Everything SecureThread does, and what is next

Simple, visual and HTML editors

A plain text box that goes out in your branded note design, a visual MJML designer, or HTML source.

Starter template library

1,499 professionally written templates in 34 categories, on one email design system with a full dark mode.

Your brand on every starter

Starter templates that carry your own logo and accent instead of the default lockup.

Variables and personalization

Every name, date, amount and link is a variable, filled per recipient; company details come from settings.

Live desktop and phone preview

See the message at both widths as you write, in a sandboxed frame that runs no scripts.

Drafts, attachments and test sends

Autosaving drafts, attachments and a test send to yourself before the real one.

Email client compatibility check

A static check of the markup for known problems in mail clients, reported as no known issues, warn or fail.

Template governance

Shared templates with review, immutable versions, side-by-side comparison, rollback and publish gates.

AI drafting

Draft, rewrite, change tone, suggest subject lines and fill details. Suggestions are applied only by a person.

Bring your own AI key

Use your own Anthropic or OpenAI-compatible key, stored encrypted and bound to your workspace.

Attachment malware scanning

Attachments scanned by a ClamAV daemon before they are stored or sent, once configured.

Unified inbox

Read and answer mail from connected Google Workspace, Microsoft 365 and IMAP mailboxes, fetched on demand and never stored.

Reply, forward and organize

Reply, reply all, forward, star, archive, junk and trash, with remote images held back by policy.

Shared mailboxes

Share a mailbox with colleagues, choosing who may send, read, organize and reply.

Conversations, assignment and notes

Assign a conversation to a colleague and leave internal notes beside the thread.

Unified search

Search across messages, templates, contacts and more from one box or the command palette.

Inbound prompt-injection screening

Inbox mail that looks like an attempt to instruct an AI is held back from AI summaries and drafts.

Hosted agent inboxes

Addresses hosted by SecureThread where AI agents can take in mail directly.

Google Workspace and Microsoft 365

Connect mailboxes with OAuth and send through the Gmail API and Microsoft Graph.

31 SMTP mail and relay providers

Business, personal and transactional SMTP providers from one catalogue, plus servers an administrator approves.

Sending APIs

Amazon SES, SendGrid, Mailgun, Postmark and Resend over their HTTP APIs, with verified sender domains.

Reliable sending pipeline

Idempotent submission, a transactional outbox, retries with backoff and crash recovery.

Routing, failover and circuit breaker

Rules decide which mailbox sends what; unhealthy mailboxes are skipped and failing ones paused.

Sending domains and DNS verification

SPF, DKIM and DMARC records to publish, checked and watched for changes.

New-domain warm-up

Sends from a newly added domain are paced while it builds a sending history.

Google and Microsoft app verification

Verified OAuth apps, so any Google Workspace or Microsoft 365 organization can connect without extra steps.

Managed sending pool

Send through SecureThread’s own managed infrastructure instead of connecting a provider.

Dedicated IP addresses

Sending addresses reserved for one workspace’s mail.

Data residency

Choose the region where your workspace’s data is stored.

Campaigns

Import recipients, preview each personalized message, confirm explicitly and release at a measured pace.

Vetted bulk campaigns

Large campaigns are reviewed by SecureThread before their first send.

Scheduled and recurring sends

Send later in any time zone, or on a repeating timetable that stays correct across daylight saving.

One-click unsubscribe

Standard one-click unsubscribe headers on campaign mail, honored across the workspace.

Contacts and groups

Contacts and shared or personal groups to pick recipients from.

Approval bound to the exact draft

An approval covers the message that was reviewed; any change needs approving again. Quorum of one to three.

Risk-based approval for assistant sends

Rules decide which sends from AI assistants wait for a person and which may go on their own.

Slack, Teams and email announcements

Approval requests announced where your approvers already are; approving from inside Slack or Teams is next.

Approvals on phones

Decide from the Android and Windows apps, the mobile web, or an iPhone home-screen app.

Outbound personal data and secret guardrails

Messages carrying personal data or secrets are caught before they are queued.

Content policy

Abusive or explicit content is never sent; repeated attempts suspend the account until an administrator acts.

Governed MCP server

Connect Claude, ChatGPT, Cursor, VS Code or another MCP client over OAuth 2.1 with scopes you grant.

AI agent identities

Each agent has a name, an owner, a policy, its own limits and a pause switch.

Per-agent policy

What each agent may do, to whom and how often, enforced on every send.

Per-agent analytics and weekly report

What each agent asked to send and what happened, with a weekly summary for its owner.

Human approval handoff

Every send, schedule, workflow and large campaign an assistant asks for waits for a person.

Workflows

Versioned multi-step workflows: template, recipients, approval, wait, send and status checks, with run history.

Outbound event webhooks

Signed HTTPS calls to your systems when messages, approvals and campaigns change.

Public REST API

Templates, contacts, mailboxes, sending and message status on scoped workspace keys.

SDKs

Published client libraries for the REST API, starting with TypeScript.

Scoped API keys and IP allowlists

Keys limited to chosen scopes, address ranges and an expiry, revocable at once.

Zapier, Make, n8n and CRM integrations

Recipes built on the API and webhooks today; native connectors are on the way.

Usage page and usage API

What your workspace has used against its plan, in the app and over the API.

Sending analytics

Queues, acceptance, failures and rate-limit holds by provider, sender, template, category and origin, with CSV export.

Delivery events

Verified webhooks from SES, SendGrid, Mailgun, Postmark and Resend, deduplicated into one set of states.

Bounces, complaints, suppression and auto-pause

A suppression list, and sending paused on its own when bounce or complaint rates cross a threshold.

Optional open and click estimates

Off by default, switched on per organization, template or campaign, and always labelled as estimates.

Incidents and alerts

Recurring sending problems grouped into incidents with occurrence counts.

Public status page

Live checks, 90 days of history and incidents for every part of the service, with email updates.

Encrypted provider credentials

Tokens and SMTP passwords stored only as AES-256-GCM ciphertext, under a key kept outside the database.

Two-step sign-in

Password plus an authenticator code, with recovery codes; administrators can be required to use it.

Passkeys

Finish signing in with a passkey on your device instead of a code.

Google and Microsoft work-account sign-in

Sign in with a Google Workspace or Microsoft 365 account where an administrator turns it on.

SCIM provisioning

People created, updated and deactivated from Okta, Microsoft Entra ID or another identity provider.

SAML and OIDC single sign-on

Sign in through any SAML or OpenID Connect identity provider.

Sanitized HTML and sandboxed preview

All email HTML is sanitized on the server; previews run in a sandboxed frame with no scripts.

Network policy for SMTP

SMTP servers must be on the approved list and resolve to public addresses; certificates are always verified.

Abuse prevention and sandbox

New workspaces start in a sandbox, abuse reports have a public form, and test recipients confirm first.

SOC 2 Type I

An independent SOC 2 Type I report.

External penetration test

An independent penetration test of the service, with a summary for customers.

Users, invitations and roles

Invite people, assign Administrator, Employee or Viewer, and limit template categories per person.

Custom roles and permissions

Roles built from individual capabilities beyond the three built-in ones.

Quotas and an emergency send switch

Sending quotas per person and mailbox, and one switch that stops every send at once.

Append-only audit log

Every security-relevant action recorded with redacted metadata.

Signed audit export

Export the audit log as signed CSV or JSON for a date range, verifiable offline.

SIEM audit streaming

Stream audit events to Splunk, Datadog or another SIEM endpoint.

Archive, legal hold and eDiscovery

Hold mail from deletion and export it, signed, with its metadata.

Retention, export and deletion

Retention periods, a workspace export, and deletion of a workspace or a person’s data.

Workspace branding

Your logo for light and dark mode and a brand accent across the app and email.

Self-serve sign-up

Create a workspace from the website; each new workspace is reviewed before it sends widely.

Guided onboarding

A setup checklist from first mailbox to first approved send.

Plans, trials and add-ons

Monthly or yearly plans through Razorpay, free trials, offer codes and add-ons for seats, agents, domains and volume.

Plan limits enforced

Seats, daily volume, sending domains, agents and features enforced by the server, with usage shown.

Documentation and support

Public guides, in-app help requests and a support inbox.

Partner and reseller workspaces

Manage several client workspaces from one partner account.

Web app

The full product in any modern browser, installable as an app on desktop and Android.

Windows app

A desktop app that signs in through your browser and keeps itself up to date.

Android app

The full app with its own notifications, downloaded from SecureThread.

Push notifications

New mail, failed sends, reconnect requests and approvals waiting, on the devices you choose.

iPhone and iPad

Add to Home Screen for an app with notifications; a native iOS app is not available yet.