Security
Half of email management is deciding what should never have arrived.
Sortiq treats the inbox as an attack surface, because it is one. Screening, quarantine and isolation are not an add-on tier — they run on every message by default.
Controls
What is actually in place.
Threat intelligence on every message
Incoming mail is checked against global threat intelligence feeds as it arrives. Matches are quarantined before they reach the mailbox rather than flagged afterwards.
Quarantine you can interrogate
When a message is held, Sortiq records why. You can read the reasoning behind the decision, and release anything caught in error.
VIP protection
Communications with your highest-value contacts get stricter handling, so impersonation attempts against the people most worth impersonating are treated differently from ordinary mail.
Tenant isolation at the database
Each tenant’s data is separated by row-level security policies in the database itself, not only by checks in application code. A bug in a query cannot return another organisation’s email.
Role-based access control
Administrators, managers and users see different things. Permissions are enforced server-side on every request, not hidden in the interface.
Scoped Microsoft permissions
Access is granted through Microsoft’s own consent flow and limited to the Graph permissions Sortiq needs. Revoking consent in Entra ID cuts access immediately.
Automated backup and recovery
Backups run automatically with tested recovery, so a mistake or an incident does not become permanent data loss.
Hosted in Australia
The platform runs on infrastructure in Sydney. Your email content, classifications and audit history stay in that environment.
In the product
The security features, specifically.
- Threat Intelligence
- Real-time threat detection with integration to global security feeds
- Email Monitoring
- Comprehensive visibility into email traffic with detailed analytics
- VIP Protection
- Enhanced security protocols for high-value communications
- Backup & Recovery
- Automated backup systems with instant recovery capabilities
Honesty
What we do not claim.
Sortiq holds no formal security certification at this time. When that changes, this page will say so with the certificate reference — until then we would rather be plain about it than imply an audit that has not happened.