Ciphera Relay
Transactional email that respects privacy.
The email backbone behind every Ciphera service. TLS 1.3 encryption, DKIM signing, and zero tracking — verification codes, security alerts, and notifications delivered in under 2 seconds.
- Deliverability
- 99.8%
- Send latency
- < 2 s
01 · Email
Security-critical emails, delivered fast.
When someone tries to break into an account or a password needs resetting, speed matters. Relay delivers verification codes, security alerts, and lockout notifications in under 2 seconds — with TLS encryption from server to inbox.
- Verification emails and password resets
- Suspicious login alerts and account lockout notices
- Billing alerts and uptime reports (Pulse)
CipheraSuspicious sign-in blocked
We blocked a suspicious sign-in attempt to your account.
Multiple failed sign-in attempts were detected. Your account has been temporarily locked until Mar 09, 2026 at 04:45 +0000.
If you didn't try to sign in, no action is needed. The attempt was blocked.
Built for privacy
02 · Features
Everything in Ciphera Relay.
Email authentication
Per-domain DKIM keys, strict SPF, and a DMARC reject policy over TLS 1.3 — 99.8% inbox deliverability and zero spoofing, with reverse-DNS configured for HELO compliance.
No tracking
No tracking pixels, no open or click monitoring, no recipient IP profiling, no third-party analytics — delivery metadata is retained 30 days, then permanently deleted.
# SMTP configuration
SMTP_HOST=relay.ciphera.net
SMTP_PORT=587
SMTP_USER=authnoreply
SMTP_FROM=noreply@id.ciphera.net
# Per-service sender domains
# Auth → noreply@id.ciphera.net
# Pulse → noreply@pulse.ciphera.net03 · SMTP
Standard SMTP. Any language.
No SDK, no proprietary API. Relay uses standard SMTP AUTH over port 587 with STARTTLS — it works with any language, framework, or email library. Each Ciphera service gets its own sender domain and DKIM key for clean provenance.
- SMTP AUTH on port 587 (STARTTLS) or 465 (implicit TLS)
- Per-service sender domains for email provenance
- Works with Go, Node.js, Python, PHP — any SMTP client
- Sub-2-second delivery for transactional emails
- No proprietary SDK or API lock-in
Data residency
Exoscale, Switzerland (CH-DK-2)
Data retention
30 days, then deleted
Compliance
GDPR, FADP, no tracking
04 · Swiss privacy
Swiss infrastructure. Swiss privacy laws.
Relay runs on Exoscale in Switzerland, protected by the Swiss Federal Act on Data Protection (FADP). Email metadata is retained for 30 days under contract performance basis, then permanently deleted. No marketing emails, no behavioral data, no profiling.
- Hosted on Exoscale, Zurich (CH-DK-2)
- Stalwart Mail Server — open-source foundation
- Admin UI bound to localhost only (SSH tunnel access)
- Let's Encrypt TLS certificates with auto-renewal
- Transactional only — marketing emails are never sent
05 · Compare
How Ciphera Relay compares.
Most email services track opens, clicks, and recipient behavior. Relay just delivers the email.
Ciphera Relay
Privacy-first email
- No tracking pixels or open tracking
- TLS 1.3 encryption
- Per-domain DKIM signing
- DMARC reject policy
- Self-hosted (Swiss infrastructure)
- Standard SMTP — no vendor lock-in
- 30-day metadata retention only
- Transactional only — no marketing
- Sub-2-second delivery
Traditional Services
SendGrid, Postmark, SES
- Tracking pixels by default
- TLS encryption
- Shared DKIM infrastructure
- DMARC support
- US cloud infrastructure
- Proprietary API required
- Indefinite data retention
- Marketing + transactional
- Fast delivery
06 · Get started
Interested in Ciphera Relay?
Ciphera Relay is currently an internal service powering email delivery across the Ciphera ecosystem. Reach out if you're interested in the technology for your platform.