Research Policy

Our research uses only aggregated and anonymised data derived from our platform operations. We do not use individual email addresses, customer identities, or personal data in research outputs. The data we use includes:

• SMTP response codes: Anonymised counts of deliverability outcomes (valid, invalid, risky, catch-all) by domain-level infrastructure type
• Domain-level MX/DMARC/SPF/DKIM statistics: Configuration quality scores and adoption rates across industry segments
• Email infrastructure trends: Growth in adoption of email authentication standards over time, aggregated by country or industry
• Verification volume trends: Overall platform usage statistics, not attributable to individual customers

While our aggregated research data is de-identified and cannot be used to identify individuals, some enterprise customers prefer to exclude their usage from research datasets entirely. Enterprise customers may opt out of having their usage included in aggregated research by:

• Contacting support@verifox.ai with the subject "Research Opt-Out"
• Navigating to Settings > Privacy > Research Data in your account dashboard

Opting out of research use does not affect your ability to use any Verifox features or your subscription pricing.

When we publish research reports or blog posts based on platform data, we adhere to the following standards:

• All published statistics are based on samples of at least 10,000 data points to prevent statistical de-identification.
• Industry or country breakdowns are only published when the segment contains at least 1,000 data points.
• No individual customer, domain (where that domain could identify a specific company), or person is identified in published research.
• Research is reviewed by our DPO before publication to ensure consistency with our data protection obligations.

Our core verification service involves making SMTP connections to third-party mail servers to test whether an email address is deliverable. We operate this service responsibly:

• We never send actual email messages — we disconnect before the DATA stage of the SMTP handshake.
• We implement rate limiting per domain to avoid impacting mail server performance.
• We honour SPF-based blocking and do not attempt to circumvent anti-abuse measures.
• We maintain clean sending IP reputation through careful abuse prevention and our Terms of Service.
• We comply with RFC 5321 and respect standard SMTP conventions.

From time to time, Verifox may partner with academic institutions or third-party researchers to conduct studies on email security trends. Any such partnerships will be governed by a data access agreement that restricts the partner's use of data to the approved research purpose, prohibits re-identification, and requires pre-publication review. We will update this policy when new research partnerships are established.

For research collaboration inquiries, contact support@verifox.ai.