Trust
Security overview
Accounts, jobs, and lists are used to produce the mail you approve. No invented SOC 2 or HIPAA seals. Last updated September 9, 2026.
Broadstroke, Inc. operates USMail.ai. Production mail runs through app.usmail.ai. This marketing site is www.usmail.ai. No compliance seals we have not earned.
Live today
- LiveAccount authentication and a prepaid meter. Jobs do not produce until you fund the meter and approve the job.
- LiveHuman approval before production. You review on-screen proofs. We do not routinely screen your content.
- LiveCard numbers are handled by the payment gateway. USMail never stores card numbers.
- LiveJob files and recipient lists are used only to produce your mail. They remain your property. Data is purged after the window you select or our stated purge period.
- LiveHTTPS on www and the app. This site sends HSTS, CSP, X-Content-Type-Options, and frame protections. The app is not embedded here — it refuses framing.
- LivePassword-protected accounts. We will never ask for your password in an unsolicited call or email. Sign out when you finish, especially on a shared computer.
- LiveUpload through the app, not email. Restrict portal access to people who should send mail. Remove access when someone leaves.
- LiveMCP is account-tied and billed on the same meter. No anonymous mailing. Standalone public API keys are not available yet.
- Live
How we handle your data
We act as a conduit for print and mail. Lists and documents are processed to produce the job you approved — not for other marketing. We may disclose information to USPS or law enforcement when required or as described in the Privacy Policy and Terms of Use.
Production is operated by Broadstroke. Deeper environment detail is available under NDA / security questionnaire for qualified buyers.
What stays on the job
You upload documents and lists. AI proposes setup. A human on the app approves. We print, insert, apply postage, and deliver the pieces to USPS. We do not routinely screen your content. Approving a job is not an endorsement of the words.
Jobs are stored by default for 30 days at no extra storage charge. Restrict portal access to people who should send mail. Remove access when someone leaves. Features →
MCP is the same account and the same meter. No anonymous mailing. Agents prepare jobs. They do not approve. They do not run card deposits. MCP docs →
What we will not claim
- Not claimedLive SOC 2 Type II (or other) certification for USMail.ai unless we publish a real report.
- Not claimedHIPAA BAA availability until a signed program exists and is offered in writing.
- Not claimedThat we read every mail piece, or that approving a job means we endorse the content.
- Not claimedThat USMail.ai is the U.S. Postal Service, or that we control USPS delivery after handoff.
Security FAQ
Does USMail.ai have SOC 2?
We do not publish a SOC 2 Type II report for USMail.ai on this page. Do not assume a seal from this copy. Qualified buyers can request a security questionnaire under NDA.
Do you sign a HIPAA BAA?
We do not publish a HIPAA BAA on this page. Do not assume a BAA from this copy. If your process needs a signed BAA, ask mail ops in writing.
Who can approve a mail job?
A human on the app. Agents can prepare a job. They cannot approve production mail or run card deposits. Approve debits the prepaid meter.
How long are jobs stored?
Jobs are stored by default for 30 days at no extra storage charge. Files and lists are used to produce the job you approved. Features →
Request a security conversation
Procurement and security teams: call 888-667-5322 or 316-247-5322, or email info@usmail.ai. Ask for mail ops / security questionnaire support.