Security
Half of email management is deciding what should never have arrived.
Sortiq treats the inbox as an attack surface, because it is one. Screening, quarantine and isolation are not an add-on tier — they run on every message by default.
What is actually in place.
Threat intelligence on every message
Incoming mail is checked against global threat intelligence feeds. A match is moved out of the inbox into quarantine, where you can look at it and release it — not left in place with a warning label.
Quarantine you can interrogate
When a message is held, Sortiq records why. You can read the reasoning behind the decision, and release anything caught in error.
VIP protection
Communications with your highest-value contacts get stricter handling, so impersonation attempts against the people most worth impersonating are treated differently from ordinary mail.
Tenant isolation at the database
Each tenant’s data is separated by row-level security policies in the database itself, not only by checks in application code. A bug in a query cannot return another organisation’s email.
Role-based access control
Administrators, managers and users see different things. Permissions are enforced server-side on every request, not hidden in the interface.
Scoped Microsoft permissions
Access is granted through Microsoft’s own consent flow and limited to the Graph permissions Sortiq needs. Revoking consent in Entra ID cuts access immediately.
Your Sortiq data is backed up
Your categories, rules, classifications and history are backed up automatically, with the restore tested. Your mail itself stays in Microsoft 365 — Sortiq is not a mailbox backup and does not claim to be one.
Hosted in Australia
Sortiq keeps the text of a message for 90 days on infrastructure in Sydney, so it can classify it, draft replies and re-check it against new threat intelligence. After that the text is deleted, nightly, and the subject, sender, date, classification and audit history remain. Classification and reply drafting send message content to an AI provider overseas — the privacy policy names the provider and the country.
The security features, specifically.
- Threat Intelligence
- Real-time threat detection with integration to global security feeds
- Email Monitoring
- Comprehensive visibility into email traffic with detailed analytics
- VIP Protection
- Enhanced security protocols for high-value communications
- Backup & Recovery
- Your Sortiq settings, rules and history are backed up automatically. Your mail stays in Microsoft 365.
What we do not claim.
Sortiq holds no formal security certification at this time. When that changes, this page will say so with the certificate reference — until then we would rather be plain about it than imply an audit that has not happened.