Who processes data for us

Dedicated server in Helsinki, Finland, where the service and its database run. DPA in the customer account, processing only in the EU/EEA.

A server that Bröderna Saxin AB runs itself in Sweden holds attachments, original messages and files of PineMail and PineKeep, and the backups of the database, all encrypted before they leave Helsinki and sent over an encrypted connection. The keys stay in Helsinki. No other company processes data on it.

DNS for pinemail.app. Web traffic does not pass Cloudflare; TLS ends on the Helsinki server.

Cloudflare is a US company operating a global network, so traffic may be handled outside the EU/EEA, and US law can require it to hand over data it processes. Standard contractual clauses and the EU-US Data Privacy Framework apply.

Relay for outbound mail, including security mail such as password resets, in eu-north-1 (Stockholm). SES processes each message in readable form while it sends it; PineMail uses no SES feature that archives messages. Bounce and complaint notices return through the same region. AWS EMEA SARL is part of Amazon.com, Inc., a US company, and US law can require it to hand over data it processes. AWS DPA in the customer account, standard contractual clauses and the EU-US Data Privacy Framework.

The spam filter on the Helsinki server looks up the sending server's IP address and domain names found in incoming messages in public DNS blocklists: Mailspike, SpamEatingMonkey, DNSWL, VirusFree, blocklist.de, SURBL, URIBL and the Rspamd project. They receive these look-ups and nothing else: no content, no addresses.

Card and subscription data. Not active until administration turns billing on and keys are present. This page and the purchase terms will be updated then.