24 June 2026 · DMARC Engine · 1 min read
In short: your data is hosted on Cloudflare's global edge infrastructure, encrypted in transit and at rest, and we deliberately store as little of it as possible.
DMARC Engine is built on Cloudflare Workers and Cloudflare's managed storage, so your account runs across a distributed, security-hardened network rather than a single server you have to trust. All traffic to and from the platform travels over TLS, and stored data, including any credentials needed to manage your hosted DNS, is encrypted at rest.
Just as important is what we hold. The platform deals primarily in email-authentication metadata: aggregate (RUA) report data such as sending IPs, alignment results and policy outcomes. We aren't a mailbox provider and we don't sit in your mail flow, so we don't read, store or relay the contents of your emails (see do you store my email?).
This data-minimising posture keeps your exposure small by design and supports our wider compliance approach. See GDPR compliance for detail.
Next steps
Want the specifics for your own setup? Start with a free DMARC checker scan, or review how hosted DMARC manages records on your behalf.