Self-hosted · Air-gap or hosted · Built in Zambia

Email you own — sovereign, auditable, compliant.

Run it air-gapped on your own infrastructure, or let us host it — either way the mailboxes, the data, and the keys stay yours. Scalable, auditable and customisable self-hosted mail, built to comply with Zambia's Data Protection Act 2021 and Cyber Security Act 2025.

Air-gap or hosted Data & keys stay yours Auditable & compliant
100%Your data & keys
50 MBAttachments
RFC 3501IMAP for any client
2FA + DKIMSecure by default
Get started

Live in three steps

No mail server to install, no MX migration headaches — sign up and we provision everything for you.

Sign up with your domain

Enter your domain and an admin email. We instantly create your workspace, a catch-all mailbox, and your DKIM key.

Add the DNS records

We show your exact MX/SPF/DKIM/DMARC records with copy buttons and step-by-step guides for GoDaddy, Namecheap, Hostinger & more.

Send & receive

Hit "Re-check DNS" and watch it go green. Open webmail, connect Thunderbird or Apple Mail over IMAP, or use the API.

Why it's different

One mailbox. Three ways in.

Browser, desktop mail clients, and API calls read and write the same Postgres mailbox — flag a message in Apple Mail and it's flagged in webmail instantly.

Capabilities

Everything a mail platform needs

Receive at your domains

An SMTP daemon accepts internet mail for any registered domain, with catch-all routing and open-relay protection.

DKIM-signed sending

Send straight from your domain with per-domain DKIM signing, or relay through your own provider — your choice.

Full-featured webmail

Reply, forward, drafts, a rich-text composer with Cc/Bcc and attachments, bulk actions, custom folders, dark mode and keyboard shortcuts — on desktop and mobile.

IMAP for any client

A hand-rolled IMAP4rev1 server lets Thunderbird, Apple Mail, and mobile read the same Postgres mailbox.

Scheduled send & unsend

Every send gets an undo window; pick a future delivery time and a background worker relays it when due.

Threading & search

Replies fold into conversations, and full-text search with operators — from:, subject:, has:attachment, before:/after: — returns ranked results instantly.

Inbound rules & filters

Per-mailbox rules match from/to/subject/body and move, flag, mark-read, or trash on delivery — applied by the MTA itself.

Templates & signatures

Reusable subject/body templates and per-mailbox signatures, applied right in compose.

Email tracking

Know when a message is opened, a link is clicked, or an attachment is downloaded — with a per-mailbox dashboard and your own tracking domain.

Out-of-office & forwarding

A loop-safe vacation auto-reply while you're away, and auto-forwarding to copy incoming mail wherever you need it.

Owned & auditable

Self-host it (air-gapped if you need) or let us host it — you keep the data and keys, with an audit log of every admin action and full customisation.

Pricing

Start free, scale when you grow

Bring your own domain — you only pay as your team and volume grow.

Starter

Free

Perfect for a small team getting professional email on its domain.

  • 1 domain
  • Up to 3 mailboxes + catch-all
  • Webmail, IMAP & REST API
  • DKIM-signed sending
Get started free

Enterprise

Contact us

Unlimited scale with a dedicated sending identity and SLA.

  • Unlimited domains & mailboxes
  • Dedicated sending IP & reputation
  • SSO & admin provisioning API
  • SLA & onboarding
Talk to us
The Ontech platform

Email is just the start

Run your whole online presence in one place — register a domain, host its DNS, get email, and put up a website, all under one account.

Live

Email

Self-hosted mail you own — webmail, IMAP & API.

Coming soon

DNS hosting

Authoritative nameservers and a records UI you fully control.

Coming soon

Domain registration

Search, register, transfer and renew domains in-platform.

Coming soon

Web hosting

Spin up websites with automatic TLS, databases and email built in.

Sovereignty & compliance

Your data stays yours — and provably so

Run it on your own infrastructure (air-gapped if you need to) or hosted — the mail and the keys never leave your control. Every admin action is recorded in an audit log, built to meet Zambia's Data Protection Act 2021 and Cyber Security Act 2025.

Data sovereignty

  • Runs on your own infrastructure — air-gap optional
  • Mail, attachments & DKIM keys never leave your control
  • Per-organisation isolation; no shared mailboxes
  • Your database & object storage — you own the backups

Audit & accountability

  • Audit log of every admin & provisioning action
  • Who did what, when — actor, target, timestamp
  • Per-mailbox & per-tenant usage reporting
  • Open, click & download tracking on outbound mail

Encryption & access

  • HTTPS + HSTS at the edge; STARTTLS on SMTP & IMAP
  • bcrypt password hashing, token-bound sessions
  • Two-factor authentication (TOTP) + recovery codes
  • Untrusted HTML rendered sandboxed — no scripts run

Anti-abuse & integrity

  • Open-relay protection on the inbound MTA
  • DKIM signing with SPF & DMARC alignment
  • Built-in spam filtering & per-mailbox quotas
  • Loop-safe autoresponders (RFC 3834)
Data Protection Act 2021 Cyber Security Act 2025 DKIM · SPF · DMARC TLS / STARTTLS RFC 3501 IMAP 2FA / TOTP
FAQ

Questions, answered

Everything you need to know about owning your email.

Can I run it fully on-premise or air-gapped?

Yes. The whole stack runs on your own hardware — even with no internet egress. You hold the mailboxes, the data, and the DKIM keys; nothing depends on us once it's deployed.

Is my data really mine?

Completely. Mailboxes, attachments and keys live on your infrastructure, isolated per organisation, and every admin or provisioning action is written to an audit log you can inspect.

How does this help with the Data Protection & Cyber Security Acts?

Data residency on your own infrastructure, an audit trail, two-factor authentication and encryption in transit are the building blocks for compliance with Zambia's Data Protection Act 2021 and Cyber Security Act 2025.

Will it work with Outlook, Apple Mail and Thunderbird?

Yes — it serves a standards IMAP4rev1 mailbox, so any IMAP client connects, alongside the built-in webmail and a REST API for your own integrations.

Can I bring my existing domain?

Sign up with your domain, publish the MX/SPF/DKIM/DMARC records we generate (with copy-paste guides for popular registrars), and you're live. Your current mail isn't touched until you switch the MX.

What if my ISP blocks inbound port 25?

We ship a tunnel-based cloud relay so you can still receive internet mail without opening any inbound port — your server dials out and the relay hands mail back over the tunnel.

Ready for email on your own domain?

Set it up yourself in minutes — bring your domain, add a few DNS records, and you're sending.