Everything you need.
Nothing you don't.

Automatic failover across SES, Mailgun, and Brevo with a circuit breaker that trips in milliseconds.

1 email/sec on Free, 50/sec on Pro, 500/sec on Enterprise — enforced at the API layer and in the worker.

Enterprise jobs are processed at priority 1, Pro at 5, Free at 10. Your SLA never depends on someone else's burst.

Send both HTML and plain text bodies in one request. We validate and sanitise both.

Full RFC 5322 addressing. All recipient types count correctly toward quota.

Tag every send with up to 10 labels. Filter logs, analytics, and webhooks by tag.

32 dedicated IPs across 4 tiers. Enterprise on Tier 1 (16-week warmup), Free on Tier 3 — fully isolated.

New IPs follow a strict schedule from 50/day to 500k/day. The scheduler enforces limits automatically.

2048-bit RSA keys rotated in one Cloudflare DNS update, propagated to all tenant domains instantly via CNAME delegation.

Your domain's SPF record includes our sending IPs. Managed automatically as IPs are added or retired.

Platform-wide DMARC policy. We configure the rua/ruf report endpoints and surface aggregate data in your dashboard.

Purchase a dedicated IP for $10/mo. Isolated reputation, your warm-up progress shown in real-time.

Add one TXT record, call verify — we do the DNS lookup in real time. No manual review for ownership.

After ownership is confirmed, admin reviews the domain before it can send. Prevents abuse.

Every domain approval triggers automatic DNS record creation in Cloudflare via API. Zero manual steps.

Pro allows 10 domains, Enterprise 100. Each domain has independent DKIM, SPF, and DMARC.

Keys are scoped to permissions (emails:send, domains:read, analytics:read) and optional IP allowlists.

Raw keys are shown once and never stored. Lookups use SHA-256 hashes with a 5-minute Redis cache.

Five event types: email.sent, email.delivered, email.bounced, email.complained, email.failed — delivered to your HTTPS endpoint.

Every webhook is signed with a per-endpoint HMAC-SHA256 secret. Verify in one line of code.

Failed deliveries retry 5x with exponential backoff. Endpoints are auto-disabled after 100 consecutive failures.

Hard bounces are suppressed globally within milliseconds. Soft bounces retry 3x before suppression.

ISP feedback loops feed directly into our suppression list. Complaint rates trigger automatic abuse checks.

Every recipient in To, CC, BCC gets individual delivery tracking: queued → sent → delivered/bounced/complained.

Hard bounces and complaints from any tenant are added to a shared suppression list. Every send checks it before queuing.

Bounce rate > 5% or complaint rate > 0.1% in any 60-minute window triggers automatic account suspension.

IP tiers are hard-separated. A free plan user's spam cannot affect an enterprise customer's IP reputation.

Logout invalidates the JWT immediately via Redis blocklist. Tokens cannot be replayed after signout.

Lock any API key to a set of IP addresses. Requests from unlisted IPs are rejected before they touch your quota.

All data stays in the EU. Frankfurt and Helsinki datacenters. GDPR-ready by design.