Security SagaMail email Privacy

Your email is protected at every step. Here is how.

From the servers it sits on to the way you sign in, and from the backups we keep to the promises we make about your data.

Server security

Servers built to stay up and stay private.

Your mail runs on a multi-node cluster in the Adani data center in Chennai, India.

  • Highly secure data centers

    Hosted in a professionally run data center in Chennai, India.

  • Hardware security

    Our servers sit in the data center's physically secured space.

  • Access restrictions & monitoring

    Server access is limited to authorised staff and monitored.

  • DoS and DDoS prevention

    Traffic controls help keep floods of requests from taking the service down.

  • 99.9% uptime

    A multi-node cluster targets 99.9% availability. Check live status at status.sagamail.in.

Email threat protection

Bad mail is stopped before it reaches your team.

Every incoming message is checked, and you decide what your domain allows.

  • Anti-spam

    Junk is filtered out so your inbox stays useful.

  • Anti-virus

    Attachments are scanned for viruses before delivery.

  • Malware and phishing protection

    Malicious attachments and phishing attempts are caught and kept away from your users.

  • Advanced threat protection

    Extra checks on suspicious senders, links and attachments.

  • Email policies

    Set rules for what is allowed, blocked or held for your domain.

  • Administrative controls

    Admins manage users, roles and mail settings from one place.

Encryption

Locked in storage. Locked in transit.

Your messages are encrypted while they move and while they rest.

  • Encryption at rest

    Stored mail is encrypted on our servers, and so are the backups.

  • Encryption in transit

    TLS protects mail between your devices, our servers and other mail servers.

  • S/MIME

    Sign and encrypt messages with a certificate for end-to-end protection.

  • OpenPGP

    Use OpenPGP keys to encrypt messages that only the recipient can open.

Secure access

Only the right people get in.

Strong sign-in for every user, and visibility for admins when something looks wrong.

  • Two-factor authentication

    A second step at sign-in, so a stolen password is not enough.

  • Single sign-on

    Your team signs in once with your organisation's identity, with fewer passwords to lose.

  • Unusual activity report

    Admins can review sign-ins that look out of the ordinary, such as a new location.

Email data privacy

Your mail is yours.

Plain commitments about who can see your data and what we do with it.

  • Your data belongs to you

    You can export your mail at any time.

  • We do not sell your data

    Your information is never sold to anyone.

  • Your mailbox is ad-free

    No ads in your inbox, and none built from your mail.

  • Your mail stays private

    Your messages are for you and the people you authorise.

  • Access to your data is restricted

    Only the staff who need it to run the service can reach it.

Backups and recovery

Backups we test, not just take.

Every customer is backed up the same way, in India, and we practise restoring from those backups every three months.

Backup schedule
Daily + hourly
Full backup, plus incrementals
Maximum data loss
1 hour
Recovery point (RPO)
Time to restore
4 hours
Recovery time (RTO)
Restore tests
Every 3 months
We prove it works
Primary · Chennai

Adani data center

Your live mailboxes run on a multi-node cluster.

Backup · Mumbai

AWS S3

Region ap-south-1, encrypted and kept apart from the primary servers.

Recovery

A new server

Rebuilt from backup and back in service within 4 hours.

Backup locationAWS S3, Mumbai (ap-south-1), in India
EncryptionBackups are encrypted
RetentionYour full backup is kept for as long as you are a SagaMail customer
If a server is lostUp to 4 hours to restore onto a new server
What backups do not cover

The mail cluster sits in one data center. It protects against server failures. If the whole Chennai site were lost, we would restore from the Mumbai backups within the recovery time above.

Security review

Need this in writing? Ask us.

We send the full infrastructure and security whitepaper, a security questionnaire and a data processing agreement on request.

security@sagamail.in