CSA STAR Registry

Wenvia Global Solutions Pvt Ltd operates WenMail (https://mail.wenvia.global), a multi-tenant email hosting platform for businesses needing private, branded email on their own domain. The service runs on a dedicated VPS in India and provides mailbox provisioning, custom domains with full DNS guidance (MX/SPF/DKIM/DMARC), a client portal for self-service, webmail, IMAP/SMTP, anti-spam (Rspamd), and per-domain DKIM signing. Security posture: TLS 1.2/1.3 on all connections, DKIM keys encrypted with AES-256-GCM at rest, account passwords hashed with Argon2, mailbox passwords with SHA512-CRYPT. All API endpoints validate input via Zod and use parameterized SQL via Drizzle ORM. Outbound rate limiting (per-mailbox and per-client) plus fail2ban guard against abuse. Origin isolation separates the admin console (admin.wenvia.global) from webmail (mail.wenvia.global) and the client portal (wpanel.wenvia.global) for XSS containment. Compliance: GDPR-aligned Privacy Policy and DPA published at /privacy and /dpa. Responsible disclosure program via security.txt (RFC 9116) at /.well-known/security.txt. Complete audit trail of administrative actions stored in PostgreSQL. Operated by a solo founder (Avinash S, CEO of the company); onboarding first commercial client. Customers retain full domain portability and can export data at any time via IMAP, CSV, or Maildir archive.