Early Access · Seeking Design Partners

Own Every Mailbox, Pay Zero Per-Seat Rent

AshuMail is a self-hosted, multi-tenant email collaboration platform for Indian businesses, institutions and MSPs — a Gmail-class workspace, a portfolio admin console, and a 10-minute domain onboarding wizard, running entirely on infrastructure you control. The spine is built and tested; we are now inviting design partners to take it to production with us.

0 Per-Seat Fees, Ever
0 Minute Domain Onboarding
0 Automated Tests Green
0 On Your Infrastructure
Inbox — priya@acme.in 3 new R 09:41 A 09:38 K 09:32 Your server · Your jurisdiction acme.in verified DKIM · SPF · DMARC ✓ MX → mail.acme.in

Business Email Has Become a Tax You Pay Forever

The Per-Seat Meter Never Stops

Hosted email bills per user, per month, forever — usually priced in dollars. Hire ten people and your mail bill grows ten seats; add a second company or brand and it grows again. Success is billed like a penalty.

Your Mail Lives on Someone Else's Servers

Every contract, invoice and HR conversation your business has ever sent sits in another company's cloud, under another jurisdiction's rules. In the DPDP era, where your data lives is no longer an afterthought.

DIY Mail Servers Take a Specialist

The old alternative — hand-wiring Postfix, Dovecot and spam filters, then crafting SPF, DKIM and DMARC records by hand — is a specialist's full-time job. One wrong record and your mail lands in spam or vanishes.

One Platform. Every Domain, Every Mailbox, Your Servers.

AshuMail is the product layer self-hosted email never had: a modern workspace your team will actually enjoy, an admin console built for portfolios of domains, and onboarding automation that replaces the specialist.

Unlimited Mailboxes, Zero Seat Tax

The platform is licensed per deployment, never per user. Your hundredth mailbox costs exactly what your first did: nothing extra. Grow your team without growing your mail bill.

Multi-Tenant: Every Client, One Console

Built multi-tenant from the first line of code, not bolted on. An MSP or agency can host every client's email from one installation — with per-tenant branding, isolation and policies.

10-Minute Domain Onboarding

The wizard mints your DKIM key, generates SPF and DMARC, applies records through your DNS provider's API where possible, and verifies each one live — turning a specialist's afternoon into ten minutes.

Your Servers, Your Jurisdiction

Deploy in India, on hardware you choose. Mail is encrypted at rest, exportable at will, and never leaves infrastructure you control — a clean data-residency story for the DPDP era.

0 Recurring per-seat fees — licensed per deployment
10 Minutes from new domain to verified DNS & DKIM
238 Automated tests green — 165 backend, 73 frontend
1 Person is enough to install, run and back it up

Everything a Mail Platform Should Have Learned by Now

Real capabilities from the platform — each one traceable to the architecture, not a slide

Gmail-Class Workspace

Conversation view, keyboard triage, undo send, snooze, scheduled send and labels — muscle memory intact

Portfolio Admin Console

Every tenant, domain and mailbox in one view — task-verb actions like Add employee and Offboard

Onboarding Wizard

Live DNS checks, minted DKIM keys and generated SPF/DMARC — automated via provider API or copy-paste

Row-Level Security Isolation

Four authorization walls end at Postgres RLS — even a code bug cannot read across tenants

On-Device AI Only

AI features run locally on your hardware — your mail is never sent to a cloud model, ever

Webhooks & Exports

Event webhooks and data exports keep your mail integrable and portable — no lock-in by design

ashuctl Operator CLI

Install, upgrade, back up and restore from one command-line tool — every op action scripted

Monitoring Built In

Grafana dashboards and Prometheus alerts ship in the stack — every alert links to a runbook

The Platform, Piece by Piece

Six surfaces, one deployable — each with a job it does completely

Mail Workspace

A JMAP-first webmail your team will not want to leave

  • Conversation view with keyboard-native triage
  • Undo send with an editable-draft return
  • Snooze and timezone-aware scheduled send
  • Nested labels that map to IMAP folders
  • Search operators: from:, to:, has:attachment & more

Multi-Tenant Admin Console

A portfolio view hosted email never gave you

  • All tenants, domains and mailboxes in one place
  • Per-tenant branding on the tenant's own domain
  • Plans and entitlements enforced server-side
  • Task verbs: Add employee, Rotate keys, Offboard
  • Audit trail recorded with every change

Domain Onboarding Wizard

From new domain to working mail in about ten minutes

  • Live DNS checks with green-per-record feedback
  • DKIM key minted and rotated for you
  • SPF and DMARC records generated correctly
  • Auto-apply via DNS provider API, or copy-paste
  • Verify, create mailboxes, and mail flows

Security & Isolation

Threat-modelled from the crown jewels down

  • Four authorization walls, RLS as the last one
  • Passkeys-first auth; sessions server-side only
  • Sanitized, sandboxed rendering of HTML mail
  • SSRF-hardened image proxy strips trackers
  • No ambient mail-content access for any role

Ops & Observability

Deliberately operable by a single person

  • ashuctl CLI: install, upgrade, backup, restore
  • Grafana dashboards and Prometheus alerts included
  • Every alert links directly to its runbook
  • Scripted, encrypted backups copied off-box
  • Restore drills treated as a first-class practice

Integrations & API

Everything the console does, your scripts can do

  • Canonical OpenAPI spec, diff-gated in CI
  • Generated Java and TypeScript SDKs
  • Webhooks for platform events
  • Data exports for portability and compliance
  • Migration import from Google Takeout or live IMAP

From a Domain Name to Working Mailboxes

The wizard does the specialist's work — you make three decisions and watch the checks turn green

1

Point Your Domain

Add your domain in the console. The wizard mints a DKIM key, generates your SPF and DMARC records, and applies them through your DNS provider's API — or hands you exact records to paste.

2

Watch It Verify

Live checks confirm each record — MX, SPF, DKIM, DMARC, reverse DNS and TLS — one by one, with plain-language fixes when something is off. No guesswork, no waiting on a consultant.

3

Create Mailboxes

Mailboxes go live on your own server. Your team signs into the webmail — or connects Outlook, Thunderbird or Apple Mail over standard IMAP and SMTP — and mail flows.

Architecture-Led, and Honest About the Stage

AshuMail is at the early-access stage, and we say so plainly: the architecture is ratified end to end, the spine — tenancy, auth, admin console, workspace, onboarding wizard — is built with 238 automated tests green, and the live mail-engine cutover is the next milestone. Credibility built on architecture survives contact with production; marketing claims do not.

Backend

  • Java 25 · Spring Boot 4 modular monolith
  • Module boundaries enforced by ArchUnit
  • PostgreSQL with row-level security
  • 165 backend tests green

Frontend

  • Angular 22, zoneless & signals-based
  • One app, served per-tenant on its own domain
  • Typed SDK generated from the OpenAPI spec
  • 73 frontend tests green, bundle under budget

Deploy & Ops

  • Compose and Kubernetes generated from one topology source
  • Container-native — Podman or Docker
  • Prometheus, Grafana and alert runbooks included
  • ashuctl CLI for every operator action
RLS Tenant Isolation in Postgres
DKIM Automated Mail Authentication
DPDP Data Residency You Choose
238 Automated Tests Green

Self-Hosted AshuMail vs Per-Seat Hosted Email

The differences are structural, not cosmetic — judge each row on how your business actually grows

  AshuMail, self-hosted Typical per-seat hosted email
Cost model Flat — your infrastructure, one platform Per user, per month, forever — often billed in USD
Adding 50 mailboxes A configuration change 50 new subscriptions
Where your mail lives Your servers, your jurisdiction The vendor's cloud, their jurisdiction
Hosting client domains (MSP / agency) One multi-tenant console, white-label per tenant A separate console and bill for every client
Data residency Wherever you deploy — including India The vendor's regions and routing rules
AI features On-device only — mail never leaves your server Cloud AI processes your mail off-site
Domain onboarding Wizard-guided; DNS, DKIM, SPF & DMARC automated Manual DNS edits, different for every provider
Exit path Standard IMAP/JMAP plus built-in exports Takeout tooling, at the vendor's pace

Scoped Per Deployment, Never Per Seat

Every deployment is different — your infrastructure, domains, tenants and support needs shape the price. We quote after a conversation, never from a menu.

Self-Host

Free

Run it yourself, on your servers

  • The full platform on your infrastructure
  • Unlimited mailboxes & domains
  • Setup docs, runbooks & ashuctl CLI
  • You operate it — we cheer you on
Start Free

Supported

Contact Us

You run it, we stand behind you

  • Everything in Self-Host
  • Guided install & domain onboarding
  • Upgrade & migration assistance
  • Support from the engineers who built it
Talk to Sales

MSP & Enterprise

Contact Us

Host every client from one console

  • Multi-tenant portfolio console
  • White-label, per-tenant branding
  • Onboarding help for client domains
  • Design-partner input on the roadmap
Talk to Sales

Three Structural Advantages You Can Verify

The platform is licensed per deployment, not per person. Whether you run twelve mailboxes or twelve hundred, across one domain or fifty, the licence does not change — your infrastructure cost is the only thing that scales, and it scales gently.

Zero Seat Tax Unlimited mailboxes · Unlimited domains

Multi-tenancy is the default mental model, not an add-on. An MSP or agency hosts every client company on one installation — each tenant isolated by four independent walls, branded with its own logo and domain, and managed from a single portfolio console.

One Console, Every Client True multi-tenant · White-label per tenant

Your mail lives on servers you choose, in a jurisdiction you choose — encrypted at rest, exportable at will, with AI that runs on your own hardware. For DPDP-conscious businesses and institutions, data residency stops being a negotiation with a vendor.

Your Jurisdiction Data residency in India · On-device AI only

Shape the Platform as a Design Partner

The architecture is ratified, the spine is built and tested, and the live mail-engine cutover is next. We are looking for a small group of businesses, institutions and MSPs to deploy early, push hard, and shape what ships. We are not running a public demo yet — we would rather walk you through it directly.

Businesses & Institutions

Tired of the per-seat meter, or required to keep mail in India? Run a controlled early deployment with our engineers alongside you, and get founding terms that recognise the risk you take.

MSPs & Agencies

You already run your clients' IT — email should be a service you host, not a subscription you resell. Help us harden the multi-tenant console against your real client portfolio, and it becomes yours to build on.

Technical Early Adopters

Self-hosters and platform teams who will read the architecture docs before the brochure. Bring a real domain and honest feedback; get direct access to the engineering roadmap and the people building it.

Want the unvarnished walkthrough?

We will show you exactly what is built, what is pending, and what a deployment on your infrastructure would look like — architecture docs included.

Frequently Asked Questions

Is AshuMail production-ready today?

Not yet — and we will not pretend otherwise. The architecture is complete, 32 of 47 engineering sections are fully implemented, and 238 automated tests run green across the backend and frontend. The remaining step is the live mail-engine cutover. That is exactly why we are recruiting design partners now: you get in before general availability, shape the roadmap, and lock in founding terms.

How is email deliverability handled?

The onboarding wizard generates and verifies SPF, DKIM and DMARC records for every domain — through your DNS provider's API where possible, or as copy-paste records — so the technical foundations are correct from day one. Deliverability also depends on IP reputation and sending behaviour, which no vendor can honestly guarantee; we help you start on a clean IP with proper reverse DNS and warm it up gradually.

Can we migrate from Google Workspace or Zoho Mail?

That is the migration path the platform is designed around. The importer pulls mail from Google Takeout archives or directly from a live IMAP mailbox, preserving labels, read-state and stars, with a dry-run report and count-and-checksum reconciliation. As an early-access product, we run migrations together with our design partners rather than leaving you to a wizard alone.

What does self-hosting actually require?

A server with open inbound and outbound port 25, a dedicated IPv4 address whose reverse DNS you control, and a domain whose DNS you can edit. The stack brings everything else — PostgreSQL, object storage, TLS and monitoring — up together from one Compose definition, and the ashuctl CLI drives install, upgrade and backup. It is designed so one person can operate it.

How is tenant data isolated on a shared installation?

Four independent authorization layers sit between any request and another tenant's data: role checks, plan entitlements, resource ownership guards, and finally PostgreSQL row-level security, which the application role cannot bypass. Even a code-level bug cannot read across tenants — and no role, including the platform super admin, has ambient access to mail content.

Is there really a free tier?

Yes. Self-hosting the platform on your own infrastructure is free — there is no per-seat licence and no meter on mailboxes or domains. What we charge for is what organisations actually need from us: guided installs, support agreements, managed operations, and the multi-tenant tooling MSPs use to host client domains commercially.

Which email clients and protocols are supported?

AshuMail speaks the open standards: IMAP, SMTP and POP3 for classic clients like Outlook, Thunderbird and Apple Mail, plus JMAP for the fast built-in webmail. Gmail-style labels map to IMAP folders automatically, so moving a message in one client relabels it in the other.

What do design partners actually get?

Early access before general availability, a direct line to the engineers building the platform, real influence over the roadmap, and preferential terms that recognise the risk of adopting early. In return we ask for honest feedback and a real-world deployment to harden the platform against.

Stop Renting Your Own Email

Every mailbox, every domain, on infrastructure you control — with a team of engineers who will tell you exactly what is built and what is not. Join us as a design partner.

Get in Touch

Curious what AshuMail would look like on your infrastructure — or hosting your clients' domains? Tell us a little about you and we'll set up a personal walkthrough of the platform and the architecture.

Location

Bengaluru, India