Skip to content

Confidential correspondence, a secure mailbox.

Two-step verification for client correspondence, warnings against fake invoices and wire transfer requests, and a platform team that can't access message content.

Incoming mail checkSample content
Supply team, orders@supplier.exampleOctober quoteTo inbox
  • SPF, DKIM, DMARC passed
  • Virus scan clean
  • Low spam score
Accounts, accounts@at0lye.exampleUrgent: wire transfer requestQuarantined
  • DMARC failed
  • Look-alike domain: at0lye.example
  • Outside sender with an internal team name

Suspicious mail goes to quarantine or Junk according to your organization's policy; an admin can release it.

What your office needs from email.

A fake wire transfer request or a compromised account is the most expensive email mistake an office can make.

  • Against impersonation

    Look-alike domains, outside senders using an internal name and mismatched reply addresses are flagged; mail from outside your organization carries an external sender banner.

  • Against account takeover

    Require two-step verification for everyone. Mail apps connect with a separate app password, and sign-ins from a new device trigger an alert.

  • Confidentiality

    The platform team doesn't read message content. Under KVKK, you are the data controller and Mühür Mail is the data processor; the relationship is set out in the data processing agreement.

Frequently asked questions

How can I be sure who sent a message?

Sender verification appears in one line at the top of the reading pane: "Verified" or "Sender not verified". You also see a warning when a look-alike domain or impersonation is suspected. Still confirm payment and wire transfer requests by phone.

Can I require two-step verification for my staff?

Yes. Once you turn it on in your organization's policy, anyone without two-step verification must set it up before continuing to the dashboard and webmail; IMAP and SMTP work only with app passwords.

Keep your office's correspondence safe.

Create your account and require two-step verification from day one.