Footer365 runs on servers in the United Kingdom and signs everyone in through Microsoft, with least-privilege access, encryption in transit, encrypted credentials and a full audit trail.
Everyone authenticates through Microsoft Entra ID. We never see or store passwords, and there are no separate credentials to manage.
We request only the permissions needed to sync your directory and manage mail-flow connectors. A Global Administrator grants consent, and can revoke it at any time.
All traffic is encrypted in transit with TLS. The access tokens and other secrets the service stores are encrypted with AES-256 by the application itself.
Your mail is processed, and your directory and account data are stored, on our servers in the United Kingdom. The few providers we rely on, and where they work, are on our sub-processors page.
We process the directory attributes needed to build signatures. We do not read or retain the body of your messages beyond injecting the signature.
Configuration changes, provisioning steps and mail-processing outcomes are logged, so you can see who changed what and when.
If you believe you have found a security issue, please email [email protected] with the details and steps to reproduce. We investigate all reports and will acknowledge yours. Please do not publicly disclose an issue before we have had a chance to address it.
We use a small number of vetted sub-processors to run the service. See our sub-processors list and our data processing terms for details, including our role as a data processor for the personal data in your directory.
The fingerprint is the SHA-256 of the version's exact text: a saved copy whose fingerprint matches is that version, word for word.