Security & privacy
Handled like registered mail.
Your email carries contracts, invoices and client conversations. Every message is encrypted, authenticated, screened and accounted for, by a company whose business model never depends on reading it.
Delivery receipt
ayesha@northwind.co → sara@yourcompany.com
Spam & phishing
Five checkpoints on every route.
Each message is scored by independent checks. Clear spam is refused, borderline mail is held in quarantine, and everything else is delivered, usually in under a second.
- Checkpoint 1
Connection
Known-bad senders and misbehaving servers are refused at the door.
- Checkpoint 2
Identity
SPF, DKIM and DMARC show whether the sender is who they claim to be.
- Checkpoint 3
Content
Structure, links and wording are checked against current scam patterns.
- Checkpoint 4
Learning
Filters adapt to what your team marks as spam or not spam.
- Checkpoint 5
Reputation
Domains, IPs and URLs are weighed against live reputation data.
Phishing & quarantine
Look-alikes don’t get through.
Phishing is built to look legitimate. We look harder, and anything uncertain is held for you instead of deleted.
- Look-alike and impersonated domain detection
- Suspicious and redirecting link analysis
- Display-name and brand impersonation blocking
- Daily quarantine report with one-click release
Virus & malware
Every attachment inspected before delivery.
Attachments are scanned in real time, inbound and outbound, with no setup and no extra cost.
Real-time scanning
Every attachment is checked as it arrives, before it can reach any device.
Archive inspection
ZIP, RAR and 7z files are unpacked, including archives hidden inside archives.
Outbound scanning
Infected mail is never sent from your domain, which protects your clients and your reputation.
Account security
Passwords alone aren’t enough.
Most email breaches start with a stolen password. Every MailCRO account can be locked down in minutes.
- Two-factor sign-in with any authenticator app
- Hardware security keys and passkeys (FIDO2)
- App passwords, so your main password never sits in a mail app
- Sign-in history and brute-force protection
Privacy promise
Your data remains your business.
MailCRO is a paid service, not an advertising platform. We have no reason to read, analyse or monetise what you write.
We never
- Show ads in your mailboxNever
- Profile you for marketingNever
- Train AI on your messagesNever
- Sell or share customer dataNever
We always
- Store mailboxes inYour chosen location
- Encrypt connections withTLS
- Let you export overIMAP
- Delete your data on requestAlways
Report to us
Found a vulnerability? Email security@mailcro.com. Our contact details are also in security.txt.
Seeing abuse from our network? Write to abuse@mailcro.com. Every report is investigated under our acceptable use policy.
Get started
Move your business to email you own.
Professional email on your domain in minutes. Migration help, no contracts, and real people when you need them.