst
IP allow-listOptional
Least privilege
SSO
Access you can controlEnforce two-factor sign-in, single sign-on and role-based access, so people only touch what they should.
Audit log
10:01:02
Key created
a91f…c3
10:04:11
Domain verified
7be2…90
10:09:40
Role changed
c0d4…1a
10:12:05
Sign-in with 2FA
5f6e…b8
Sealed · append-only
Append-only
Exportable
Everything leaves a trailSign-ins, key changes and configuration edits are recorded in an append-only audit log you can export.
[Region]
[Region]
Backup
Backup
Your data
Regional
Transparent
Know where data livesChoose the region that holds your data and see which nodes handle your traffic.
Controls
[Confirm: SOC 2 status]
[Confirm: ISO 27001 status]
GDPR data processing terms
Vendor security review pack
Annual penetration test
[Confirm certs]
DPA available
Compliance postureA clear list of controls and the standards we align to, with documents available under NDA.
AI governance
Your dataOnly what is needed
Scoped
MaskPersonal data hidden
Redacted
AI modelSuggests an action
[Confirm model]
You approveNothing auto-sent
Logged
Every AI suggestion is logged in the audit trail
Human in the loop
[Confirm policy]
AI that stays inside the linesAI features only see what the request needs, personal data is masked first, and risky actions wait for a human. [Confirm: model provider and data-use policy].
Encryption
Access
Audit
Data location
Compliance
AI guardrails
Our security practices
Encryption
Data encrypted in transit with TLS. [Confirm at-rest encryption]
Access control
Role-based access and an audit log for your workspace.
Infrastructure
[Describe hosting, regions and redundancy]
Abuse prevention
Account review and sending limits keep shared reputation healthy.
Monitoring
[Describe monitoring and incident response]
Data handling
[Describe retention and deletion policy]
Compliance
SOC 2Independent audit of security controls.[Confirm status: not started / in progress / certified]
ISO 27001Information security management.[Confirm status: not started / in progress / certified]
GDPRData processing terms and DPA.[Confirm status: not started / in progress / certified]
DPDP Act (India)Digital Personal Data Protection compliance.[Confirm status: not started / in progress / certified]