Secure private email, made simple.

Frequently asked questions

What makes your email “secure” compared to Gmail or Outlook?

We use TLS for encryption in transit, encryption at rest for stored mailbox data, and optional end-to-end encryption for message content where supported. Access is protected with strong authentication controls, and security monitoring is designed to detect account takeover and abuse without excessive data collection.

Is my mailbox encrypted at rest, and what exactly is encrypted?

Yes. Mailbox data stored on our servers is protected with encryption at rest, meaning messages and related stored data are encrypted on disk. This reduces exposure if storage media is ever accessed without authorisation. Encryption at rest is one layer of protection and is used alongside TLS in transit and strict access controls.

Do you have access to my emails or the encryption keys?

Postinode is designed for privacy by default. Your mailbox data is encrypted at rest, and you control the keys and authorisation used to access your data. We do not use that access to read customer content, and internal access is technically restricted, tightly controlled, and only possible with explicit, time-limited authorisation for support or security investigations.

Where is my data stored, and can I choose a region?

Postinode’s primary infrastructure is hosted in Finland, under Finnish privacy protections and EU data protection law (GDPR). This gives customers a clear legal framework and strong privacy standards. Where regional options are offered, we keep data residency transparent and publish any sub-processors involved.

Do you log IP addresses, message metadata, or user activity?

No. Postinode is built to avoid surveillance-style logging. We do not log IP addresses or behavioural user activity, and we minimise operational metadata to what is strictly required to keep mail delivery reliable and prevent abuse. Where any operational events are temporarily required, they are short-lived and not used for profiling.

Can I use my own domain, and will you help with SPF/DKIM/DMARC?

Yes. You can use your own domain, and we provide a guided, privacy-first setup for SPF, DKIM, and DMARC so your mail is authenticated and resistant to spoofing. DNS records are the minimum required for secure delivery, and we keep configuration handling strict and transparent. We provide validation checks so you can confirm everything is correct without handing over unnecessary access or data.