Per-brand email sender (SES and DKIM)

The service's emails (address confirmation, access recovery, security notices, activation) can go out with an address of your brand, for example access@brand.example, instead of the installation's default address.

Where do I set the address?

1. Open «Distributor» › «Branding» (or, in an organization, «Manage» › «Branding»).
2. In the «Sign-in texts, email and mark» group, under «Email», fill in «Sender address (blank: inherited; used only on an allowed sender domain or a domain this organization verified, otherwise the default address)».
3. Optionally fill in «Sender name (blank: the organization's name)» and «Show the logo in emails».
4. Choose «Save texts and options».

The address must be a plain lowercase address: «Enter a plain email address in lowercase letters.» Organizations that do not set their own inherit it.

When is the brand's address used?

For each email, the service picks the sender in this order:

1. The «Sender (optional)» of the organization's own email settings («Manage» › «Email»), if its domain is authorized by the operator.
2. The branding's sender address, if its domain is authorized by the operator or is a verified custom domain (TXT proof) of the organization that set the address. This stops anyone using a domain they do not control.
3. Otherwise, the installation's default address.

When the brand's address is used, Reply-To is the same address, so replies reach the brand. The sender name follows the same logic: the organization's email settings, then the branding, then the organization's name.

What else changes with white label?

With white label on, the emails' content names your brand and never the original product. Emails stay in Portuguese.

What does the sending domain need?

Besides the authorization or verification above, the installation's email service (Amazon SES) must be able to send for that domain:

1. DKIM (Easy DKIM): the CNAME records the operator gives you.
2. A custom MAIL FROM domain, for SPF and DMARC alignment.

Without these, the email service refuses the message. Agree the DNS records with the platform before filling in the address.