Transform email security from consumer checks to corporate trust workspace
Equip your teams with unified scans, bulk list screening, threat watchlists, and encrypted case files shared across your organisation.
High-fidelity Trust Features
Everything your workspace security team needs to verify incoming senders.
Unified Team Checks
Scan email senders, suspicious domains, links, and numbers, and save findings in shared team workspace folders.
Bulk Screening Screening
Screen customer database exports (up to 500 emails per batch) for formatting and active MX server statuses.
24/7 Entity Watchlist
Configure real-time monitoring on critical email addresses or domains. Receive instant email alerts on status changes.
Secure PII Encryption Vault
Emails and phone numbers are encrypted (AES-256-GCM) or hashed (HMAC-SHA256) immediately. No plain text storage.
Workspace Role Hierarchies
Allocate team seats (Owner, Admin, Member, Viewer) with distinct access levels and action permissions.
Audit Trail Logs
Keep durable records of workspace scans, verdicts, assignments, and resolution notes for compliance.
Zero-PII Compliance Design
Unlike traditional checkers, customer data is never stored in plain text. Senders and details are hashed via HMAC-SHA256 for cross-case correlation matching, and stored as encrypted ciphers (AES-256-GCM). Data is only decrypted on-demand inside the browser of authorised teammates.
Frequently Asked Questions
Is my team’s input data safe?
Yes. We utilize a secure zero-PII data structure. Email addresses and phone numbers are hashed using keyed HMAC-SHA256 for equality matching, and encrypted via AES-256-GCM. Plaintext is only visible to authenticated team members.
How does seat allocation work?
Each plan includes a seat limit (e.g. 5 seats for Starter, 25 for Business). The owner occupies seat 1, and invitees occupy subsequent slots. You can manage seats and billing at any time in the portal.
Can we integrate IsThisSpam into our custom SOC apps?
Yes. Our Business Plus and Enterprise plans include programmatic API access with full token verification controls.