Mail, encrypted
Messages, attachments, drafts and team chat are encrypted on our servers with AES-256, under keys unique to each mailbox and kept apart from the data. Search still works.
What it does
Unreadable without its key
Everything you write and receive
Messages, attachments, drafts, team chat, notes, contacts, labels, templates and signatures are all encrypted.
A key for each mailbox
Each mailbox has keys of its own, under a root key for the organisation, so one mailbox can be shredded alone.
Keys kept apart
The keys live in a separate key store, on a volume of its own that no backup includes.
Shredded when deleted
Delete a mailbox, an account or an organisation and its keys go 72 hours later. Copies in backups become unreadable.
How it works
From arrival to shredding
- 1
It arrives
DMU Mail fetches it from your provider and encrypts it as it is stored, under the keys of its mailbox.
- 2
You read it
DMU Mail unlocks it for people who can open that mailbox, to show it, search it and notify them.
- 3
You delete it
Delete a mailbox, an account or an organisation and its keys are destroyed after 72 hours. Every copy left, backups too, becomes unreadable.
Good to know
The details
- Algorithm
- AES-256-GCM for stored data, and TLS for everything on its way. Mailbox passwords and sign-in tokens are encrypted too.
- Who holds the keys
- We do, which is how DMU Mail can search, preview and notify you. They are kept in a separate key store that no backup includes.
- What stays readable
- Dates, sizes, counts and statuses are not encrypted, so lists and counts stay quick. Subjects, bodies, senders and file names are.
- Your provider’s copy
- The original stays with your own mail provider, under its own protection. DMU Mail encrypts only its copy.
Be one of the first teams in
We let a few organisations into the private beta every week. Join the waitlist and we’ll email you when there’s room for your team.
Three quick questions. No card needed.