Security

Mailsurge encrypts sensitive fields at rest (including recipient lists and suppression addresses), authenticates API traffic with hashed keys, and verifies SNS webhook signatures for delivery events.

Access to the control panel requires verified email and account approval. We do not process payment cards.

More detail on data handling is in our Privacy Policy. To report a vulnerability, contact mailsurge@vblinden.dev.