Deliverability

Inbox placement is a product feature: authenticated domains, separated streams, warm-up, and a content gate.

Separate streams

Transactional mail uses outgoing. Newsletters use broadcast. They do not share volume counters or marketing eligibility. A newsletter cannot “hitch a ride” on appointment traffic.

Warm-up

New tenants start with a daily cap that rises over the first days. Broadcast additionally requires warm-up day ≥ 3 plus verified DKIM and a complete Impressum.

GET /api/practices/{id}/overview and GET …/cutover show remaining go-live checks.

Reputation pause

Werkmail tracks bounce and complaint rates per tenant in Postgres:

Provider-account suppression lists and account-wide max-send-rate are not treated as the only gates.

Content gate

Compose and the API share one scorer (POST …/send/score). High scores, malware, or listed link hosts hard-block the send. Keep appointment mail text-rich: an HTML image with almost no text looks like a tracking pixel farm to spam filters.

Open tracking injects a pixel. Leave tracking off for termin / transactional (the default).

Channel mix and subject risk

curl -sS -H "Authorization: Bearer $TOKEN" \
  "$BASE/api/practices/$PRACTICE_ID/channel-mix?days=7"

curl -sS -H "Authorization: Bearer $TOKEN" \
  "$BASE/api/practices/$PRACTICE_ID/placement?days=14"

GET …/deliverability also includes channel_mix, subject_risk, public-origin health, and Impressum readiness.

DNS that actually aligns

• One SPF on the apex
• DKIM on the From host
• MAIL FROM on bounce.<from-host> with relaxed SPF alignment
• DMARC on apex and subdomain From hosts
• DKIM CNAMEs not proxied

See DNS and authentication and Raw source and branding.

Cheap deliverability advisor

A low-cost engagement advisor runs in Frankfurt by default. It surfaces ISP-level hints in the cockpit. There is no paid “global dashboard” add-on — do not enable extra-cost reputation products on the account.