Security

Last reviewed: May 2026

We take the security of wisemail.io seriously. Here is how we protect your data and what to do if you find a vulnerability.

HTTPS

All traffic between your browser and wisemail.io is encrypted using TLS. HTTP requests are automatically redirected to HTTPS. We use an A-rated SSL configuration.

No server-side signature storage

Your signature content (name, title, company, phone, email, socials, design settings) is processed entirely in your browser via Livewire. This data is never persisted to our database or any external storage.

If you upload a profile photo, it is temporarily stored to generate a preview URL. Uploaded files are not associated with any user account and are not retained beyond your session.

Infrastructure

Application built on Laravel, a battle-tested PHP framework with built-in CSRF protection, input validation, and output escaping
Dependencies kept up to date; security advisories monitored via Composer
No user authentication system reduces the attack surface significantly

Responsible disclosure

If you discover a security vulnerability in wisemail.io, please report it responsibly. Do not publicly disclose the issue until we have had a chance to address it.

Report vulnerabilities to: hello@wisemail.io

We will acknowledge receipt within 48 hours and aim to resolve confirmed vulnerabilities within 30 days.