Everything an ESP gives you, without the black box
The same deliverability engineering as the big providers, running on infrastructure you control and can audit end to end.
Your identity, cryptographically proven
DKIM signing per domain
Each sending domain gets its own 2048-bit RSA keypair, provisioned automatically with two selectors so keys rotate without you touching DNS. Mail is signed before it leaves the queue.
SPF & DMARC alignment
We publish a return-path in your name and align it, so SPF, DKIM and DMARC all pass together, the exact bar Gmail and Yahoo set for bulk senders in 2024.
CNAME-first setup
You publish CNAMEs that point into our zone. That means an IP change, a key rotation or a server move is a change on our side, never a support ticket asking you to edit DNS again.
Built to reach the inbox, not the spam folder
Dedicated IP pools
Warm, isolated IPs. Your reputation is yours, never dragged down by the noisiest tenant on a shared pool, and never lifted falsely either.
Automatic warm-up
New IPs ramp volume gradually. Going from zero to full blast in a day is the single fastest way to get blocked, so the ramp is enforced, not optional.
Suppression management
Hard bounces and complaints are captured and enforced on every send. Continuing to mail an address that already refused you is what wrecks a shared IP, so we stop it for you.
Forward-confirmed rDNS
Every sending IP resolves to a hostname that resolves back to the IP, with HELO matching. Receivers check this first; we pass it before you send a single message.
Every message accounted for
Full forensic audit trail
Which domain sent to whom, when, from which IP, and the exact SMTP response the receiver gave. Append-only, the record cannot be edited, including by us.
Open & click tracking
A tracking pixel and signed click links tell you what was opened and clicked, without altering where your links actually go.
Bounce & complaint correlation
A VERP return-path ties every bounce, even one that arrives hours later, back to the exact message and recipient, with certainty rather than guesswork.
Real-time webhooks
HMAC-signed delivery events pushed to your endpoint, with exponential-backoff retries and a circuit breaker so one slow endpoint never blocks the queue.
Infrastructure you can rely on
REST API and SMTP relay
Integrate the modern way or point a legacy system at our SMTP relay on 587/465/2525. Idempotency keys mean a retry never double-sends.
Automatic IP failover
If a sending IP or server goes down, traffic moves to another, a change to our zone, invisible to you and to your DNS.
Team roles
Owner, admin, developer and viewer roles so a whole company can share one account without sharing one login.
Inbound receiving
Receive mail on your domains too, parsed, stored and routed, with the same audit trail as everything else.
Everything you need to actually send
Templates with variables
Reusable HTML and text templates with {{variables}}. Store copy once, send by slug, and pass the variables per message, a wording change ships everywhere at once.
Message streams
Keep transactional mail (receipts, resets) separate from broadcast (newsletters). Their reputation, unsubscribe behaviour and stats never mix, the discipline that protects your resets from a marketing blast.
Batch API
Send up to 500 messages in one call, each with its own recipients, template and variables, and get a per-message result back. One bad item never sinks the batch.
Send by template
The API and dashboard both accept a template id plus a variable bag, no need to paste HTML into every integration.
Do something with the mail you receive
Match & act
Route incoming mail by recipient, sender or subject: forward it to another address, POST it to a webhook, store it, or stop. Rules run in priority order, server-side.
Clean forwards
Forwards are re-sent through the outbound pipeline, DKIM-signed from the receiving domain, with replies pointed back at the original sender.
Know you are set up right, and stay safe
Deliverability health monitor
One screen: bounce and complaint rates against the exact thresholds Gmail and Yahoo enforce, per-domain SPF/DKIM/DMARC status, IP reputation, and sending volume.
Rebound desk
Every bounce and complaint with the receiving server’s own SMTP code and words, so you see why a message failed, not just that it did. Hard bounces auto-suppress; transient ones auto-retry.
Two-factor authentication
TOTP (Google Authenticator, 1Password, Authy) on top of your password, plus a login-history log so you can see every sign-in and where it came from.
API key IP allowlists
Lock a key to specific IPs or CIDRs. A leaked key is then useless from anywhere else.
See it on your own domain
Add a domain, publish the records we generate, and send your first 500 free.