Appearance
Data & Security
This page summarizes how Mailisk stores message content and the controls that are available to keep test data isolated.
Storage & retention
- Each email or SMS record includes an
expires_timestamp. Once that timestamp passes, the payload and any attachments are permanently deleted. See Email Retention and SMS Testing for plan-specific durations. - Namespaces created on free plans expire after 30 days. When this happens, the namespace subdomain is released and every message inside of it is removed. Paid plans keep namespaces active indefinitely—see Namespace Expiration.
- Attachments are stored on Mailisk infrastructure (Backblaze B2 object storage) and are served back verbatim through the Get Attachment endpoint. Run your own anti-malware tooling before opening files in your environment.
Access controls
- Mailisk authenticates every API request with the
X-Api-Keyheader. - Shared-email links expose the exact email you mark as shareable, as well as the attachments belonging to that email.
