# Deliverability

Inbox placement is a product feature: authenticated domains, separated streams, warm-up, and a content gate.

## Separate streams

Transactional mail uses `outgoing`. Newsletters use `broadcast`. They do not share volume counters or marketing eligibility. A newsletter cannot “hitch a ride” on appointment traffic.

## Warm-up

New tenants start with a daily cap that rises over the first days. Broadcast additionally requires warm-up day ≥ 3 plus verified DKIM and a complete Impressum.

`GET /api/practices/{id}/overview` and `GET …/cutover` show remaining go-live checks.

## Reputation pause

Werkmail tracks bounce and complaint rates **per tenant** in Postgres:

| Signal | Pause when |
| --- | --- |
| Hard bounce | ≥ 5% and at least 20 messages |
| Complaint | ≥ 0.1% and at least 20 messages |

Provider-account suppression lists and account-wide max-send-rate are **not** treated as the only gates.

## Content gate

Compose and the API share one scorer (`POST …/send/score`). High scores, malware, or listed link hosts hard-block the send. Keep appointment mail text-rich: an HTML image with almost no text looks like a tracking pixel farm to spam filters.

Open tracking injects a pixel. Leave tracking **off** for `termin` / `transactional` (the default).

## Channel mix and subject risk

```bash
curl -sS -H "Authorization: Bearer $TOKEN" \
  "$BASE/api/practices/$PRACTICE_ID/channel-mix?days=7"

curl -sS -H "Authorization: Bearer $TOKEN" \
  "$BASE/api/practices/$PRACTICE_ID/placement?days=14"
```

`GET …/deliverability` also includes `channel_mix`, `subject_risk`, public-origin health, and Impressum readiness.

## DNS that actually aligns

- One SPF on the apex
- DKIM on the From host
- MAIL FROM on `bounce.<from-host>` with **relaxed** SPF alignment
- DMARC on apex **and** subdomain From hosts
- DKIM CNAMEs not proxied

See [DNS and authentication](/dns-and-authentication) and [Raw source and branding](/raw-source-and-branding).

## Cheap deliverability advisor

A low-cost engagement advisor runs in Frankfurt by default. It surfaces ISP-level hints in the cockpit. There is no paid “global dashboard” add-on — do not enable extra-cost reputation products on the account.