Email, calendars, contacts, tasks, encryption, and API in one private platform. No endless subscriptions, no hidden access, full data control, and secure storage in encrypted mailboxes.
Cloud subscriptions create dependencies that are increasingly hard to remove
No code visibility. No way to verify what happens to data. Your communications can be used beyond your control.
A provider can change terms, raise prices, or stop regional operations. Your communications depend on external decisions.
A complete communications platform on your servers. Everything in one system, without patchwork integrations.
SMTP/IMAP. Compatible with Outlook, Apple Mail, Thunderbird, and mobile devices.
SMTP / IMAPMeeting sync, a unified corporate calendar, and support for popular clients.
CalDAVUnified corporate address book with cross-device sync.
CardDAVTask management and to-do list sync via standard clients.
CalDAV VTODOServer-side filtering: autoresponders, sorting, forwarding, blocking.
RFC 5228OpenPGP, S/MIME, WKD. Mailboxes are stored encrypted (ChaCha20-Poly1305).
E2EEAPI integration for CRM/ERP. Webhooks with HMAC-SHA256 signatures.
REST APIInstant push notifications for email, calendars, and contacts on iOS.
APNsReady for daily work across desktop and mobile clients without proprietary lock-in.
Full browser workspace for end users and admins with no extra components required.
A powerful standardized server-side filtering language. Rules work continuously regardless of client state.
Via web UI, REST API, or standard clients with ManageSieve support (RFC 5804): Thunderbird, K-9 Mail, Roundcube.
require ["fileinto", "vacation", "regex"];
# Vacation autoresponder
vacation :days 7
:subject "Auto-reply"
"I am on vacation until February 15.";
# Sender-based sorting
if header :contains "from" "@partner.ru" {
fileinto "Partners";
}
# Spam blocking
if header :regex "subject"
"(?i)(viagra|casino|lottery)" {
discard;
}Multi-layer protection: from transport encryption to end-to-end message encryption
End-to-end encryption: only sender and recipient can read the message. Neither server nor admin can access content.
Enterprise encryption based on X.509 certificates. Integration with organizational PKI and digital signatures for authenticity.
Automatic public-key discovery by email address. In isolated environments, use an internal WKD server for internal PKI.
Each mailbox is a separate encrypted file with an individual key derived from the owner password. Algorithm: ChaCha20-Poly1305, a modern alternative to AES. Even a server administrator cannot read another user mailbox (Zero-Knowledge).
Instead of a black box that requires blind trust, a transparent system that can be verified line by line
All executable code is readable files. Your security team can run a full audit.
No phone-home calls, no kill switch, no ad targeting. Data is not used to train AI.
Built-in anti-spam filtering, DNSBL checks, greylisting, and SPF/DKIM/DMARC validation on inbound email.
Google Authenticator, Authy, and similar apps
Hardware keys, biometrics
One-time recovery codes
For comparison: Gmail - 83/100, Proton Mail - 85/100
Multi-layer limits protect against abuse and ensure fair resource allocation.
Automatic classification of undelivered messages and delivery status notifications.
On inbound message and on delivery failure. HMAC-SHA256 signature for verification.
Instant mailbox-content search with Unicode support.
Choose the isolation level that matches your organization requirements
Full online operation with external email, automatic updates, and cloud DNS.
Controlled network perimeter. Restricted internet egress through proxy. Local package mirrors.
Fully isolated network with no internet access. Manual updates via USB. Internal mail only.
Not a legacy 20-year-old stack, but modern solutions for modern tasks
All code is available for security audit. Readable files, not opaque binaries. No hidden connections, telemetry, or kill switch.
Asynchronous processing of thousands of connections. FTS5 search with Unicode. Sieve filtering (RFC 5228). OpenPGP/S/MIME encryption.
REST API for full automation. Webhooks (Inbound + Bounce) with HMAC-SHA256 signatures. Integration with CRM, ERP, and internal systems.