Sign-in
No password to phish.
Folio signs readers in with a fifteen-minute magic link or a passkey. The account does not depend on a reusable mailbox password.
Sign in flow →Trust center, without the theater
The practical promises behind business mail.
Folio is not an enterprise compliance suite. It is a single-operator email product, so the trust work is concrete: passwordless sign-in, export, public deletion, guided DNS, DKIM, DMARC, anti-spoofing, and plain-language policies.
Your archive leaves with you.
Export all mail from the Security screen as a standard .mbox file that Thunderbird, Apple Mail, mutt, and archival tools understand.
Export details →Billing
Cancellation is not a support ticket.
Paid plans are managed through Stripe's customer portal, and account deletion has a public request path.
Deletion request →Domains
Every domain gets its own posture.
Bound domains get per-domain DKIM, guided DNS, DMARC visibility, and a reply identity that matches the thread.
Deliverability →Reading
Opening a letter tells the sender nothing.
Remote images are fetched by Folio and served from our origin, so a tracking pixel never reaches your browser. The sender learns no IP address, no location, and no open time.
Privacy policy →Before you trust a provider
Check the domain before you move the mail.
- MX, SPF, DKIM, and DMARC can be scanned before signup.
- Unverifiable senders are filed to Spam on arrival and explained in plain English.
- DMARC aggregate reports show pass rates and failing senders across domains.
- Remote images in a letter load through Folio, not from the sender's server.
- Inbound mail publishes an MTA-STS policy — currently in testing mode — and the TLS reports senders return are ingested and read.
- Privacy and terms pages are public, short, and linked sitewide.