Your email lives on servers in India. Here is exactly where.
Which servers hold your mail, where the backups go, what happens when a server fails, and how your messages are protected. Stated plainly, with the numbers we work to.
Both copies of your data stay in India.
Your mailboxes run on a multi-node cluster in the Adani data center in Chennai. Encrypted backups go to Amazon S3 in the Mumbai region. Nothing is kept outside the country.
Your team
Devices, the web app and other mail servers sending to your domain.
Adani data center
A multi-node mail cluster holds your live mailboxes. If one node fails, the others keep serving.
AWS S3
Region ap-south-1. Backups are encrypted and kept apart from the primary servers.
Backups we test, not just take.
Every customer is backed up the same way. We restore from backup every three months to prove it works.
| Schedule | Daily full backup plus hourly incremental backups |
|---|---|
| Location | AWS S3, Mumbai (ap-south-1), separate from the primary servers |
| Encryption | Backups are encrypted |
| Retention | Your full backup is kept for as long as you are a SagaMail customer |
| Restore testing | Every 3 months |
| Recovery point (RPO) | Up to 1 hour of mail at most |
| Recovery time (RTO) | Up to 4 hours to restore onto a new server |
One failed server does not stop your mail.
SagaMail runs on a multi-node cluster. Work is spread across nodes, so losing one does not take your mailboxes offline.
Our availability target is 99.9%, which allows about 43 minutes of downtime in a 30-day month. Live status and incident history are at status.sagasoft.xyz.
The cluster sits in one data center. It protects against server failures. If the whole Chennai site were lost, we would restore from the Mumbai backups within the 4-hour recovery time above.
Protected in transit, at rest and at sign-in.
In transit
TLS encryption between your devices, our servers and other mail servers.
At rest
Stored mail is encrypted, and so are the backups.
Domain authentication
SPF, DKIM and DMARC supported for every domain you add.
Inbound filtering
Spam and malware filtering on incoming mail.
Sign-in
Two-factor authentication and single sign-on (SSO).
Access and audit
Role-based access for your team, with audit logs of administrator actions.
Your mail is yours, and you can take it with you.
You can export your data at any time. Security is shared, so here is who does what.
SagaMail secures
- The servers and the Chennai cluster
- Encryption and backups
- Spam and malware filtering
- Platform updates and monitoring
You control
- Who has an account on your domain
- Password strength and two-factor sign-in
- Administrator roles and access
- What you export and when
Keeping primary data and backups in India supports customers with Indian data protection obligations, including the Digital Personal Data Protection Act, 2023. SagaMail does not yet hold an independent security certification. We will list one here when it is issued.
Need this in writing? Ask us.
We send the full infrastructure and security whitepaper, a security questionnaire and a data processing agreement on request, and we are glad to walk your IT team through them.