Safety is built in, not bolted on.

Each client has an isolated workspace. You own your data. Nothing goes live to your customers without your approval.

01 / Client boundary

One client, one workspace.

Every client runs in its own isolated workspace. One client's data, messages, and customers never touch another's.

Client-owned data

You own the data.

Your data lives in infrastructure provisioned for you, including your database and sending identity. Indigo operates it; you own it.

Where data is hosted

US and Canada.

Client data is hosted in US and Canada regions.

02 / Controlled outbound

Messages pass through a gate before go-live.

Outbound messages move through a controlled pipeline.

01 / Gate

Test before live sending.

Messages pass through a safe/development gate before they reach real recipients.

02 / Approve

You approve go-live.

A human signs off before customer-facing production go-live. Your approval comes before anything goes live to your customers.

03 / Respect the stop

Opt-outs are permanent.

Unsubscribe and permanent-stop are honored across every client workspace. Opt-outs are permanent.

03 / Reporting

Report what the system actually knows.

We never invent numbers. Reports show real data or say ‘not available.’ We do not present fake ROI or vanity metrics as results.

Real data, or
not available.

If a measure has not been established, the report should say it is not available.

Current status

What is still in progress.

Both are in progress. We do not claim either as complete.

In progress

SOC 2 Type II

We are building toward SOC 2 Type II. We do not claim a certification we do not hold.