Every domain you own, on one mail server you own.

A Linux VPS with Docker, a domain, and the ability to set DNS records. One command installs everything — Postfix, Dovecot, Rspamd, Postgres, the control plane and the webmail — as a Docker Compose bundle. The install guide is the whole of it.

You also need a provider that does not block outbound port 25, and a static IP with reverse DNS you control. That is a hosting question rather than a MailDock one, but it is the thing that most often decides whether self-hosted mail works.

Your incoming mail never does. From 0.13.0 a lapsed licence switches off extras in stages, and never touches the mail you receive:

• Days 0–30: everything works. The admin panel shows a countdown, and the server emails its owners.
• From day 30: new domains, mailboxes, AI features, new sending tokens and starting migrations are refused. Everything else keeps working.
• From day 60: the admin panel is read-only. Security actions (suspending a mailbox, resetting a password), the licence page and backups stay open.
• From day 90, and only once the licence period has ended without renewal (or 90 days after setup on a server never licensed): mail to outside addresses is refused. Receiving and reading mail, and delivery between your own mailboxes, carry on; so do forwards, auto-replies and password-reset links.

The 30 days run from the end of the subscription, or from the server’s last check-in with our licence server if it cannot reach us; a licence key installed on another machine is limited at once, until it is transferred. A server that cannot reach us never loses its outgoing mail: that kind of lapse stops at the read-only admin panel. Renewing restores everything as soon as the renewed key reaches the server (at once if you install it), and cancelling expires the licence at the end of the period you paid for; cancelling never revokes one.

Yes — there is a connector for each, plus generic IMAP. A migration copies mailboxes, folders and flags, runs a delta sync so the mail that arrived during the copy is not lost, and can be resumed if it is interrupted.

The connectors read the source; nothing is deleted there, so you can run a full copy and still cut over whenever you choose.

Only what a user turns on, using a key you supply — Anthropic, OpenAI, Gemini, xAI, Groq, or a local model through Ollama or vLLM, in which case nothing leaves the machine at all.

AI features are per-user opt-in under a per-domain policy, attachments are excluded unless an administrator allows them (and no feature reads one yet), the call log records metadata rather than content (the admin copilot’s tool log keeps its tools’ arguments), and provider keys are encrypted at rest. There is no MailDock inference service, so there is no MailDock copy of your mail.

MailDock generates the records for every domain you add and shows them ready to paste, then verifies them live and alerts you when one drifts. DKIM keys are created for you; rotating one is a click, and the page tells you how long to keep the old record. ARC and SRS are handled on the way through.

It also ingests DMARC aggregate reports and parses MTA-STS and TLS-RPT, so the reports arrive as a dashboard rather than as XML in a mailbox nobody reads.

No. Instead, a first annual licence carries a 30-day money-back guarantee: if it is not right for you, tell us within 30 days of the charge and we refund it in full, however much you used it (the refund policy has the details).

The documentation is public, so you can read exactly how it installs and what it does before you buy.