Home / Security and GDPR
Your email, in good hands
A security service has to be trustworthy above all. We explain clearly how we treat your email, where it is and what you do with it.
Four commitments that don't change
We filter your email to protect you, and only for that. This is what you can expect from us.
Encrypted connections
Email is received and delivered with TLS encryption when the other server supports it, and with valid certificates.
Panel with two-factor login
You log in to the panel with a password and a second verification step (2FA), so nobody gets in as you.
Nobody reads your email
Messages are analyzed by an automated system. Nobody on the team reads them, unless you ask us for help with a specific one.
No advertising
We don't use your email for advertising or sell data to anyone. We live off our fee, not off your information.
What data we handle and for how long
We apply the principle of data minimization: we only keep what's needed for the service to work.
- Emails are analyzed in transit and delivered to your server. We don't keep a copy of clean messages.
- Only those sent to quarantine are stored, for 14 days, so you can review them and release the good ones. After that they're deleted.
- Technical logs: the minimum data for each message (sender, recipient, date and decision taken) for tracking and to keep the service secure.
- Account data: that of the people who use the panel, such as name and login email.
Quarantine with an expiry date
Doubtful email is kept at your disposal for 14 days and then deleted automatically.
Complying with the GDPR is part of the service
Your company remains responsible for the data in its email; we are its data processor and we put that in writing.
Data processing agreement
We sign with you the agreement the GDPR requires: what data we process, what for, for how long and with what security measures.
Only for what's agreed
We process data only to filter your email and follow your instructions. Nothing else.
You're in charge
If you stop being a customer, your data is handled as the agreement sets out, and you can ask us to delete it.
Where the service is
PostCleaner runs on a server dedicated to filtering, hosted in an OVHcloud data center, a European infrastructure provider.
That server is in Canada. We say so plainly: the European Commission recognizes Canada with an adequacy decision, which means its level of data protection is considered equivalent to Europe's and data can be processed there with the GDPR's safeguards.
If your company needs more details for its record of processing activities, we'll gladly provide them.
Server dedicated to filtering
Provider: OVHcloud, a European company. Location: Canada, with a European Commission adequacy decision.
Backups and continuity: email isn't lost
We back up the service configuration and the data needed for everything to get back up and running quickly.
And if the filter were ever unavailable, legitimate mail servers retry delivery for a while, so email isn't lost: it arrives as soon as the service recovers.
Senders try again
That's how email has always worked: if the destination doesn't respond, the sender tries again later.
Artificial intelligence, only when needed and with notice
We're preparing an artificial intelligence review to help with truly doubtful messages. When it arrives, it will only apply to that doubtful email, not to all your email.
And it won't be a surprise: we'll include it in the agreement and let you know before turning it on.
Transparency above all
No change in how we handle your data without you knowing beforehand.
Common security questions
Can anyone at PostCleaner read my emails?
No. The analysis is automatic. Only if you ask us for help with a specific message, and with your permission, would we look at it to resolve it.
Do you store all my email?
No. Clean messages are delivered to your server and not kept. We only store those sent to quarantine, for 14 days, and the technical logs that are needed.
Can I sign the data processing agreement?
Yes, it's part of the service. Ask for it when you sign up or write to us and we'll send it to you.
What happens if the service goes down?
Legitimate mail servers retry sending for a while, so email isn't lost. It arrives as soon as the filter is available again.
Would you like us to answer a security question?
Write to us and we'll answer you personally. We'll also send you the data processing agreement if you need it.
Talk to us