Security

Cyber Essentials

Cyber Essentials is the UK government-backed scheme covering five technical controls that prevent the most common cyber attacks. Sovereign Mail is built to meet them; certification is being obtained.

The five controls — and how we meet them

• Firewalls & boundary. A minimal exposed surface, with the control plane and mail-sending plane separated and reachable only over controlled paths.
• Secure configuration. Hardened services, no default credentials, secrets held in a secret store, least-privilege by default.
• User access control. Self-hosted authentication with scrypt password hashing, TOTP two-factor authentication, and scoped, revocable API keys.
• Malware protection. Slim container images with a controlled, audited dependency set.
• Security update management. Routine patching and dependency updates, with images rebuilt and redeployed regularly.

Status

Cyber Essentials certification is being obtained. The controls above describe our current practice.