Create and manage mailboxes
Add a mailbox on any domain you host, set its name and quota, update it later, list what exists and delete what is finished. Standard create, update, list and delete — no ticket, no provisioning wait.
Included with your domain
Free email on every domain you register or transfer to us
Every domain you host gets real mailboxes, forwarders and autoresponders — free 10GB boxes on every Footprint-Free plan — managed from the same panel as the site, the same API as everything else, and the same AI tool you already use. No separate mail provider to buy, wire up or remember the password for. Availability: Google Workspace and Microsoft 365 seat resale, bulk mail-DNS presets, mail provisioned with the site, mailbox import during migration and the Terraform provider are in active development and not yet available. Everything else described here is live today.
- 10GBper mailbox, free on Footprint-Free plans
- 700,000+sites hosted worldwide
- One panelfor sites, DNS, SSL and mail
- 99.99%Uptime assurance
Mail that belongs to the domain, not to a third party
A site without an address on its own domain looks like what it is: unfinished. Contact pages that point at a free webmail account, forms that send from somewhere unrelated, privacy notices with no reachable inbox — every one of them is a small tell, and every one of them is avoidable.
Zinn Digital® gives every domain you host real mail: named mailboxes, forwarders that route to wherever you actually read, and autoresponders for the addresses nobody watches. It is provisioned alongside the site, not bolted on afterwards, and it is managed from the same dashboard as your files, DNS, SSL, backups and logs.
On Footprint-Free plans it is free — 10GB boxes for every domain, included in the plan rather than metered as an add-on. That matters most when you run a network: a hundred domains needing a working contact address would otherwise mean a hundred separate mailbox bills, and none here.
What you can do with mail
The full mailbox lifecycle is exposed as first-class platform actions — the same set whether you drive them from the dashboard, the public API or an AI agent.
Forwarders
Point info@, hello@ or abuse@ at an inbox you actually check. Useful when you want a professional address on every domain without a hundred inboxes to monitor.
Autoresponders
Set an automatic reply on any address — holiday cover, an acknowledgement for enquiries, or a polite redirect for an address you no longer staff.
Webmail, one click away
Open webmail from the dashboard in one click, with the mailbox already filled in and the page in your language. Sign in with the mailbox's own password, from any browser on any device.
Quotas per mailbox
Every mailbox is created with an explicit quota, so a single runaway inbox never becomes everyone else's problem.
DNS in the same place
Mail records live in the same DNS surface as the rest of the zone — Let's Encrypt SSL, records and mailboxes managed together instead of across three control panels.
Free on every Footprint-Free plan
Email is part of the Footprint-Free package, not an upsell attached to it. The plan grants it; the platform enforces the grant.
- Free 10GB email boxes for every domain, on every Footprint-Free tier — from the 5-site plan at $6/month to the 2,000-site plan.
- Included in the entitlement your plan carries, so email capacity is enforced by the platform rather than trusted to a support note.
- One address per domain or many — give each site the contact address its niche and content actually call for.
- Provisioned with the site, so a domain is live, secured and reachable in the same deploy.
- Mailboxes come with you when you migrate in: our free migrations import existing accounts alongside sites and plans.
- Managed under the same tenant isolation and audit logging as every other privileged action on your account.
Sending mail from your sites
Receiving mail is the easy half. Getting a WordPress contact form, a WooCommerce order confirmation or a password reset to actually land in an inbox is the part that quietly breaks.
Mail from every mailbox we provide leaves through our own mail relay, which we run ourselves — never straight from a shared web server. Every sending address has matching reverse DNS, every connection that supports it is encrypted, and delivery uses only the addresses our own records vouch for.
You never paste a DNS record. As soon as a domain has mail with us, we write its MX, SPF, DKIM, DMARC, TLS-reporting and autodiscover records ourselves, and our mail servers sign every message with keys that rotate on their own. If one of those records is later changed or deleted, we spot it at your domain's own nameservers and put it back. The only time you see a record is when your DNS is hosted somewhere we cannot write to — then the mail screen shows exactly what to add.
Sending is rate-limited per mailbox and per domain. That is deliberate: a stolen password or a compromised WordPress install trying to blast spam is the most common way a host's addresses get blocklisted, and a per-mailbox ceiling contains the damage to the account that caused it — while an ordinary inbox or a busy shop never comes near it.
Reputation protection, in detail
Mail reputation is shared infrastructure. We treat spam-sending sites as an operational emergency, with a graduated, audited response rather than a blunt switch.
Per-mailbox sending limits
Every mailbox and every domain has a ceiling on how much it can send through our relay, and delivery to each receiving provider is paced rather than burst. A stolen password hits the ceiling long before it hits a blocklist, which buys time to fix the cause instead of appealing to a reputation service.
Mail-log monitoring
We watch outbound volume spikes, bounce rates, RBL and spam-trap hits and feedback-loop complaints — the signals that show a problem while it is still small.
Correlated with malware scanning
A spam signal plus an Imunify360 malware finding is high-confidence evidence of the same compromise, which lets us act on the cause rather than the symptom.
Graduated enforcement
Outbound spam is throttled first, then the site moves to restricted — outbound mail off, site still visible — and only escalates to suspended if the sending continues. Every step is audit-logged.
Isolation by design
Per-site CageFS isolation and LVE limits are built to contain a compromise to the cage it happens in, so one hacked site is not an open door to the mail of every other site on the server.
An abuse desk that answers
Inbound abuse and DMCA reports land in a real intake queue, aggregated and prioritised — so a complaint about your network gets reviewed by a person, not auto-actioned by a script.
Managed by API, Terraform and AI
Mailboxes are platform objects like sites and DNS records. Anything you can do in the dashboard, you can do in code — or ask an agent to do for you.
- Public API: mailbox create, update, list and delete are part of the documented API, generated from the same OpenAPI spec as everything else — so the SDKs and CLI have them the day the endpoint ships.
- Terraform: manage sites, domains, DNS, mailboxes and plans as infrastructure-as-code, and apply the same mail layout across a hundred domains from one configuration.
- MCP: connect Claude, Cursor, ChatGPT or any MCP-capable agent to your hosting and ask it to add a forwarder or provision a mailbox in plain language.
- Scoped and safe: agent access uses OAuth 2.1 tokens bound to your organisation and RBAC permissions, tokens are per-tool and revocable, and destructive actions require explicit confirmation.
- Fully audited: every mailbox action — panel, API or agent — is recorded with the identity that performed it.
No lock-in, by architecture
Customer mailboxes sit behind a MailDriver adapter, a defined interface with the mailbox, forwarder, autoresponder and webmail operations declared on it. Today that interface is implemented on our own mail servers, which we run ourselves, with SPF, DKIM and DMARC published for every domain you add mail to.
That is a deliberate engineering choice, and the abstraction is the point. When customer mail moved onto our own servers, mailboxes, their folders and their messages were copied across and counted folder by folder — the interface stayed the same, so nothing about how you manage mail had to change. The same seam means adding capacity region by region, or bringing in a specialist operator for a particular workload, is a business decision rather than a re-architecture.
The same principle runs through the platform: payments, DNS, registrars, CDN and mail all sit behind swappable adapters. You are never holding a configuration that only one supplier can honour.
Choose your mail provider — or resell one
Not everyone wants the same mailbox. Pick the provider that fits, and we wire the DNS and provisioning for you — our own mail, or a seat on a name your team already knows.
Google Workspace
Resell Google Workspace seats through the catalogue and provision them for your customers, or connect an existing Workspace in one click — we write the DNS and leave the mailboxes with Google.
Microsoft 365
Resell Microsoft 365 seats or connect an existing tenant, with the DNS preset applied for you so mail flows without a manual record-by-record setup.
Our own mail, included
Prefer to keep it in-house? Our own mailboxes are free on every Footprint-Free plan and managed in the same panel — no third-party account to buy or wire up.
One-click DNS presets and device autoconfig
The part that usually goes wrong — the records and the phone setup — is the part we automate. Pick a provider and the whole record set is written for you; hand a mailbox to a device in one tap.
- Pick Google Workspace, Microsoft 365 or our own mail and we write the whole record set — MX, SPF, DKIM, DMARC and autodiscover, plus TLS reporting on our own mail — onto your DNS for you. Nobody hands you a list of records to paste, and on our own mail the records are checked and repaired automatically after that.
- Connect an existing Workspace or Microsoft 365 in one click, or provision a new account, without editing records by hand.
- Mailbox device autoconfig: every mailbox has a Set up on a device panel carrying its own server names, ports, encryption and username, with a copy button on each — plus an Apple profile that fills them in for an iPhone, iPad or Mac. Outlook and Thunderbird configure themselves from the address alone.
- The presets run on the same DNS driver as the rest of your zone, under the same origin-record protection — mail records are written, hosting records stay locked.
- Apply a preset across many domains at once, from the dashboard or the MCP, so a whole network gets working mail in one bulk action.
FAQ
How much email do I get, and what does it cost?
Every Footprint-Free plan includes free 10GB email boxes for each domain you host — it is part of the plan entitlement, not a paid add-on. There is no separate mail bill and no per-mailbox charge on those plans. Mailbox provision on other product lines depends on the plan you choose, so check the plan detail at the point of purchase.
Can I keep using Google Workspace or another mail provider instead?
Yes. You manage your own DNS records in the panel, MX included, so you can point mail at any provider you prefer while your sites, SSL and backups stay with us. The included mailboxes are there if you want them, not a condition of hosting.
What happens if one of my sites starts sending spam?
Almost always the cause is a compromised WordPress install. Outbound sending is throttled first; if it continues the site moves to restricted, which turns outbound mail off while leaving the site visible; and it escalates to suspended only if sending persists. You are alerted at each step, the malware scan runs in parallel to find the root cause, and every action is logged. Restricted status lifts on remediation.
Does someone else's compromised site put my mail at risk?
The platform is built to contain that rather than hope it never happens. Every site runs in its own CageFS cage with LVE resource limits, outbound sending is capped per site, and mail-log signals are correlated with malware scanning so a compromise is caught while it is small. Containment is the design goal — no host can promise a shared platform is risk-free, so we build to limit the blast radius and act fast.
Do you run your own mail servers?
Yes. Customer mail runs on our own mail servers, delivered through our MailDriver adapter — a defined interface rather than a dependency on any one operator. Because mail sits behind that interface, adding capacity or changing how it is run is an operations decision rather than a rebuild, and it changes nothing about how you manage mailboxes.
Will my transactional site email actually get delivered?
Mail from the mailboxes we provide leaves through our own relay, never directly from a shared web server, and we write its SPF, DKIM, DMARC and TLS-reporting records for you — then keep checking them and put back anything that goes missing. We cannot control a recipient's own filtering, so what we guarantee is the part that is ours: correct records, signed mail and paced, encrypted delivery.
Can my AI assistant manage mailboxes for me?
Yes. Our MCP server exposes email actions — mailboxes and forwarders — to any MCP-capable agent, including Claude, Cursor and ChatGPT. The agent is bound to your organisation with OAuth 2.1 and can only do what your RBAC permissions allow, destructive actions require explicit confirmation, and every call is written to the audit log.
Do mailboxes transfer when I migrate to Zinn Digital®?
Yes. Migrations are free and hands-on, and existing mailboxes are imported alongside your sites, plans and billing history rather than being left for you to rebuild by hand.
Related
Give every domain a working address
Start a card-free 14-day trial — no card, 14 days, up to five Footprint-Free sites — with free 10GB mailboxes on every domain, free migrations and a 30-day money-back guarantee behind everything.
Start free