Data sovereignty
Your mail, files, and meetings live on hardware you control — on-premise or in your private cloud. No data crosses a vendor boundary, satisfying residency and sovereignty mandates by construction.
On-premise & self-hosted
Your workspace, on your iron.
Unifiedesk can run entirely on infrastructure you own. Here's why that matters — and how it works.
Why on-premise
The advantages of owning your stack
You hold the keys
Encryption keys are derived from a master secret you manage. Even the storage layer can't read your data without them — a guarantee no shared cloud can make.
Cost that doesn't scale with headcount
Self-hosting decouples price from per-seat licensing. Add users, domains, and storage without a linear bill — ideal for large or seasonal teams.
No lock-in
An open engine and open standards (JMAP, IMAP, SMTP, iCalendar, Office formats) mean your data and workflows are always portable.
Auditable security
A from-scratch Rust engine you can read line by line. Verify the cryptography, the authentication, and the data flow yourself — or have your team certify it.
Operational control
Patch on your schedule, set your own retention and backup policy, and integrate with your existing monitoring, identity, and network controls.
Managed by us
We host it on sovereign infrastructure and operate it for you. Connect your domain and go live in minutes.
- Zero ops overhead
- Automatic updates & backups
- Per-mailbox pricing
Self-hosted
Run the open engine and suite on your own servers. Maximum control, sovereignty, and cost efficiency at scale.
- Full data sovereignty
- You hold the keys
- Cost decoupled from seats
How it works
Live in four steps
- 1
Deploy the engine
A single Rust binary plus the web suite. Run it on a VM, a server in your rack, or your private cloud.
- 2
Bring your storage
Local disk or any S3-compatible bucket. Everything is encrypted at rest before it's written.
- 3
Connect your domain
Publish MX, SPF, DKIM, and DMARC records — the platform generates them for you — and you're live.
- 4
Operate with confidence
Prometheus metrics, health checks, encrypted backups, and TLS everywhere come built in.
The approach
Sovereignty without the sacrifice.
Most sovereign alternatives ask you to trade polish for principle — to accept a clunkier inbox in exchange for control. We refused that bargain. Unifiedesk is built on a from-scratch Rust mail engine for speed and safety, wrapped in a suite that feels as fluid as the tools you're leaving.
Every layer is yours to inspect. The engine is open source. The storage is encrypted with keys you hold. The deployment can live on our sovereign infrastructure or entirely on your own hardware. There is no black box, no data exhaust, no fine print that quietly repurposes your correspondence.
Open by standard
Built on protocols, not lock-in.
Every part of Unifiedesk speaks an open standard, so your data stays portable and your clients stay compatible — forever.
JMAP
Modern, efficient mail API powering the web and mobile apps.
IMAP & SMTP
Universal client support — Apple Mail, Thunderbird, Outlook, anything.
iCalendar / iTIP
Invitations and RSVP that interoperate with every calendar.
Office Open XML
True .docx, .xlsx, .pptx fidelity — no conversion, no lock-in.
S3 API
Point storage at AWS, MinIO, Ceph, or Wasabi — your choice.
DKIM / SPF / DMARC
The email authentication trifecta, enforced and signed.
Promises in writing
What you can count on.
Your keys, always
Encryption keys derive from a master secret you hold. We can't read your data, and neither can anyone who seizes the disk.
No lock-in, ever
Open standards and an open engine mean your mail, files, and contacts export cleanly. Leaving is always possible.
Authenticated mail
SPF, DKIM, and DMARC on every message — inbound and outbound — so spoofing stops and your mail reaches the inbox.
No data mining
Your correspondence is never scanned for ads or used to train a model. The product is the software, not you.
Why teams switch
Sovereignty, in their words.
“We moved 240 mailboxes off Google Workspace in a weekend. Mail never stopped flowing, and for the first time our auditors could see exactly where the data lives.”
“Per-seat pricing was eating our margin. One flat instance later, we onboard every contractor without thinking about the bill — and clients see our brand, not a vendor's.”
“The inbound DMARC enforcement alone justified the switch. Spoofed mail pretending to be our partners simply stops at the door now.”
“We self-host the engine on our own racks. It's a single Rust binary I can actually read. That's a sentence I never got to say about our old provider.”