Business email that works — and doesn't work against you.
Email is the backbone of business communication. It is also the primary attack surface, the most regulated data category, and the service most likely to quietly send your content to servers in jurisdictions you've never agreed to.
What makes mail hard
Email is the most complex managed service we offer — and the most important to get right. Getting mail into inboxes in 2026 requires correct SPF, DKIM, DMARC, MTA-STS, and TLS-RPT configuration. IP reputation management. Blocklist monitoring. Anti-spam tuning. Proofpoint gateway configuration. Modern webmail with mobile sync.
Most organizations shouldn't have to understand any of this. They should just have email that works.
What PILOT manages for you
Mail Infrastructure
iRedMail on dedicated EU infrastructure — Postfix as MTA, Dovecot for IMAP, Rspamd for spam filtering. Your domain, your mail, your data. Unlimited mailboxes and aliases, no per-seat pricing.
Security Gateway
Proofpoint as your inbound and outbound mail gateway. Advanced threat protection, phishing detection, spam filtering, and outbound DLP. The layer between the internet and your mail server that catches what basic spam filters miss.
Webmail Interface
CrossBox — a modern, fast webmail and collaboration interface your team will prefer over Outlook Web. Email, calendar, contacts, file attachments, and team chat in one interface. White-labeled to your domain.
Deliverability Management
We manage your IP reputation, monitor blocklists, configure and maintain all authentication records, and handle postmaster issues when they arise. Your mail reaches inboxes.
Protected Mail
Restricted-access mailboxes for sensitive communications — C-level addresses that accept mail only from whitelisted senders, or internal addresses invisible to external senders. Built on Cloudflare Email Routing and custom Postfix routing rules.
Mobile & Desktop Sync
IMAP and ActiveSync support. Works with native mail apps on iOS, Android, macOS, and Windows. CrossBox mobile apps available for a consistent interface across devices.
Who this is for
→ Businesses leaving Google Workspace or Microsoft 365 who want professional email without Google or Microsoft
→ Regulated industries where email content is legally protected and cannot be processed on US-owned infrastructure
→ Organizations with deliverability problems — mail going to spam, IP blacklisted, domain reputation damaged
→ Any business that wants email managed by people who treat it as a first-class service, not a commodity
What we don't do
We don't offer shared mail hosting. Every PILOT mail deployment is dedicated infrastructure — your domain, your server, your data, your IP address. There is no other organization's mail on the same machine, and no other organization's sending reputation on the same IP.
On shared mail hosting, one bad actor on the same IP can blacklist the entire pool — and your mail starts going to spam for reasons that have nothing to do with you. Dedicated IP means your reputation is yours to build and maintain. We manage it; you own it.
// NERD TALK
Not your thing? Get in touch directly.
- Stack — Postfix (MTA) + Dovecot (IMAP/POP3) + Rspamd (spam/DKIM) via iRedMail. MariaDB for virtual domain/mailbox management. Redis for greylisting and rate limiting.
- Security gateway — Proofpoint Essentials or Proofpoint on Demand as MX gateway. Inbound filtering before mail reaches your server. Outbound relay for reputation management.
- Authentication — SPF, DKIM (2048-bit RSA or Ed25519), DMARC (p=quarantine → p=reject), MTA-STS, TLS-RPT. DANE where registrar supports it.
- Webmail — CrossBox as IMAP-connected client. Does not modify server configuration. ActiveSync via Z-Push for mobile push.
- Backup MX — secondary MX on separate infrastructure. Mail queued if primary is temporarily unavailable.
- Storage — Maildir format, per-user quotas. Backup via incremental snapshot to S3-compatible storage.
- Monitoring — TOWER monitors SMTP/IMAP availability, queue depth, spam score distributions, and blocklist status. Alerts on delivery anomalies.
Want to run this yourself?
Read the Pilot Book: Mail Stack — iRedMail setup, Proofpoint integration, deliverability configuration, and the things that will break if you miss them.
Related missions
- Sensitive Industries — sovereign mail as part of a full compliance stack
- Business Stack — mail as part of a complete business infrastructure
Related services
- Migration — moving your existing mail to PILOT infrastructure
- TOWER Monitoring — mail uptime and deliverability monitoring
- tresor.email — sovereign mail for smaller teams and individuals who don't need a full managed stack
Not ready for a full managed stack?
If your team is smaller or you're looking for sovereign mail without the full corporate deployment, tresor.email is our EU-sovereign mail service for individuals and small teams. Same jurisdiction, same privacy principles — simpler onboarding.
Mail that works, delivered by people who care about it. Request access.