What's coming to Verkio.

Audit log

Who-accessed-what-when, exposed as both a UI and an API. Stream to your SIEM if you need to.

Public API

REST API with bearer-token auth and SIEM-friendly audit-log export. Argon2id-hashed keys, per-key rate limits, OpenAPI 3.1 spec — point your codegen tool at /api/v1/openapi.json or browse the interactive reference at /developers.

* Webhooks, mailbox/domain CRUD, JMAP passthrough, and OAuth 2 still to come.

Shared mailboxes

Team inboxes for shared addresses like support@ and hello@. Multi-user access, full IMAP/SMTP support, every action recorded in the audit log.

Email aliases and catch-all

Unlimited* aliases per user. Catch-all on your domain so you never miss a misspelled address. Pairs with bring-your-own-domain.

* Subject to reasonable use

Cloud file storage

Private + org-shared file storage with folders, public share links, per-file ACL, multi-GB resumable uploads, and 30-day Trash recovery — all encrypted at rest with EU-managed keys.

Shared mailbox workflow

Team-inbox view for shared mailboxes: assign conversations to teammates, set status (open / pending / closed), and leave internal notes visible only to the team. Same state is exposed as standard IMAP keywords so Apple Mail / Thunderbird / K-9 power users see assignments + status from their existing client. Real-time inbound tracking auto-creates conversations on every new message; auto-reopens closed threads when customers reply.

Server-side rules (Sieve)

Server-side mail filters (Sieve, RFC 5228) you build in the dashboard. Move newsletters to a folder, mute noisy lists, route project mail to the right place — applied at delivery, so the rules fire in every mail client. Five pre-built templates to start from; up to 50 rules per mailbox.

Shared-mailbox per-folder access controls

Grant readers, repliers, or admins per-folder access inside a shared mailbox using RFC 4314 ACL letter sets. Owners and admins can scope an intern to read-only, a senior to label management, or a manager to delete rights — folder by folder or mailbox-wide.

External email forwarding

Forward a copy of every inbound message to an address at another provider — Gmail, Fastmail, your personal inbox. The destination must confirm by clicking a link before forwarding starts; up to 3 forwards per personal mailbox; every change is recorded in the audit log.

Domain auto-setup

Add your domain and we configure MX, SPF, DKIM, DMARC, and autoconfig records for you. No manual DNS work.

Webmail inbox

A fast, keyboard-first web client for Verkio mail — threading, search, and labels without the bloat.

Calendar

Shared calendars, invitations, reminders, and free/busy across the suite. Open CalDAV under the hood — connect Apple Calendar, Thunderbird, or DAVx⁵ from day one and keep every event in sync.

Contacts

Personal and team-shared address books, with CardDAV access from any standards-compliant client. Contacts auto-populate from mail and calendar invites — no manual entry, no platform lock-in.

Internal wikis

Searchable, versioned spaces for runbooks, decisions, and the institutional knowledge your team writes for itself.

Internal messaging

Channels, DMs, and threads for team conversations — searchable, threaded, and built into the same suite as your mail and docs.

Notifications & web push

Bell icon, in-app inbox, and browser push for the moments that matter — new mail, calendar invites, shared mentions, file shares. Per-channel preferences; nothing leaves your control plane.

Discount codes

Apply a code at signup or mid-subscription. Percent, flat-amount, or free-month comp; per-customer redemption limits; restrict to specific plans or billing periods. Pricing transparency on every invoice.

Verkio Schedule

Public scheduling links from your calendar. Like Calendly, but EU-resident, no tracking, and built into the suite.

Send later, snooze, undo send

Schedule a message for tomorrow at 9am. Snooze a thread until Friday. A 30-second grace period to pull back a send.

Installable web app (PWA)

Install Verkio to your home screen on phone or desktop. Offline shell for the inbox, push notifications, and a real-app feel — without a native app store in the middle.

GDPR Article 20 portability export

One-click export of your entire workspace in interoperable open formats — mail as standard mbox, calendars as ICS, contacts as vCard, files in their original formats. Bring it to any other provider. No lock-in, ever.

End-to-end encrypted mail (PGP and S/MIME)

OpenPGP and S/MIME in the webmail, with standard headers so encrypted mail Just Works between Verkio mailboxes and any other PGP- or S/MIME-aware client. Keys you control, never escrowed.

Universal search

One input in the top bar searches Email, Calendar, Contacts, Files, Wikis, and Messages. Grouped results, keyboard-first, sharable URLs. Press / from any page to focus; everything in one place.

Customer-held-key encryption at rest (opt-in)

Optional per-mailbox upgrade: Verkio configures Stalwart to encrypt every incoming message to YOUR PGP public key before writing to disk. Your private key stays in your mail client (Thunderbird / Apple Mail / K-9 / Outlook+PGP). Verkio physically cannot read those messages at rest. Trades web inbox + search + push previews for the strongest at-rest posture. Free on every plan — no Microsoft/Google-style upsell. Default Verkio-managed-keys posture (every account, every plan) is unchanged.

SAML / SSO

Federated sign-in via Okta, Azure AD, Google Workspace, or any SAML 2.0 IdP. Auto-creates Verkio users on first sign-in (JIT provisioning); group/role claims map to org roles and re-evaluate on every sign-in. SP metadata URL exposed in-app for one-click IdP setup. Owner-only configuration.

SCIM and OIDC sign-on

RFC 7644 SCIM 2.0 endpoints — Okta / Entra ID / JumpCloud / OneLogin auto-provision Users + Groups via push, instead of waiting for first sign-in. OIDC sign-on as an alternative to SAML for IdPs that prefer it (Auth0, Okta-OIDC, Entra-OIDC, Google Workspace OIDC, Authentik). PATCH parser handles the documented per-IdP payload variations. Owner-only configuration.

Sign in with Verkio

Privacy-respecting alternative to “Sign in with Google / Apple / Microsoft”. A standard OIDC button any third-party site can integrate — your Verkio account becomes your identity for the open web. EU-resident sign-in flow; no cross-site profiling. Per-site granular consent + a connected-apps dashboard where you revoke any third-party with one click. Free for end users; free for developers in v1.

Boards

Built-in Kanban boards — plan and track work without leaving Verkio. Custom columns, card types, assignees, watchers, and a full activity history.

Forms

Custom forms that route each submission to a mailbox, folder, wiki, board, or webhook — with anti-spam and GDPR consent built in.

CRM

A light CRM on your contacts: pipelines, deals, a weighted forecast, and notes — all EU-resident.

Auto-translate

On-the-fly translation of incoming and outgoing mail across EU languages — EU-resident, no Google or DeepL, free on every plan.

Transparency log

A public, cryptographically verifiable log of subprocessor changes, incidents, and infrastructure updates you can audit independently.

Data subject request portal

A self-serve GDPR portal for your end-users' Article 15–21 requests, with DPO triage against the statutory deadline.