In active development — built in the open

Email, reimagined
for the next decade.

ZephyrAB is a hyperscale mail & collaboration platform where privacy is the default, AI works on your terms, and deliverability just works — engineered from the ground up in memory-safe Rust.

10M+
Mailboxes per platform
Zero
Accepted messages lost
Yours
Encryption keys, always
100%
Memory-safe core
Scroll to discover
The platform

Everything a modern mail platform should be

Each capability earns its place. Here's what we're building — and why it matters.

Per-user encryption you control

Opt in and every message is encrypted to your own key the moment it arrives. We store ciphertext we cannot read.

Why: a data breach or a rogue admin should never be able to read your mail. True privacy means the server holds no keys.

AI on your terms

Smart classification and AI-assisted replies powered by the model you choose — a local LLM or your own provider. Or run it entirely in your browser.

Why: AI should be a tool you own, not a pipe that ships your inbox to someone else. Bring your own model; your prompts can stay on your device.

Deliverability that just works

DKIM, SPF, DMARC, ARC, MTA-STS and DANE are built in and automatic — not bolted-on afterthoughts.

Why: mail that lands in spam is mail that failed. Authentication done right is the difference between reaching the inbox and disappearing.

Managed DNS, zero friction

Point your domain's nameservers at ZephyrAB and every mail record is created, signed, and maintained for you — forever in sync.

Why: hand-editing DNS records is where onboarding goes to die. Delegate once and never touch a TXT record again.

Large files, sent as links

Oversized attachments become secure, expiring download links automatically — with passwords, revocation, and full audit.

Why: giant attachments bounce, bloat mailboxes, and get blocked. A temporary link is faster, safer, and always deliverable.

Abuse & account protection

Compromised-account detection, outbound scanning, and automatic lock-and-recover keep your domain's reputation clean.

Why: one hijacked account can blocklist an entire platform. We treat outbound abuse as a first-class threat, not an afterthought.

Calendar, contacts & files

Full groupware — scheduling, shared calendars and address books, and file storage — on open standards, not a walled garden.

Why: mail doesn't live alone. A complete collaboration suite means one less vendor and one consistent, private home for your team.

Built to scale to millions

A cell-based architecture grows by adding capacity, not by tuning — from your first mailbox to ten million.

Why: platforms that can't scale hit a wall and rewrite. We designed for hyperscale on day one so growth is never a crisis.

Open, API-first & multi-tenant

JMAP-native with IMAP, POP3, CalDAV and CardDAV support. Provision domains and accounts by API, with delegated admin and SCIM.

Why: your platform should bend to your workflow. Open standards and a real API mean no lock-in and effortless automation.
Privacy by architecture

Your mailbox. Your keys. Your business.

Most providers encrypt mail with keys they hold — which means they, and anyone who breaches them, can read it. ZephyrAB does it differently.

  • Messages encrypted to your public key on delivery — we store only ciphertext
  • Private keys never touch our servers: no escrow, no backdoor
  • Signed and encrypted mail is preserved byte-for-byte, so signatures always verify
  • Encrypted transport everywhere, enforced with modern TLS policy
Intelligence, not surveillance

AI that answers to you.

ZephyrAB brings AI to the inbox — sorting, prioritizing, and drafting replies — without making you hand your correspondence to a third party you didn't choose.

  • Run a local model, or connect your own provider with your own keys
  • Client-side mode: classification and drafting happen on your device — even for encrypted mailboxes
  • AI never blocks your mail; it assists, it never delays delivery
  • Every draft is yours to review — nothing is ever sent automatically
Reach the inbox

Deliverability, engineered in.

Getting mail to actually arrive is a science of authentication, reputation, and trust signals. We built all of it into the core.

  • Automatic DKIM signing, SPF, DMARC and ARC on every message
  • MTA-STS and DANE for encrypted, tamper-proof delivery between servers
  • Reputation-aware sending with isolated IP pools and warmup
  • A relentless guarantee: every accepted message reaches a known outcome — delivered, bounced, or quarantined. Never silently lost.
Where we are

Built in the open, gate by gate

We don't ship on vibes. Every milestone passes on hard evidence — real tests, real load, real interop — before it counts as done.

Complete

Foundations & storage spine

The durable core: content-addressed storage, transactional metadata, end-to-end tracing, and a walking skeleton proving mail flows in and out intact.

In progress

Core mail engine

Full SMTP, the distributed delivery queue, mail authentication, and the independent auditor that guarantees no accepted message is ever lost.

Next

Product layer

Webmail, calendar and contacts, search, per-user encryption, AI assistance, and managed DNS — the complete experience.

Then

Scale & launch

Multi-cell operation, the deliverability center, and the operational hardening that takes ZephyrAB to general availability.

Follow along

ZephyrAB is on the way.

We're building the mail platform we always wished existed — private by default, intelligent on your terms, and engineered to last. Want to hear when it's ready?

Get in touch →