Security
Infrastructure
TigerMail is hosted on enterprise-grade cloud infrastructure provided by OMC Technologies (Kamatera), which holds the following certifications:
- SOC 2 Type II - Audited by Deloitte
- ISO/IEC 27001:2022 - Information Security Management
- ISO/IEC 27017:2015 - Cloud Security Controls
Data centers are located in Israel with 24/7 physical security, biometric access controls, and surveillance.
Encryption
- Data at rest: AES-256 encryption
- Data in transit: TLS 1.2+ for all connections
- Passwords: One-way cryptographic hashing (bcrypt)
Authentication
- Two-factor authentication (2FA) available for all accounts
- Secure API key management with hashed storage
- Role-based access control (RBAC)
- Account lockout after failed login attempts
Email Authentication
- DKIM: Automatic email signing for all domains
- SPF: Sender Policy Framework configuration
- DMARC: Domain-based authentication support
Privacy
- GDPR compliant
- Data deletion available on request
- We do not sell your data
For more details, see our Privacy Policy.
Questions about security? security@tigermail.io