How we keep your mail safe

Three layers:

1. In transit — TLS 1.3 on every connection.
2. At rest — AES-256 on all scans, documents and the database.
3. Access — operator staff only see envelopes assigned to their location; every internal action is MFA-protected and logged.

We rotate encryption keys every quarter.