Security

Encryption

All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256. No email content is stored — only verification metadata and verdicts.

Compliance

SOC 2 Type II controls in progress. Fully GDPR-compliant data handling. Regional data residency options available for enterprise customers.

Access Control

Audit logs on all paid plans. SSO/RBAC available on enterprise plans. API keys are hashed and never stored in plaintext.

Infrastructure

Hosted on AWS with strict network ACLs, regular penetration testing, and automated vulnerability scanning. 99.98% API uptime SLA on paid plans.