Skip to content
A—45

Paradigma7 Mail

A mail platform that runs multi-domain email on Stalwart from a single panel

Sector
Personal brand
Country
Türkiye
Category
Custom software
Services
Custom software
Technology
Node.js, Express, PostgreSQL, React 19, TypeScript, Vite, TanStack Query, Stalwart, ClamAV, Z-Push, Docker Compose
Overview and domain screens of the Paradigma7 Mail admin panel on desktop and mobile

01 /

The brief

Hosting email for several customers on your own servers takes more than a mail server: domain and DNS setup, mailboxes and quotas, spam and malware scanning, bounced messages, backups and device settings all need looking after. We built Paradigma7 Mail to bring these jobs into one panel. Underneath runs the Stalwart mail server; the panel adds domain provisioning, mailbox management, quarantine, a delivery tracking centre, alerts and backups on top of it. Super admins see the whole infrastructure, customer admins manage only their own domains, and mailbox owners handle their own settings in a separate portal. Everything is deployed with Docker Compose. A public demo is available; the platform is in development.

Screens

Fresh screenshots from the live site: the full page, inner pages and how it looks on a phone.

Paradigma7 Mail — Sections and inner pages

Sections and inner pages

Paradigma7 Mail — Sections and inner pages
Paradigma7 Mail — Sections and inner pages
Paradigma7 Mail — Sections and inner pages
Paradigma7 Mail — Sections and inner pages
Paradigma7 Mail — On mobile

02 /

Approach

Three decisions that shaped the project.

  1. 01

    Customers never touch the mail server

    The Stalwart admin token stays in the backend. Domain ownership is re-checked on the server for every API request, and in the customer role subjects, full addresses and raw SMTP replies are masked.

  2. 02

    Spam is decided in quarantine

    Messages pass through Stalwart’s spam scoring and a ClamAV scan, with suspicious links assessed separately. Clear spam never lands in Junk; it waits in quarantine, and the AI analysis only recommends — it never deletes a message.

  3. 03

    A backup counts only if it restores

    Every archive is read back, verified and stored with checksums. An isolated restore drill can be started from the panel without touching live data, and a failed drill raises a critical alert.

03 /

What we delivered

  • Domain provisioning, DNS output and one-click Cloudflare records
  • Delivery readiness score for MX, SPF, DKIM, DMARC and PTR
  • Mailboxes, quotas, aliases, forwarding and CSV bulk actions
  • Spam quarantine, ClamAV scanning and DMARC report analysis
  • Delivery tracking centre, outbound queue and alert centre
  • IMAP migration, webmail and Exchange ActiveSync via Z-Push
  • End-user portal, reseller branding and a seven-language interface

Tech stack

  • Node.js
  • Express
  • PostgreSQL
  • React 19
  • TypeScript
  • Vite
  • TanStack Query
  • Stalwart
  • ClamAV
  • Z-Push
  • Docker Compose

The code and the domain belong entirely to our client.

Live now

Visit the live site

demomail.paradigma7.com (opens in a new tab)

Next project

A—46

Teknoser İşitme Merkezleri

A corporate site and PWA for Teknoser Hearing, rebuilt from WordPress in Next.js

Hearing care · Türkiye