Providers
Email delivery is provider-agnostic. The same API and the same verified domains work whichever backend is configured — you write to /v1/emails and Orizon handles the rest.
Supported providers
- Amazon SES — production sending with bring-your-own DKIM. Orizon signs with the keypair generated when you verified the domain, sets up the MAIL FROM subdomain, and ingests delivery, bounce and complaint events. Recommended for volume.
- Resend — send through Resend. The domain must also be verified in your Resend account.
- Cloudflare Email— send through Cloudflare's email sending, with SPF/DKIM/DMARC handled when the domain is enabled there.
- Log — the default in development: messages are recorded and given an ID but not actually delivered, so you can build and test without sending real mail.
Operator-selectedWhich provider is active is chosen by whoever runs your Orizon instance (via the
EMAIL_PROVIDERsetting and the provider's credentials). As an app developer you don't pick a provider per send — you just verify your domain and call the API.Why bring-your-own DKIM matters
Because Orizon generates and holds your DKIM keypair, your mail is signed with yourdomain's identity rather than a shared one. That keeps DKIM, SPF and DMARC aligned to your domain and protects your sender reputation independently of other tenants.