We use a dedicated email delivery service, Postmark, to deliver emails reliably. We believe this is more effective than running our own email service.
Postmark has many resources to help with email security. Our standard email security setup is:
- Verify domains for email sending via DKIM and Return-Path DNS settings.
- Disable email tracking in Postmark (for data privacy).
- We use the REST API over HTTPS where possible to send emails. Postmark has integrations for Craft, WordPress, Laravel and Symfony.
- Where this isn't possible we use SMTP over TLS.
If Postmark is not acceptable to use for your project, we can use AWS Simple Email Service (SES) hosted in your local country, though additional setup costs will apply. AWS SES also supports domain verification via DKIM.