Data flow
- A mailbox provider creates an aggregate report for a connected domain.
- The report is delivered to the domain's unique RUA address.
- The receiver applies transport, message and archive limits.
- An accepted original is stored privately.
- Processing extracts report metadata, sources, counts and authentication results.
- The associated account can view derived results.
Infrastructure
Cloudflare services are used for public delivery, access protection, application execution, DNS and object storage. Email delivery and operational systems may involve additional infrastructure providers as the receiver is separated and scaled. Provider access is limited to what is needed to operate the service.
A maintained subprocessor and retention schedule will be published before paid service begins.
Roles and customer choices
The legal role of each party can depend on the organisation, report contents and use of the service. Customers control which domains are connected and can withdraw reporting by removing the RUA URI and disconnecting the domain.
- Use aggregate rua reporting only.
- Avoid forensic ruf reporting to this service.
- Limit account access to authorised personnel.
- Contact us before onboarding a domain with unusual regulatory requirements.
Security boundaries
Report reception and application access are designed as separable components. Size, expansion and file-count limits are applied to untrusted input, and the customer application remains protected by authentication and access controls.