Authenticated identity
Checks whether the sending domain and message can prove who they came from.
A personal communication boundary for your domain
Decide what reaches you before it becomes inbox work.
TrustSender receives email for your custom domain and evaluates each message using authenticated sender identity, relationship history, and policies you describe in ordinary language.
Working public prototype with live SMTP decisions and a customer Activity view.
Delivery decisionLive evidence
Northwind Partnersproposal@northwind.example
ReviewWhy TrustSender paused delivery
The domain identity is valid, but this sender is new and the message matches your “review unexpected proposals” policy.
Domain identityVerified
RelationshipNew sender
PolicyMatched
Next actionYour choice
Email admission controlled by you—not just a spam score.
Permission, not probability
A safe message can still be unwanted.
Traditional filters identify abuse. TrustSender adds the question only you can answer: does this communication belong in your space?
A traditional filter asks
- Does this resemble abuse?
- Is the sender technically authenticated?
- Inbox, junk, or quarantine?
TrustSender also asks
- Do you want this communication?
- Is the sender known, expected, or blocked?
- Should it enter your communication space at all?
Policies in your language
Your policy should sound like you.
Describe the boundary without learning mail-server rules. Policies can refer to people, organizations, relationships, subjects, meaning, or receiving addresses.
These examples show the intended TrustSender experience as the policy model continues to develop.
“Always allow mail from my children and put it first.”
“Reject sales outreach about website redesigns.”
“Allow my dentist’s office, even when a new staff member writes.”
“Defer uncertain messages instead of making a permanent decision.”
Decisions built from evidence
Trust is more than a From address.
TrustSender translates transport evidence, history, and policy into reasons a person can understand and correct.
Relationship history
Uses prior communication and your corrections to understand who is expected.
Your active policies
Applies the boundaries you describe to the address receiving the message.
Recent decisions
Avoids repeatedly spending your attention on the same message.
Act during delivery
Make the decision while delivery is still in progress.
Because TrustSender can operate as the mail service for a custom domain, it can accept a message, ask the sending server to retry later, or reject the current delivery before normal mailbox handling.
Incoming mail→Evidence + policy→Accept · Defer · Reject
Visible and correctable
Automation you can hold accountable.
TrustSender Activity explains what happened, why it happened, which policy applied, and which identity and relationship evidence mattered.
01
See the reason. Understand each accepted, deferred, or rejected delivery in plain language.
02
Correct the record. Allow or block a sender, revise a relationship, or change a policy.
03
Keep authority. Your explicit correction takes priority over later inference.
Trust and safety
Your policy governs the agent. The email does not.
Incoming email is untrusted evidence. A message cannot rewrite your policy, authorize a tool, expose another person’s mail, or grant itself a trusted relationship.
- No open SMTP relay
- Configured domains and recipients only
- Transport-derived sender evidence
- Versioned, auditable corrections
Built openly, claimed carefully
A working prototype, with clear production gates.
Public SMTP policy flow
Pre-mailbox decisions, sender-authentication evidence, correspondent controls, retry caching, and Activity audit.
Person-centred communication
Multiple identities, deeper relationship knowledge, daily briefing, adaptive views, and governed actions.
Resilience and operations
Redundant SMTP, monitoring, privacy controls, abuse handling, recovery testing, and production readiness.
Early access for design partners
Bring one low-risk custom domain.
Define your first communication policies with us. Review every TrustSender decision and help shape a person-controlled mail service.
- Start with a domain you control
- Review every decision during the pilot
- Shape the policy and Activity experience
Questions
Before you change a mail record.
Is TrustSender another spam filter?
No. It uses mail-security evidence, but its purpose is broader: applying your relationship and communication policies to decide what may enter your communication space.
Do I need to change my email address?
The initial service is for custom domains. Your domain’s mail-delivery records point to TrustSender while you keep your existing address.
What happens when TrustSender is uncertain?
The intended policy model can accept, hold for review, temporarily defer, or reject delivery. You choose how uncertainty is handled within safe service limits.
Does the agent have authority to send email for me?
Not by default. Outbound actions require explicit authority, defined scope, frequency limits, an audit record, and loop prevention.