​
Security Architecture

Shoutbox.net implements multiple layers of security to ensure the confidentiality, integrity, and authenticity of your email communications:

​
Key Security

  • Key Hashing: We never store API keys in their raw form. All keys are hashed using industry-standard SHA-256 algorithms before storage, ensuring that even in the unlikely event of a database compromise, your API keys remain secure.
  • Key Encryption: All API keys are encrypted during transit using TLS 1.3, providing an additional layer of security for key management operations.

​
Email Standards Compliance

We strictly adhere to modern email security standards:

  • SPF (Sender Policy Framework): We implement comprehensive SPF records to prevent email spoofing and ensure only authorized servers can send emails on your behalf.
  • DKIM (DomainKeys Identified Mail): All outgoing emails are cryptographically signed, verifying the authenticity of the sender and ensuring email content hasn’t been tampered with during transit.
  • DMARC (Domain-based Message Authentication): Our robust DMARC policies protect against phishing and spoofing attempts, maintaining your domain’s reputation and deliverability.

​
Secure Transport

  • SMTP Encryption: We support secure SMTP connections through:
    • Port 465 (SMTPS): Native TLS encryption for maximum security
    • Port 587 (Submission): TLS via STARTTLS for legacy compatibility while maintaining security
  • End-to-End API Encryption: All API communications are encrypted using TLS 1.3, ensuring secure data transmission between your applications and our services.

​
Infrastructure Security

  • Network Isolation: Our email delivery infrastructure operates in isolated network segments with strict access controls.
  • Real-time Monitoring: Continuous security monitoring for immediate detection and response to potential threats.
  • Regular Security Audits: Our systems undergo regular security assessments to maintain the highest security standards.

​
Data Protection

  • Zero Storage: We don’t store email content, unless required, after successful delivery, minimizing data exposure risks.
  • Secure Processing: All email processing occurs in memory-safe environments with strict access controls.
  • Audit Logging: Comprehensive logging of all security-relevant events while maintaining privacy.

By implementing these security measures, Shoutbox.net provides a robust, secure email delivery platform that meets and exceeds industry security standards while ensuring reliable email delivery for your applications.