Security & compliance

Swiss by default. Compliant by design.

Transactional email carries your customers' most sensitive moments — logins, payments, identity. MailQ treats that data the way Swiss infrastructure always has: privately, and on home soil.

Hosted in Switzerland

DSGSOC 2DKIM

Swiss data residency

Built and operated in Switzerland. Your data never leaves Swiss soil, fully under the Swiss Data Protection Act (DSG).

SOC 2-aligned controls

Access scoping, change management and monitoring follow SOC 2 principles from day one.

Scoped API keys

Issue keys with limited scope and optional expiry. Rotate without downtime; track last use.

Full audit logs

Every action records who, what, when, the API key, IP and user agent — searchable by date and keyword.

Rate limiting

Per-key rate limits protect your account and your reputation from runaway or compromised callers.

Modern authentication

API keys or OAuth 2.1 machine-to-machine tokens, with organisation scoping via our identity layer.

Reliability

Delivery that holds under pressure

Security means nothing if the mail doesn't arrive. MailQ is engineered to keep sending when things go wrong.

99.9% delivery

Automatic DKIM, SPF support and bounce handling keep messages landing in the inbox.

Self-healing retries

Transient failures retry with exponential backoff. A flaky moment never becomes a lost email.

99.9% uptime SLA

A written SLA on Professional and Enterprise, backed by auto-scaling infrastructure.

Take the easy path through security review

We'll walk your security and compliance team through residency, controls and audit logging.