Data security for email delivery

For website owners using AI-MailBridge · Last updated: June 29, 2026

AI-MailBridge sends your WordPress email through professional mailers. Your mailer credentials, OAuth tokens and email logs are stored in your database on your hosting — not on AtoZ servers.

How storage works

• Mailer settings & API keys → saved to WordPress options on your server (encrypted where supported, see below);
• OAuth tokens (Gmail / Microsoft 365) → obtained via the AtoZ connect broker, then stored on your site; AtoZ does not retain your mailbox tokens;
• Email log → message metadata and content you choose to log, stored in WordPress tables on your server;
• AtoZ license server → only license email, site URL, and plan (never your email content or credentials).

Built-in protections

Feature	Purpose
Encrypted secret storage	SMTP passwords / API keys encrypted at rest with a rotatable key
OAuth via broker	Client secrets stay on the broker; your site only holds its own tokens
Log retention & redaction	Auto-purge old logs; redact recipients in failure alerts
Role capabilities	Only authorized admins can view logs or change mailers
Webhook signing	Outbound failure webhooks can be signed/verified
WordPress privacy tools	Export / erase personal data on request

What you should configure

1. SSL certificate on your domain so credentials and the admin are served over HTTPS.
2. Use OAuth or app passwords rather than a primary mailbox password where possible.
3. Set log retention and enable recipient redaction in alerts if logs are sensitive.
4. Strong wp-admin passwords and few admin users.
5. Hosting with encrypted storage and automated backups.
6. Rotate API keys / the encryption key if a credential may be exposed.

Encryption at rest

AI-MailBridge encrypts stored mailer secrets using a key derived from your WordPress salts (rotatable from the plugin). Email log bodies are stored so you can search and resend them; database encryption at rest is provided by your hosting. The plugin does not replace a secure host or SSL.

You are the data controller

The email your site sends, and any logs you keep, belong to you. You decide retention, who can access logs, and how to respond to privacy requests. AtoZ provides the software; you operate it on your infrastructure.

Questions: supports@atozinfoway.ca

← Back to AI-MailBridge