We run the checks on ourselves first.

An anti-spam vendor with an unauthenticated domain has no standing. Here is what spamjadoo.com publishes, and how to report a problem.

Our own records

spamjadoo.com publishes SPF, DKIM, a DMARC policy of reject, MTA-STS and TLS-RPT. Verify them with the free tools: SPF, DMARC, MX.

Vulnerability disclosure

Report security issues in Spamjadoo, the hosted service or this website to security@spamjadoo.com. We acknowledge within two business days and keep you informed until resolution. We do not pursue legal action against good-faith research that avoids privacy violations, service disruption and data destruction. Machine-readable contact: security.txt (RFC 9116).

Hosted service

Nodes in India by default; other regions by agreement.
Transport encryption on every hop that supports it; MTA-STS enforced where the receiving domain publishes it.
Customer data isolated per tenant; access logged; deletion on contract end.
Certifications held are listed in the compliance questionnaire available to prospective customers on request.

This website

No third-party scripts, fonts or form services. Free-tool queries are rate limited and held in memory only. See the privacy notice.