Account protection
Authentication is handled through protected sessions. Account-scoped routes verify the signed-in user before accessing domains, mailboxes, messages, billing records, or administration.
Data protection
Service credentials and privileged keys remain server-side. Mail data is stored with account ownership controls and row-level access policies where configured.
Operational security
We use access controls, logging, dependency updates, backups, and monitoring appropriate to the service. Security practices may change as DTPLAY Mail grows.
Report a vulnerability
Please report suspected vulnerabilities privately through the support or security contact published in the service. Do not publicly disclose an issue before we have had a reasonable opportunity to investigate and respond.
Availability
No service can guarantee uninterrupted availability or absolute security. We communicate material incidents and service changes where required by law or our agreements.