How we keep emails secure
We use Amazon Simple Email Service (Amazon SES) to send and receive emails, ensuring all details are secure.
DKIM
The emails are signed using personal customer Domain Keys Identified Mail (DKIMDomainKeys Identified Mail (DKIM) is a method that customers can set up to reduce the likelihood that emails, sent by Tipalti on the payer’s behalf, will go to the payee’s spam folder.) keys.
These ISPs use this signature to verify the email’s authenticity and the sender’s domain.
DKIM reduces email spoofing and phishing and builds trust with ISPs and mail services, increasing the likelihood of your emails reaching the inbox rather than being flagged as spam.
We can rotate DKIM keys to increase security if you require it. To enable key rotation:
We ask customers to register their domain to place the CNAME in their DNSDomain Name System records.
The CNAME maps to the public key — the record stored on Tipalti’s DNS.
Tipalti can then do key rotations, which is highly secure.
SPF
Our emails are set up with a Sender Policy Framework (SPF) to ensure security when we send emails.
SPF is automatically configured for you as we use AWSAmazon Web Services as a sending mechanism. View details.
The default MAIL FROM address would be amazonses.com. If you want to customize it, email our Support Team.
If you want to filter by IPInternet Protocol, you can use the IPs in this list.
Dedicated IPs
If you want to receive emails from Tipalti to your domain from a list of static IPs rather than a wide range of addresses, you can email our Support Team so we can set this up for you.
This is useful if you can only receive emails from a safelist of IPs.
DMARC
Customers must have a DMARC policy set to ensure email security.
Configure your sender domains in the Tipalti Hub
To send emails on your behalf, you need to configure the domain you want to send the emails from in the Tipalti Hub.
Monitoring sent emails
We monitor the whole email process, from sending to delivery, opening, and bounced. If you need it, we can provide data for each stage of the process.
Maintaining high reputation
We take pride in our low bounce and complaint rates, which are essential when delivering large volumes of emails.
If an email bounces, Tipalti automatically adds the recipient’s email address to a block list. We don’t send any more emails to that address until it’s investigated and removed from the block list.
We keep track of our bounce and compliant rates to keep them to a minimum.
If we detect a high number of bounced emails sent from a sender domain, the domain is automatically blocked. This only happens on rare occasions.