Where your mail is processed and stored
Your mail is processed on your own dedicated SpamDuster server, which runs on Linode and is not shared with any other customer. Copies of blocked mail, copies of delivered mail, and the mail logs are stored on that server only, for the periods you set. See Change how long mail and logs are kept.
What the server sends to us
Your SpamDuster server reports its health to us so we can monitor and update it: whether its services are running, disk and memory use, its software version, its certificate's expiry date and the number of domains it filters. It does not send domain names, addresses or messages in these reports.
What else leaves the server
To filter your mail, the server also:
- sends copies of messages to the SpamDuster Cloud Scan Engine, a scanning service we run, when malware scanning in the cloud is enabled;
- looks up the sending server's address and the domains in a message in public blocklists, through DNS;
- may open links in a suspicious message to check where they lead;
- downloads the SpamDuster PhishList and filter updates from us.
Who can see your mail
Your administrators see mail through the console, which requires a username and password. Every action in the console is recorded in the Audit log with the user and the time.
Encryption
The console is served over HTTPS only, with a certificate issued and renewed automatically. Your SpamDuster server supports TLS encryption when other mail servers send to it.
Updates and integrity
Only releases signed by us are installed on your server, and a failed update is rolled back automatically. See How SpamDuster updates itself.