Security

Infrastructure

Sendwich runs on hardened, regularly patched infrastructure. Services are isolated by role and principle of least privilege.

Encryption

• Transport encryption with TLS for all app traffic.
• Secrets kept in the application config and environment, not in code.

Access control

• Admin access is limited and audited.
• Per-team scoping ensures your data is only accessible to your team.

Data retention

Operational logs and email metadata are retained only as long as needed for debugging and analytics. You can request deletion at any time.

Backups & recovery

We perform regular backups of critical data and test restores to ensure recoverability.

Responsible disclosure

If you believe you’ve found a security issue, please email sendwich@vblinden.dev. We will respond promptly.