Skip to main content
Mailera

Security

Protecting your mailboxes and tokens.

These safeguards are already in place in Mailera today.

  • Encrypted tokens

    Refresh tokens, access tokens, and mailbox passwords are encrypted with AES-GCM before storage and are never sent to the browser.

  • Server-side access control

    Every operation checks groups and roles (Admin, Leader, Member) on the server. The database also enforces row-level policies as a final safeguard.

  • Hashed, scoped API keys

    Keys are shown only once at creation and stored as SHA-256 hashes. Each key has its own permissions, supports IP restrictions, and has every request logged.

  • Signed webhooks

    Each event is signed with HMAC-SHA256 and includes a timestamp so your system can verify the sender.

  • Safe message rendering

    HTML content is sanitized, stripped of scripts, and displayed in an isolated frame. Remote images do not load until you allow them.

  • Minimal data retention

    Mailera only keeps messages from the past 30 days; older messages open directly from Microsoft when needed.