Security and trust.
How we protect your data, your sending reputation and everyone else’s.
Encryption
TLS for all traffic, including SMTP and IMAP. Data and credentials encrypted at rest.
Access control
Two-factor, Google Workspace sign-in, roles and per-client access in every workspace.
Isolation
Each workspace is kept apart, and dedicated IP pools keep one sender from affecting another.
Our own servers
Mail servers we run ourselves, patched and monitored by our own engineers.
Audit trail
Sign-ins, key changes and settings changes are logged for every workspace.
Backups
Configuration and account data backed up daily and tested for restore.
What we don’t allow.
Protecting the network protects your deliverability too.
- Purchased or scraped lists
- Phishing or impersonation
- Malware or deceptive links
- Sending without an unsubscribe option
- Hiding who the sender is
- Ignoring opt-out requests
Cold email is legal and useful when it is honest. We review new accounts, watch complaint rates and suspend senders who break these rules, so the shared pools stay clean for everyone.
Your data, your region.
Plain answers for your legal and security reviews.
GDPR
We act as a processor for the contacts you email. A data processing agreement is available on request.
Request the DPAWhere data lives
Choose US or EU sending for each workspace. Mail and logs stay in the region you pick.
See subprocessorsReport a vulnerability
Found something? Tell us first. We reply within two working days and credit researchers who report responsibly.
security@mailyard.com
Security questions.
Need a security questionnaire filled in? Ask us.
Doing a security review?
We’ll walk your team through it on a call.