# About InboxGuard

InboxGuard is a continuous email deliverability monitoring service operated by
**movaMedia, Inc.** It exists for one reason: engineering teams that ship
transactional and lifecycle email should be able to *know* — not guess — that
their mail is reaching the inbox.

## What we do

InboxGuard watches every layer that mailbox providers (Gmail, Yahoo, Microsoft,
Apple) evaluate when they decide whether to deliver, spam-folder, or reject your
mail:

- **Authentication** — SPF (with the RFC 7208 10-DNS-lookup budget), DKIM key
  hygiene, and DMARC policy and alignment.
- **Transport security** — MTA-STS, TLS-RPT, and MX TLS certificate health.
- **Brand identity** — BIMI logo and VMC certificate-chain validation.
- **Reputation** — 13 DNS-based blocklists queried from the authoritative side,
  so we don't report the false positives that public resolvers get.
- **DMARC aggregate reports** — a hosted RUA mailbox per workspace, parsed into
  per-source-IP dashboards.
- **Google Postmaster Tools** — Gmail spam-rate and reputation via OAuth.

When a domain's posture changes, we alert you instantly over email, Slack,
webhook, or PagerDuty — and offer one-click DNS remediation through connected
registrars.

## Why we built it

Most "deliverability checkers" are one-shot, browser-based tools that query
blocklists through public DNS resolvers — which mailbox providers rate-limit and
which return misleading results. InboxGuard is continuous, alert-driven, and
queries from the authoritative side, so the answers are trustworthy enough to
page on. We fixed the well-known "liar" checks (fake PTR matching, random
reputation fallbacks, blind trust of forged authentication headers) that plague
older tools.

## The company

InboxGuard is built and operated by movaMedia, Inc. (https://movamedia.com), a
small software company. We are based in the United States and run InboxGuard on
AWS in the us-east-1 region.

## Team & expertise

InboxGuard is built by a small team of engineers who ship transactional and
lifecycle email at scale and got tired of guessing about deliverability. Our
guides are written and reviewed by the InboxGuard deliverability team — the
same people who implement the SPF 10-lookup budget meter, the DMARC aggregate
ingest pipeline, and the authoritative-side blocklist checks. We follow the
published standards directly (RFC 7208 SPF, RFC 6376 DKIM, RFC 7489 DMARC,
RFC 8461 MTA-STS, RFC 8460 TLS-RPT, and the BIMI/VMC specifications) rather
than reverse-engineering other tools.

## Security & data handling

InboxGuard reads public DNS and the DMARC aggregate reports you route to your
hosted RUA mailbox. We do not read the contents of your email. Data is encrypted
in transit and at rest. For our full privacy practices see
https://inboxguard.io/privacy and our DPA at https://inboxguard.io/dpa.

## Contact

- Support and sales: support@inboxguard.io
- Web: https://inboxguard.io
- Contact form: https://inboxguard.io/contact
- Status: https://inboxguard.io/status.json

For data handling and privacy, see https://inboxguard.io/privacy. For terms,
see https://inboxguard.io/terms.