Security
External API designed to stay locked down
Developers integrate PSend for bulk and transactional mail. Keys, signatures, rate limits, and reputation gates keep that surface safe.
Secure by default for production senders.
Hashed API keys
Keys stored hashed. Rotate anytime.
HMAC webhooks
Verify every event with X-PSend-Signature.
Rate limits
Planet-managed limits protect your pool.
TLS everywhere
Encrypted in transit, end to end.
Account gate
5% bounce / 0.1% complaint thresholds throttle risk early.
Controls that matter in production
API keys
Bearer tokens (`ps_live_` / `ps_test_`). Rotate anytime. Never embed live keys in React Native, Expo, or Flutter binaries — call PSend from your backend.
Webhooks
HMAC-SHA256 signatures via X-PSend-Signature. Verify before trusting delivery events.
Rate limits
Per-plan RPS and bulk batch caps are enforced at the gateway and managed in Planet.
Account gate
Bounce ≥5% or complaint ≥0.1% freezes sending until Planet reviews the explanation.
Deep dive: Security docs → and Webhook docs →