Security

Infrastructure

Sendwich runs on hardened, regularly patched infrastructure. Services are isolated by role and principle of least privilege.

Encryption

• Transport encryption with TLS for all app traffic.
• Secrets are stored in application configuration and environment, not in code.

Access control

• Admin access is limited and audited.
• Per-team scoping ensures your data is only accessible to your team.

Data retention

Operational logs and email metadata are retained only as long as needed for debugging and analytics. You can request deletion at any time.

Backups and recovery

We perform regular backups of critical data and test restores to ensure recoverability.

Responsible disclosure

If you believe you have found a security issue, email sendwich@vblinden.dev. We will respond promptly.