Infrastructure
Mailsurge runs on hardened, regularly patched infrastructure. Services are isolated by role and principle of least privilege.
Security
We take the security of your data seriously and design Mailsurge with sensible, modern defaults.
Encryption
- Transport encryption with TLS for all app traffic.
- Secrets are stored in application configuration and environment, not in code.
Access control
- Admin access is limited and audited.
- Per-team scoping ensures your data is only accessible to your team.
Data retention
Email content, metadata, and delivery events are retained for 28 days to support debugging and analytics, then automatically deleted. You can request deletion at any time.
Backups and recovery
We perform regular backups of critical data and test restores to ensure recoverability.
Responsible disclosure
If you believe you have found a security issue, email hello@vblinden.dev. We will respond promptly.