Features
What AnnexGroup brings
The complete overview. What is not included is listed on the page Moving from Exchange — that is where it belongs, because that is where people look for it.
- SMTP with STARTTLS, its own queue and retries with increasing delay
- IMAP with STARTTLS for any mail client you already use
- DKIM signing of outgoing messages, key generation built in
- Suggestions for all required DNS records (A, MX, PTR, SPF, DMARC, DKIM, MTA-STS, TLSRPT)
- Sieve filters for rules that run on the server
- Out-of-office reply and forwarding per user
- Signatures, automatically appended to the text and HTML parts
- Rspamd and ClamAV integration for spam and virus checking
- Non-delivery reports to local and external senders
- S/MIME certificates managed per user
Groupware
- Calendars with month, week and list views, invitations via iMIP
- Contacts with photos, vCard import and export, social network accounts
- Tasks with drag-to-prioritise, due-date warnings, status
- Notes with tags and filters
- Shared spaces for teams — with their own calendar, contacts, tasks and notes
- Sharing between users, read or write
- Colour-coded categories, consistent across all areas
- Full-text search across messages, contacts, notes, appointments and tasks
- Smart mailboxes: Unread, Today, Important
Access
- Web interface for all current browsers, light and dark
- Installable on the home screen as a web app, with an offline foundation
- CalDAV and CardDAV for iPhone, iPad and Mac — set up via
/.well-known - IMAP for Apple Mail, Outlook, Thunderbird and others
- OAuth2 and API keys for your own integrations
- German and English interface
Administration
- Setup wizard for the first start: domain, account, DNS
- Management of domains, users and agents
- Roles: root account, administration, user — with emergency access
- Self-check with a traffic-light display, every five minutes
- Dashboard with key figures and a live log
- Queue inspection and intervention
- Backup and restore from the interface — configuration, database and attachments
- Developer area with API overview and health checks
- Demo mode with sample data to try things out
Security
- TLS everywhere, Let’s Encrypt built in or upload your own certificates
- Login-attempt protection: counting per address and account, temporary lockout
- Blocklists for addresses and ranges, with protection against locking yourself out
- Presets: strict, balanced and development
- Cookie sessions with cross-site request protection, request rate limiting
- Log of security-relevant events
- Signed licence files, verified locally — no phone-home to us
Dependencies: The core uses exclusively libraries under permissive licences (MIT, BSD, Apache-2.0, MPL-2.0). Copyleft components only run as separate services alongside it, such as Rspamd and ClamAV. An automated test checks this on every change.