Trust & compliance
We read your email so attackers can't. That demands a higher bar.
Vantmail is built on the principle that a security vendor with access to every inbox must itself be the hardest target in the chain.
Security controls
Per-tenant encryption
Provider credentials use AES-GCM encryption with tenant-specific key derivation.
Data residency
India-region production hosting is planned. Residency and external service processing must be validated for each deployment.
Least-privilege access
Only the permissions each capability needs. Tokens are never stored in plain form or logged.
Tamper-evident audit
Every analyst and system action is recorded in a hash-chained, append-only log.
Lifecycle controls
Credential encryption supports tenant isolation. Offboarding and deletion procedures require deployment-specific validation.
Minimal retention
Production retention and deletion schedules must be agreed and enforced before customer onboarding.
Regulatory alignment
A considered approach to regulatory requirements.
DPDP Act 2023
Production readiness requires a documented purpose, processor agreements and data-principal rights procedures.
CERT-In directions
Incident response, reporting responsibilities and applicable log retention must be confirmed before launch.
RBI & SEBI guidance
Sector-specific requirements must be assessed with the customer and compliance advisers.
ISO 27001 / SOC 2
No certification is claimed. Independent assurance is a future programme.
A clearer view of your email risk.
Explore Vantmail with your team. Discuss deployment, threat coverage and the controls your organisation needs.