Trust Center

Business identity

The legal operator is Matheswaran Rajasekar, sole proprietor trading as AppCradle. The business address is 27 A, Abimeena Apartments, Panjukara Street, Koranadu, Mayiladuthurai, Tamil Nadu 609001, India.

AppCradle is not represented as a Private Limited Company, LLC, or other separately incorporated entity. Contracts identify the proprietor as the legal party.

Udyam MSME registration

AppCradle is registered through the Government of India's Udyam Registration system and is classified as a Micro enterprise for classification year 2026-27. The Udyam registration date is August 9, 2026.

Udyam establishes an MSME registration and classification. It is not a cybersecurity, privacy, GDPR, quality-management, or product certification, and it does not create a separate incorporated entity or limited liability.

Security controls

• Encrypted HTTPS connections, provider-managed encryption at rest, authenticated APIs, and account-scoped data access.
• Managed edge protection, restricted service bindings, environment-specific configuration, dependency checks, and release testing.
• Operational logging designed to avoid email bodies, credentials, and unnecessary recipient data.
• Recipient-level preview and review before a customer authorizes sending.
• Optional analytics controlled through Privacy choices.

Email safety controls

• Verified sender domains with DKIM, custom return-path SPF, and DMARC checks before campaign sending.
• Permission attestation, a physical postal address, visible unsubscribe, one-click unsubscribe headers, and suppression enforcement.
• Bounce and complaint processing, workspace limits, reputation checks, and automatic pausing for unsafe signals.
• Permission-based sending requirements are incorporated directly into the Terms of Service.

Subprocessors

AttuneMail uses the providers below to process data on our behalf. The providers involved depend on the features a customer uses. We review material providers for security and data-protection commitments and update this list when the production service changes.

• Cloudflare - application hosting, edge networking, database, security, AI services, and operational infrastructure; global network and configured service locations.
• Supabase - user authentication and identity services; processing region depends on the configured project.
• Amazon Web Services - outbound email delivery, domain authentication, delivery events, and suppression controls; configured AWS region.
• Dodo Payments - checkout, payment or merchant-of-record functions, subscription status, invoices, and tax handling; global operations.
• Google Analytics and Microsoft Clarity - optional website or product analytics, only when configured and after analytics consent.

Assurance status

AttuneMail does not currently claim SOC 2, ISO 27001, independent GDPR certification, CSA STAR listing, Cyber Essentials, or another third-party security certification. Frameworks and self-assessment tools may guide our internal controls, but they are not presented as certifications.

We publish a certification or assessment claim only after its scope, date, evidence, and independent status can be verified. Udyam registration is a government enterprise registration and classification, not a security or privacy assessment.

Responsible disclosure and incidents

If you believe you found a security issue, email security@attunemail.com with the affected endpoint, reproducible steps, and potential impact. Do not access another person's data, disrupt the service, or use social engineering. We will acknowledge and investigate good-faith reports.

We investigate confirmed incidents, contain affected systems, preserve relevant evidence, remediate root causes, and notify affected customers or authorities when required.

Contact

Security reports: security@attunemail.com. Privacy requests and subprocessor questions: privacy@attunemail.com. Legal notices: legal@attunemail.com. Abuse reports: abuse@attunemail.com.