Sender Registry
Trust & methodology.
Sender Registry is an intelligence and decision support platform, not a magic guarantee that an email is safe. We show our working on every assessment: what we found, how sure we are of it, whether anyone else in the network has seen the same thing. Here is exactly how that works, what we will never claim, plus what to do if you think we have a record wrong.
Three questions, never one score.
A blunt "safe or dangerous" verdict hides more than it reveals. We keep three answers apart, so you see not only what we think, but how much weight to put on it.
How dangerous the message looks, on a scale of 0 to 100, weighed from the evidence inside it. Higher means more reason for caution.
How sure we are of that Risk figure. Thin or unusual evidence keeps Confidence low even when Risk looks high, so a bold number is never mistaken for a settled one.
How much of the wider network has independently seen the same thing, from Unseen through to Verified. A sender nobody has reported before sits at Unseen. Unseen is never the same as safe.
This does not change the risk score.
Your answer. We never overrule it.
A second question: what kind of email is this?
Danger is only half the story. A newsletter you forgot you signed up for is not dangerous, it is just unwanted. So beside the risk verdict, every email gets a second, completely separate read: what kind of mail it is, from a personal note to bulk marketing to suspected spam. This never touches the risk score. The two answers stay independent on purpose.
You get the final say on whether you actually wanted it. That answer is yours: we learn from it, we never overrule it. Where it is safe, we can even help you unsubscribe from genuine bulk senders.
What we actually look at.
Every assessment weighs a wide spread of evidence, never a single signal. Some of it is technical, some of it is about intent. We keep the precise recipe to ourselves, on purpose. What matters to you is the breadth of it.
Where a signal is weak or a message is genuinely new, we say so rather than guess. A quiet history is reported as limited intelligence, never as a clean bill of health.
The network gets sharper over time.
The real strength is not one email in isolation. When a new attack pattern surfaces, we match it back against everything the network has already seen, so a campaign spotted today can suddenly explain reports from weeks ago. A sender that separate organisations flag for the same behaviour earns a firmer reputation than any lone report could give it.
It means the sooner you take part, the more the network already knows on your behalf. Your reports help protect everyone else. Theirs help protect you.
What we will never do.
Some promises matter more than any feature. These are the lines we hold, every time.
We will never tell you an email is guaranteed safe.
We will never imply a person reviewed your email when the work was automated.
We will never treat 'never seen before' as 'safe'.
We will never quietly rewrite an assessment later. A judgement about a specific email stands as it was made, even as the wider network moves on around it.
We will never change your own account of your inbox. We can revise our judgement. Yours is the ground truth we measure against.
Whenever we act on your behalf toward anyone else, you get both an in app record plus a confirmation email, so nothing ever happens silently.
Our systems read a suspicious email as evidence, never as instructions. They cannot act on your accounts.
Privacy & retention.
Once an assessment is complete, we strip identifying personal information from the submitted email wherever we reasonably can. We are not here to build a store of your private correspondence. Only anonymised technical threat intelligence is kept, under a defined retention policy rather than forever by default.
Your reports stay private to your organisation. What the network shares is only ever aggregate, at the level of evidence: a domain was seen, a campaign exists. One organisation's private report content is never shown to another.
To read our full privacy policy, please click here.
Think we have got something wrong?
We would rather hear it than not. Records can be disputed. If a correction is warranted we make it, then note why. Nothing in the history is quietly erased, whatever the outcome.
If you believe a sender or domain connected to you has been judged unfairly, look up the record and use Dispute this record on that page. That opens a case we track and reply to. If you cannot find it, or the problem is something else, get in touch and we will look into it properly.