Your server, your data
Mail, calendar, contacts and files live on the server you control. There is no shared cloud of other companies' mail.
Security
Protection you can check.
We describe what the system does and what we have tested. Where something is still waiting for an outside review, we say so.
Encrypted connections
Webmail, IMAP and mail submission use TLS from the first byte. Servers talk to each other with TLS whenever the other side offers it.
Not an open relay
The public gateway only accepts mail for domains it is set up for, refuses everything else, and limits how fast any one address can connect.
Sender checks
Incoming mail is checked with SPF, DKIM and DMARC and the result is written into the message so you can see it.
Secrets stay secret
Generated passwords and keys are kept in private files and are searched for in logs after every install test: none have been found.
Access ends when you say so
Sharing is checked on every request. Withdraw a share and the other person is refused at once.
Honest status
What is verified, and what is waiting.
| Area | Status |
|---|---|
| Install, backup, restore, upgrade, rollback on a clean Ubuntu 24.04 machine | Tested |
| Mail in both directions with Gmail, Outlook and Zoho (controlled tests) | Tested; placement differs by provider and cannot be guaranteed |
| Independent licence and code-origin review | Pending: an outside reviewer has not signed |
| Independent security review | Pending |
| Signed desktop apps and Windows installer package | Pending: certificates needed |
Reporting a vulnerability: write to support@bidua.in and describe what you saw on a running system.