Everything the platform does, by who it's for.
Convicle is deliberately narrow: one job \u2014 keep an honest record of company email \u2014 done well for three different people.
For employees
Send & receive as normal
Compose, reply, and forward from your assigned company address. It looks and feels like any inbox — the archive works silently underneath.
Real-time delivery
IMAP IDLE syncing means new mail shows up in seconds once you're on VPS or cloud hosting, not minutes.
Search your own history
Full-text search across subject, sender, and body, scoped to your own mailbox.
For company admins
Provision mailboxes in minutes
Add an employee, attach their existing SMTP/IMAP credentials, and Convicle test-connects automatically.
Retention & legal hold
Set how long mail is kept, and flag specific mailboxes for legal hold so nothing in scope can be purged.
Usage dashboard & audit log
See active mailboxes, storage used, and every admin or support action taken on your company's data.
For the platform
Bring your own mail host
Works with Hostinger, cPanel hosts, Google Workspace, or Microsoft 365 — no forced migration off infrastructure you already pay for.
Grows with you
Starts on shared hosting for small teams, moves to a VPS, then to AWS — triggered by real usage signals, not guesswork.
Tenant isolation by design
Every tenant's data is isolated with database row-level security, not just application-level checks.
The archive is only useful if it can't be argued with.
AES-256 credential encryption
Mailbox SMTP/IMAP credentials are envelope-encrypted at rest and only ever decrypted inside the mail-worker process.
TLS everywhere
All mail-provider connections use TLS/STARTTLS; all client traffic is HTTPS-only with HSTS.
Row-level tenant isolation
PostgreSQL row-level security enforces company boundaries at the database layer, independent of application code.
Full audit trail
Every admin and support action is logged and append-only — including access to the archive itself.
Retention & legal hold
Company-configurable retention with a legal-hold flag that overrides deletion regardless of policy.
Malware scanning
Every attachment is scanned on upload before it's stored or delivered.