Security

Infrastructure

TigerMail is hosted on enterprise-grade cloud infrastructure provided by OMC Technologies (Kamatera), which holds the following certifications:

  • SOC 2 Type II - Audited by Deloitte
  • ISO/IEC 27001:2022 - Information Security Management
  • ISO/IEC 27017:2015 - Cloud Security Controls

Data centers are located in Israel with 24/7 physical security, biometric access controls, and surveillance.

Encryption

  • Data at rest: AES-256 encryption
  • Data in transit: TLS 1.2+ for all connections
  • Passwords: One-way cryptographic hashing (bcrypt)

Authentication

  • Two-factor authentication (2FA) available for all accounts
  • Secure API key management with hashed storage
  • Role-based access control (RBAC)
  • Account lockout after failed login attempts

Email Authentication

  • DKIM: Automatic email signing for all domains
  • SPF: Sender Policy Framework configuration
  • DMARC: Domain-based authentication support

Privacy

  • GDPR compliant
  • Data deletion available on request
  • We do not sell your data

For more details, see our Privacy Policy.

Questions about security? security@tigermail.io