Trust

Security overview

Last updated: July 31, 2026 · Honest pre-launch status

No compliance seals we haven’t earned. What’s true today vs planned at open.

Today (this website + early access)

Today
HTTPS with HSTS; security headers (CSP, X-Content-Type-Options, frame protections).
Today
Early-access form: email (required), optional name/interest; honeypot anti-spam; stored for launch contact only.
Today
No self-serve document upload for production mailing on this Site yet.
Today
Phone and email to Broadstroke / mail ops staffed for human conversations.

Planned
Account authentication and prepaid meter funding before jobs produce.
Planned
Human approval before production on the AI-assisted setup path.
Planned
Transport encryption for portal traffic; access controls for production systems.
Planned
Document and recipient data handled in the production environment used by the Postalocity stack — details available under NDA / security questionnaire for qualified buyers.
Planned
MCP for agents: account-tied access; no anonymous free mailing; standalone public API keys planned later.

Not claimed
Live SOC 2 Type II (or other) certification for USMail.ai unless we publish a real report.
Not claimed
HIPAA BAA availability until a signed program exists and is offered in writing.
Not claimed
That self-serve mail production is live today.

Procurement and security teams: call 888-667-5322 or 316-247-5300, or email info@usmail.ai. Ask for mail ops / security questionnaire support.