Emails are considered sensitive data in any organisation. Therefore, it is critical to protect the email server from attacks and other malicious activities.

In addition to the content of email, the metadata generated in everyday communication is also important - that is information generated and exchanged by software and devices used for sending and receiving emails. For attackers, metadata is often more important than the content of the letter itself, because it carries accurate information about the digital context of communication. Metadata is stored on the mail server, so its protection is specific. The basic step in this direction is to block all protocols (for example, FTP or HTTP) that the server does not need to perform its primary function, i.e. receiving and sending emails. A dedicated server can be rented as part of a hosting package or other services, or an organisation can purchase a server with special software. An example of such software is iRedMail.

Alternatively, organisations can switch to Proton for Business encrypted email solution, which offers special pricing for non-profits.