The lock is applied by the vault, not by the application
Archivia has no power to seal or unseal anything: the object store applies the retention on write, without being asked. Removing the application does not remove the lock.
Immutable email archivingYour email, sealed.
Your email, sealed.
Against you as well.
Archivia archives your company mailboxes and locks every message for the retention you choose. Once written, an email can no longer be altered or deleted before its term — not by an employee, not by an administrator, not by us.
Live within one business day. Cancel at any time.
archivia core / s3-object-lock
worm sealed
from:direction@groupe-artois.fr
to:auditeurs@cabinet-conseil.ch
subject:acquisition agreement & financial exhibits.pdf
sealed metadatarfc-5322 • 1.4 mb
object-lock • retain-until 2036-09-04compliance retention10 years locked
expires: sep 04, 2036The promise
"Immutable" means something specific
Plenty of tools call "archiving" a bin that never gets emptied. The difference shows the day someone genuinely wants a message gone.
The application cannot erase what it wrote
Your instance credentials are scoped to your storage alone, and do not permit deletion there. A compromised instance cannot destroy your archives — at worst it stops adding to them.
Neither can the administrative account
In compliance mode, even the account that administers the storage cannot shorten a retention before its term. That is the property we looked for when choosing the engine, and the one we verified before anything else.
What it does
Archive, find, produce
An archive you cannot extract anything from is worth nothing the day a lawyer, an auditor or an employee asks to see.
Your mailboxes, continuously
Microsoft 365, Google Workspace and IMAP. Synchronisation runs on its own; you connect the mailbox once.
Full-text search
Across message bodies and attachment contents — PDFs, office documents, images passed through OCR.
Retention you choose
You set the term. It applies as each message is written, and runs to its end without intervention.
Export and disclosure
A message or a selection exports in an open format, with what is needed to say where it came from.
Your instance
You are not a tenant in a shared database
Most SaaS products put every customer in the same database, separated by a column. One badly written query is then enough to cross the partition.
With Archivia, subscribing creates your instance: your application, your database, your storage, your network. Nothing is shared with another customer, and the separation does not depend on a query being correct — it is carried by the infrastructure.
- A dedicated database, never a "customer" column in a shared table
- Dedicated storage, with credentials that open yours and nothing else
- An isolated network: your instance cannot reach anyone else’s
- A storage quota of your own
✕
typical multi-tenant saasshared database, software row filtering
client_01msg_1092.eml
votre boîtemsg_8492.eml
client_02msg_3910.eml
risk: a flawed query crosses customer data
✓
archivia: dedicated instanceisolated container, db, storage and network
independent application container
dedicated postgresql (own db)
dedicated s3 bucket (worm object lock)
isolation by design
Getting started
Three steps and it runs
- 1
You subscribe
Payment is handled by Stripe; we never see your card.
- 2
We build your instance
Within one business day. You receive its address and a first administrator account.
- 3
You connect your mailboxes
Microsoft 365, Google Workspace or IMAP. Archiving starts and runs on its own.
Questions
What people ask us
What happens if I cancel?
You export your archives before the instance closes. Whatever is under retention stays under retention until its term: that is the price of immutability, and we would rather say so beforehand.
Can you read my email?
We operate the infrastructure, so technical access exists — claiming otherwise would be false. What bounds it is named, logged access, and the fact that your instance is separate from every other.
What if Archivia disappears?
Your archives sit in an S3-compatible object store, in an open format. They do not need our application to be read — which is exactly why the lock is applied by the storage.
What about an employee deleting a message?
If it has already been archived, it stays in the archive. That is the whole point: the mailbox is a working tool, the archive is a record.
What does it cost?
The price is shown at checkout, on Stripe, before any commitment. For large volumes or dedicated infrastructure, write to us.
Start archiving this week
Open an account, we build your instance, you connect your first mailbox.