Transactional email that respects privacy.

The email backbone behind every Ciphera service. TLS 1.3 encryption, DKIM signing, and zero tracking — verification codes, security alerts, and notifications delivered in under 2 seconds.

TLS 1.3|DKIM / SPF / DMARC|No tracking|99.8% deliverability

Security-critical emails, delivered fast.

When someone tries to break into an account or a password needs resetting, speed matters. Relay delivers verification codes, security alerts, and lockout notifications in under 2 seconds — with TLS encryption from server to inbox.

  • Verification emails and password resets
  • Suspicious login alerts and account lockout notices
  • Billing alerts and uptime reports (Pulse)
From
Ciphera<noreply@id.ciphera.net>
Mar 9
Toyou@email.com
CipheraCiphera

Suspicious sign-in blocked

We blocked a suspicious sign-in attempt to your account.

Multiple failed sign-in attempts were detected. Your account has been temporarily locked until Mar 09, 2026 at 04:45 +0000.

If you didn't try to sign in, no action is needed. The attempt was blocked.

Built for privacy

Email Authentication

From:noreply@id.ciphera.net
Authenticated
TLS 1.3Encrypted in transit
DKIMSigned by id.ciphera.net
SPFAuthorized sender IP
DMARCPolicy: reject (strict)
Delivered in 1.2srelay.ciphera.net
All checks passed

Every email authenticated. Every time.

Relay signs every email with DKIM using per-domain key pairs, publishes strict SPF records, and enforces DMARC with a reject policy. The result: 99.8% inbox deliverability and zero spoofing.

  • TLS 1.3 encryption for all email transmission
  • Per-domain DKIM key pairs — never shared between services
  • SPF records authorize only the Relay server IP
  • DMARC policy set to reject — spoofed emails are blocked
  • Reverse DNS (PTR) configured for SMTP HELO compliance

Zero trackers. Zero pixels. Zero profiling.

Most email services embed tracking pixels, log open rates, and profile recipients across sites. Relay sends clean emails with no hidden payloads — no open tracking, no click tracking, no third-party analytics. Delivery metadata is retained for 30 days, then deleted.

  • No tracking pixels embedded in any email
  • No open or click rate monitoring
  • No recipient IP logging or profiling
  • No third-party analytics or data sharing
  • 30-day metadata retention, then permanent deletion

Typical email service

Tracking pixels embedded
Open & click tracking
IP address logged
Recipient profiling
Third-party analytics

10+ trackers per email

Ciphera Relay

No tracking pixels
No open tracking
No IP logging
No recipient profiling
No third-party sharing

Zero trackers

.env
# SMTP configuration
SMTP_HOST=relay.ciphera.net
SMTP_PORT=587
SMTP_USER=authnoreply
SMTP_FROM=noreply@id.ciphera.net

# Per-service sender domains
# Auth  → noreply@id.ciphera.net
# Pulse → noreply@pulse.ciphera.net
Standard SMTP AUTH — works with any language
STARTTLS

Standard SMTP. Any language.

No SDK, no proprietary API. Relay uses standard SMTP AUTH over port 587 with STARTTLS — it works with any language, framework, or email library. Each Ciphera service gets its own sender domain and DKIM key for clean provenance.

  • SMTP AUTH on port 587 (STARTTLS) or 465 (implicit TLS)
  • Per-service sender domains for email provenance
  • Works with Go, Node.js, Python, PHP — any SMTP client
  • Sub-2-second delivery for transactional emails
  • No proprietary SDK or API lock-in

How Ciphera Relay compares.

Most email services track opens, clicks, and recipient behavior. Relay just delivers the email.

Ciphera Relay

Ciphera Relay

Privacy-first email

  • No tracking pixels or open tracking
  • TLS 1.3 encryption
  • Per-domain DKIM signing
  • DMARC reject policy
  • Self-hosted (Swiss infrastructure)
  • Standard SMTP — no vendor lock-in
  • 30-day metadata retention only
  • Transactional only — no marketing
  • Sub-2-second delivery

Traditional Services

SendGrid, Postmark, SES

  • Tracking pixels by default
  • TLS encryption
  • Shared DKIM infrastructure
  • DMARC support
  • US cloud infrastructure
  • Proprietary API required
  • Indefinite data retention
  • Marketing + transactional
  • Fast delivery
Zurich, Switzerland

Data residency

Exoscale, Switzerland (CH-DK-2)

Data retention

30 days, then deleted

Compliance

GDPR, FADP, no tracking

Swiss infrastructure. Swiss privacy laws.

Relay runs on Exoscale in Switzerland, protected by the Swiss Federal Act on Data Protection (FADP). Email metadata is retained for 30 days under contract performance basis, then permanently deleted. No marketing emails, no behavioral data, no profiling.

  • Hosted on Exoscale, Zurich (CH-DK-2)
  • Stalwart Mail Server — open-source foundation
  • Admin UI bound to localhost only (SSH tunnel access)
  • Let's Encrypt TLS certificates with auto-renewal
  • Transactional only — marketing emails are never sent

Interested in Ciphera Relay?

Ciphera Relay is currently an internal service powering email delivery across the Ciphera ecosystem. Reach out if you're interested in the technology for your platform.