Security & trust
Built to protect your data and your deliverability.
Security isn’t a bolt-on. Encryption, SSO, domain authentication and GDPR-aligned processing are built into the platform from day one.
Data protection
- Encryption in transit (TLS) for all traffic
- Sensitive credentials (OAuth tokens, SMTP passwords) encrypted at rest
- Per-workspace data isolation — tenants never see each other’s data
Authentication & access
- SAML 2.0 Single Sign-On (Okta, Azure AD, Google Workspace…)
- Two-factor authentication (TOTP) for individual accounts
- API keys with per-key IP allowlisting + rate limits
- Role-based access (Owner / Admin / Manager / SDR / Viewer)
Deliverability & sender security
- SPF, DKIM and DMARC domain authentication
- Continuous blacklist / RBL monitoring with alerts
- MegaScore pre-send spam scoring + optional send gate
Privacy & compliance
- GDPR-aligned data processing (DPA available on request)
- Enforced anti-spam policy + one-click unsubscribe handling
- Data export and deletion on request
Operations & visibility
- Audit logs of key account actions
- Per-user login history (IP + device)
- Suppression + bounce handling to protect reputation
Policies & documentation
The details, in plain language.
Working toward formal certifications (e.g. SOC 2) as we grow. Have a security questionnaire or need a DPA? Get in touch.
Ready when you are
Start sending smarter today
Join 1,200+ teams landing in the inbox. Free to start — no credit card required.
Already have an account? Log in