Source
Security / trust page — Postmark
Checked for Postmark on 1 Nov 2026
- Page
- https://postmarkapp.com/security
- Checked
- 1 Nov 2026, 09:52 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:a11cd0deaec239c9054a4a488b54fcff43549e8156d223fd6e37c77dfed82c06
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Two factor authentication Report an error
“Add an extra layer of security to your account with two-factor authentication (2FA). You can use a range of popular 2FA apps (Google Authenticator, 1Password, and Authy) or get codes sent to your mobile phone by SMS. Printable backup codes give you emergency access to your account if your device is lost.”
-
User permissions Report an error
“Postmark gives you detailed user permissions so you can control who has access to each of your servers.”
-
Tls outbound Report an error
“Out of the box, Postmark supports opportunistic TLS for all outbound email, ensuring messages are encrypted in transit to remote mail servers and ISPs who support TLS. Gmail lists us as delivering 100% of our email via TLS.”
-
Tls API smtp endpoints Report an error
“Combining this with full HTTPS and TLS support on our SMTP and API endpoints provides safe passage for messages flowing through Postmark.”
-
Data center Report an error
“We host our servers in one of the most impressive data centers in the country, a Type 2 SSAE 16 SOC 1 accredited facility.”
-
Security audits Report an error
“our systems are regularly tested using both automated systems and manual audits from respected security firms”
-
Pci stripe Report an error
“We partner with Stripe to manage payments on Postmark. Stripe is certified as a PCI Level 1 Service Provider. Postmark does not have access to customers’ credit card data at all.”
-
GDPR Report an error
“our compliance, data protection, and information security teams all worked to prepare our services for GDPR. We reviewed our data processing activities, and made any changes that were needed in advance of the GDPR effective date.”
-
Owner Report an error
“© ActiveCampaign, LLC, 2026.”
Scores citing this record
- The Agency Lead Message logs, events & webhooks
- The Agency Lead Reliability, accounts & support
- The Shop Operator Deliverability & sender reputation
- The Shop Operator Message logs, events & webhooks
- The SaaS Developer Message logs, events & webhooks
- The Skeptic Deliverability & sender reputation