Security and data practices

What the public website tools do, what stays in your browser, and what to confirm before product onboarding.

Public DNS checks

The free DMARC, SPF, DKIM, BIMI, and MTA-STS tools read records already published in public DNS. Browser-based checks use Cloudflare and Google public DNS resolvers.

Local report analysis

Files added to the free DMARC report analyzer are unzipped and parsed in your browser. The report file is not uploaded by the analyzer.

Controlled enforcement

The recommended rollout begins with monitoring. Legitimate senders are identified and corrected before a domain moves to quarantine or reject.

Questions before onboarding

Ask us about product data flow, retention, residency, access, or procurement requirements before connecting a production domain.

Report a security concern

Send a clear description, affected URL, reproduction steps, and impact. Do not include secrets or personal data in the first message.

Email security support