Admin, Security & Open Standards

Zero-Train AI Guarantee

In control from the first mailbox.

One admin console for users, domains, and policy—with cryptographic email authentication, hardware passkeys, payment-fraud protection, and open standards built in from day one.

Get started See Agent-Safe Mailboxes & Shield

Workspace Administration

Enterprise controls without enterprise complexity.

Auto DKIM · SPF · DMARCWebAuthn & TOTP 2FA
  • SEC-01

    Two-factor sign-in

    Authenticator codes and backup codes, and a policy to require them.

    Included in every workspaceActive
  • SEC-02

    Single sign-on for your apps

    PGB Business is an OpenID Connect provider for your other tools.

    Included in every workspaceActive
  • SEC-03

    Audit log

    A record of sign-ins, admin changes and workspace activity.

    Included in every workspaceActive
  • SEC-04

    Policies

    Control 2FA, public sharing links and more across the workspace.

    Included in every workspaceActive
  • SEC-05

    Domains and mailboxes

    Your own domains, unlimited aliases and groups, one shared storage pool.

    Included in every workspaceActive
  • SEC-06

    Infrastructure we run

    Mail, storage and the suite run on servers we operate ourselves.

    Included in every workspaceActive

Defense in Depth

How PGB Business protects your domain, data, and payments.

LAYER-012048-bit DKIM · SPF · DMARC · ARC · DANE · MTA-STS · TLS-RPT

Authenticated Mail Transport

Every custom domain is automatically provisioned with cryptographic signing keys and strict transport policies so your outbound mail lands in the primary inbox and spoofed inbound mail is rejected.

LAYER-02Per-Request Nonce CSP · Cookie Stripping · X-Frame-Options DENY

Stateless Share-Host Isolation

Public links for Drive, Docs, Forms, Sign, Invoices, and Meet guests run on isolated share hosts that never receive session cookies or API credentials.

LAYER-03IBAN/Account Diffing · Lookalike Domain Detection · Dual Approval

Two-Key Payment Fraud Shield

When a known vendor's invoice changes bank details, Shield freezes the request and requires out-of-band confirmation plus two human approvals.

LAYER-04Retention Policies · Legal Hold · DLP · One-Click Full Export

Enterprise Compliance & Hold

Business workspaces include immutable audit logs, compliance retention rules, legal hold preservation, and complete portable archives in open formats.

Open by default

Works with what you already use.

Open standards mean your team keeps its favourite apps, and you can always take your data with you.

  • IMAP and SMTP

    Apple Mail, Outlook, Thunderbird and your phone’s mail app.

    Available

  • OpenID Connect

    Your team signs in to your other tools with their PGB Business account.

    Available

  • vCard

    Import and export contacts from any address book.

    Available

  • CalDAV and CardDAV

    Calendars and contacts in the apps you already use.

    In development

  • Office files

    Open and edit Word, Excel and PowerPoint documents.

    Available

  • Bitwarden apps

    Vault works with the Bitwarden browser extensions and mobile apps.

    Available

Our promises

Your business, on your terms.

  • Your data never trains AI

    Your mail and files are never used to train models, ours or anyone else’s.

  • Choose where your data lives

    In development

    Pick the region your workspace runs in when residency matters.

  • Pay your way

    Top up a prepaid wallet or pay by card, monthly.

  • Built on PGBHub

    The same platform that runs Postgres databases, functions and storage, so mail and your data sit side by side.