Enterprise

Inbox placement
you can build on

It doesn't matter whether you send four million receipts a month or forty thousand. You need proof the mail lands, custody of your own data, and someone who answers when a domain goes quiet.

Talk to the people
who know your stack

We're a small bench of deliverability engineers, former postmasters, and the founders themselves. You reach them directly — not a queue, not a reseller, not a bot with a ticket number.

Severity-based response

Reach an on-call engineer when it matters, with written response times and a shared channel of your choosing.

Postmaster access

Sit down with the people who run our sending infrastructure. Learn what mailbox providers actually score you on.

Advice for your traffic

No recycled deliverability checklists. Recommendations come from your own domains, volumes, and complaint data.

Trusted by teams shipping at scale

Every box ticked,
nothing traded away

The controls a payments-adjacent workload asks for: scoped access, encryption end to end, regional redundancy, and uptime commitments written down rather than implied.

SOC 2

SOC 2 Type II attested. Audit completed with Harborline Assurance; report available under NDA.

GDPR

GDPR compliant, with DPAs, records of processing, and subject requests handled in-product.

Data encryption

Encrypted at rest with AES-256 and in transit over TLS 1.3, keys rotated on a 90-day cycle.

Uptime SLAs

99.97% API availability, with a named contact who calls you before your dashboard does.

DDoS protection

Volumetric and application-layer filtering in front of every send endpoint, tuned per tenant.

Scoped API keys

Issue keys limited to a domain, a template set, or a single environment. Revoke without a redeploy.

Automated backups

Suppression lists and event logs snapshot hourly and retained across two regions for 14 days.

Penetration testing

Twice-yearly external tests by Ridgemark Labs, plus continuous dependency and secret scanning.

Frequently asked questions

Is our sending data encrypted?
Yes. Message bodies and event data are encrypted at rest with AES-256 and in transit over TLS 1.3, and encryption keys are rotated every 90 days.
Is Tidepost SOC 2 attested?
We hold a current SOC 2 Type II attestation covering security and availability. The full report is available to customers and evaluating teams under NDA.
Is Tidepost GDPR compliant?
Yes. We sign a DPA with every account, keep a public record of subprocessors, and can pin storage of message content to EU regions.
Do you hold ISO 27001 certification?
Our information security programme is built to ISO 27001, and certification for the sending platform is in its final audit stage this quarter.
Where can I find the list of subprocessors?
The current list lives in the trust centre, alongside change notices. Accounts on an enterprise plan are emailed 30 days before any addition takes effect.

"We moved eleven years of transactional mail across in a fortnight. Their team mapped every template, sat in our incident channel, and our complaint rate went down, not up."

HL Portrait by Jake Nackos on Unsplash
Ines Karadag
Platform lead at Haldern

"As of last week every receipt we send runs through Tidepost. The local preview tooling means nobody has to leave their editor to check a template renders."

BL Portrait by Korede Adenola on Pexels
Adrien Bosko
Founding engineer at Brightloom

"Webhooks land fast enough that we pipe opens and clicks straight into our warehouse. When a domain wobbled on a Sunday, an engineer — not a bot — was in our channel in nine minutes."

QS Portrait by Thanh Xuan Nguyen Ly on Pexels
Priya Raghunath
Founder of Quayside

"Set-up took an afternoon. I like the posture they take on warming dedicated IPs — measured, documented, no hand-waving. I've stopped dreading deliverability reviews."

FV Portrait by Ben Khatry on Pexels
Tomas Elvedge
CTO at Fernvale

"Their postmaster review found a DKIM alignment issue two vendors had missed. Placement in one problem region climbed 18 points in the following month."

OR Portrait by Foto Sushi on Pexels
Selin Aydemir
Head of lifecycle at Orrery