Security lives in the send path.
Email runs on your most sensitive moments — password resets, receipts, confirmations. Drin treats the credentials and content behind those sends as exactly that sensitive, from the API call to the wire.
Keys hashed at rest
API keys are stored as salted, peppered hashes — never in plaintext. A leaked database row can't be replayed as a working key.
Encrypted in transit
Every API and dashboard connection is TLS-encrypted, and we deliver over TLS to receiving servers wherever they support it.
Tenants isolated
Each account's data, domains and sending reputation are isolated from every other tenant. No shared mailboxes, no cross-tenant reads.
Scoped, revocable keys
Mint keys scoped to a tenant or a single sender, and revoke any of them instantly. The dashboard refuses to delete a key that's actively in use.
Abuse controls built in
Opt-in-only sending, durable suppression, and automated circuit-breakers protect both your reputation and the wider network from misuse.
Auditable activity
Every message and key action leaves a searchable trail, so you can answer “what was sent, when, and by which key.”
We hold the minimum we need, for as long as we need it.
Message content and logs are retained for the window your plan specifies, then aged out. You can request export or deletion of your account data at any time — we're built to honour data-subject requests, not to hoard.
Sub-processors are limited to the infrastructure that actually delivers your mail, and we publish what we use. The full detail of what we collect and why lives in our Privacy Policy.
On certifications, we're honest: we don't claim SOC 2, ISO 27001, or HIPAA today. A formal SOC 2 programme is on our roadmap, and we'll say so plainly the day it's real — not before.
Found a vulnerability? We want to hear from you. Email security@drin.run with details and steps to reproduce. We'll acknowledge your report, keep you updated, and won't pursue good-faith researchers who follow responsible disclosure.
For spam or abuse from mail sent through Drin, contact abuse@drin.run. See our Acceptable Use Policy for what we prohibit and how we enforce it.
Sending you can trust.
Get the deliverability of a big platform with the honesty of a small one.