Snapshot 4105

Document
Security page
URL
https://elasticemail.com/resources/usage-policies/security
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
141866 bytes
SHA-256 (raw)
4aaa1eb7e8853ae1de0b4f6a837fb23078fab77d71fcbe4b7eade1157b1b3f39
SHA-256 (normalized text)
f1460af359731cf8c231ca69cb258de0e2d95330f62e9c6bbdfcf1a096a1e879

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Products
Email Sending
Email Marketing
Grow your audience, send newsletters, and monetize your content with ease.
Email API
Integrate your solutions with our powerful email delivery engine.
Customer Service & Chat
Inbox
From internal communication to external customer support.
Send
Email Campaigns
SMTP Service
Email API
Email Automations
Paid Newsletters
Build
Email Designer
Landing Pages
Signup Forms
Email Templates
Checkouts
Manage
Email Verification
Email Logs
Subaccounts
Users
Learn more
Newsletters
Transactional Emails
Email Marketing
Integrations
Send
SMTP Service
Email API
Build
Webhooks
Inbound Routing
Email Templates
Manage
Suppressions
Email Logs
Subaccounts
Users
Learn more
Transactional Emails
Integrations
Communicate
Help Desk
Live Chat
Team Chat
Pricing
Email Sending
Email Marketing Pricing
For those who want to send effective email marketing campaigns.
Email API Pricing
For those who want to integrate email into the app or website.
Customer Service & Chat
Inbox Pricing
From internal communication to external customer support.
Resources
Getting Started
Take the first steps of your Elastic Email journey.
Integrations
Speed up your integration thanks to our collection of plugins.
Blog
Read the latest news, as well as tips from the email marketing world.
Help Center
Learn more about our product from
our Customer Support Team.
Developers
API Documentation
Make the most out of Elastic Email with our RESTful API.
API Libraries
Speed up your integration with libraries for various languages.
MCP Documentation
Turn your favourite AI tool into a personal email agent.
Agents
Integrate AI agents through our tools or no-code platforms.
Angular
Axios
Bash
C#
Go
Java
JavaScript
Perl
PHP
Python
Ruby
Rust
Tools
MCP Server API Skills
AI App Builders
Lovable Bolt v0 Replit
Try for Free
Products
Email Sending
Email Marketing
Features
Send
Email Campaigns
SMTP Service
Email API
Email Automations
Paid Newsletters
Build
Email Designer
Landing Pages
Signup Forms
Email Templates
Checkouts
Manage
Email Verification
Email Logs
Subaccounts
Users
Learn more
Newsletters
Transactional Emails
Email Marketing
Integrations
Email API
Features
Send
SMTP Service
Email API
Build
Webhooks
Inbound Routing
Email Templates
Manage
Suppressions
Email Logs
Subaccounts
Users
Learn more
Transactional Emails
Integrations
Customer Service & Chat
Inbox
Features
Communicate
Help Desk
Live Chat
Team Chat
Pricing
Email Sending
Email Marketing Pricing
Email API Pricing
Customer Service & Chat
Inbox Pricing
Resources
Getting Started
Integrations
Blog
Help Center
Developers
API Documentation
API Libraries
MCP Documentation
Libraries
Angular
Axios
Bash
C#
Go
Java
JavaScript
Perl
PHP
Python
Ruby
Rust
Try for Free
Privacy & Terms
Data Processing Addendum Security Cookies Terms Of Use Anti-Spam Policy Acceptable Use Policy Privacy Policy
Table of Content
Lasted Updated: October 17, 2019.
1. General
At Elastic Email, we take the security of your privacy and data extremely seriously and we want to be as transparent as possible with how we conduct business around security measures. Not every detail is shared of course, as we do not want our transparency to lead to exploitation of our system and your data.
2. Application and API
- Elastic Email account passwords are hashed when they are stored. A hash is one-way encryption so your passwords cannot be viewed by anyone (including our administrators) and can only be reset.
- Login log with details such as user agent, browser, IP.
- Event logging including password changes, password forgets, account email changes, payments, API Key changes/additions/deletions, exports and more.
- We support standard SSL encryption for all application and API access.
- We support standard SSL and TLS encryption for all SMTP traffic.
- API Keys require account login and password to obtain.
- Access levels are defined for both our accounts, users and our administrators. We support a granular access model where only the required access needed can be granted for all stakeholders.
- Changes of Account information such as email and password require the Account holder confirmation by email confirmation.
- We have sophisticated algorithms protecting your account from malicious content as well as 24/7 human monitoring of your mail looking for inappropriate content or unusual activity.
3. Data Redundancy
- Databases have full real-time replication configured.
- Storage redundancy is used to increase the reliability of data storage.
- Backups are done regularly and rotated for special circumstance restore.
- Multi-tenancy is realized by using separate databases and data logic to prevent overlap or corruption.
4. Training and Protocols
Elastic Email is dedicated to providing our staff with all the necessary tools and education to help keep your data safe. Elastic Email, being a Canadian Corporation, has very high standards with regards to privacy. Please see our Privacy Policy for more information.
Our staff is provided training on our security policies and personal information privacy policies. Yearly, our staff is required to:
- Take employee GDPR training and obtain a certificate of the training.
- Review our internal policies in areas such as security and personal information privacy.
- Sign a Non Disclosure Agreement highlighting their responsibilities in protecting your data.
All employees and contractors go through a rigid employment reference check and criminal record check where applicable before starting with Elastic Email.
5. Data Centers
Elastic Email hosts your data at several data centers in the EU, the United States, and Canada. In all our data centers, access is strictly monitored. Some of the security measures are outlined below that our hosts adhere to:
- Perimeter’s secured with barbed wire fences.
- Constant video surveillance and motion detection sensor monitoring.
- Activity both within and outside of the data centers is monitored and recorded on secure servers, with surveillance teams working on site, 24/7.
- Staff member receives an RFID name badge, which is also used to restrict their access. Employees must hand in their badges for verification before passing through the security doors.
- Employee access rights are reassessed regularly, according to their remit.
- The server rooms have an even higher level of protection, as only authorized personnel can gain entry.
- DDOS mitigation is in place.
6. Payment Processing
Elastic Email uses two payment processing services Stripe and Paypal who follow industry standards in protecting your personal data. Elastic Email does not store your credit card information. We keep only transaction fingerprints to help with fraud and abuse.
7. Email and Website Phishing
Elastic Email will never send a regular email that asks you to provide, confirm or verify personal, login or account information. Also, Elastic Email will never include a link to an online service in a regular email and ask you to sign in using that link. If you receive an email of this type, that appears to be from Elastic Email, please forward it to phishing@elasticemail.com and then delete it.
If you believe your confidential information may have been stolen or obtained by a fraudulent party either online or through any other means, contact us immediately at support@elasticemail.com.
To report fake websites impersonating Elastic Email websites, send an email to phishing@elasticemail.com with the subject "Fake Elastic Email website." Remember to copy the full URL (website address) into the body of the email.
Report fake websites impersonating Elastic Email websites to Google and Microsoft - link https://safebrowsing.google.com/safebrowsing/report_phish/?hl=en and https://www.microsoft.com/en-us/wdsi/support/report-unsafe-site
If you like this article, share it with friends:
Facebook
Twitter
Linkedin
Email sending
Email Marketing
Email API
Email Marketing
Grow your audience, send newsletters, and monetize content with professional tools
Email campaigns
Growing your audience
Contact list management
Email API
Integrate your software and send emails via a RESTful API or SMTP relay.
API Keys & SMTP relay
Suppressions
Inboud Email Routing
Log in
Customer Service & Chat
Inbox
Inbox
Communicate with colleagues and clients through one integrated platform.
Help desk
Team chat
Live chat
Log in