Mail platform
Operate mailcow components, Docker, proxy and certificates.

We install, migrate and operate mailcow as a mail and groupware platform - including SOGo, DNS, SPF, DKIM, DMARC, spam filtering, backups, updates and monitoring.
Companies worldwide trust WZ-IT
The following are trademarks of their respective owners: mailcow: dockerized (the mailcow project). WZ-IT is an independent service provider and has no business, partnership, or contractual relationship with these companies. We offer independent migration, installation, hosting, and operations services.

mailcow combines SMTP, IMAP, webmail/groupware, spam filtering, antivirus and administration. Successful mail operations additionally depend on DNS, reverse DNS, IP reputation, certificates, storage, queues and effective abuse protection.
We install new mailcow systems, take over existing environments and migrate domains and mailboxes. Updates, backups, monitoring, DNS checks and technical incident response can be bundled as a continuous managed service.
WZ-IT configures SPF, DKIM, DMARC, PTR, TLS and mail flow correctly and monitors relevant signals. Recipient filters, sender reputation, content and compromised-account behaviour are not completely under our control.
Legal archiving, e-discovery and immutable retention are not automatic mailcow capabilities. These requirements need a separate archiving and compliance design.
DNS, SMTP, IMAP, groupware, filtering, storage and user administration are maintained together because faults anywhere can affect communication.
Operate mailcow components, Docker, proxy and certificates.
Control SMTP, IMAP, SPF, DKIM, DMARC and PTR.
Implement mailboxes, quotas, MFA, spam and abuse protection.
Own updates, monitoring, backups and restart.
WZ-IT operates the technical service; account use, content, legal retention and approvals remain within the organisation.
| Area | Responsibility | Scope and boundaries |
|---|---|---|
| mailcow and infrastructure | WZ-IT | Installation, hardening, updates, monitoring and technical maintenance. |
| DNS and deliverability technology | WZ-IT | SPF, DKIM, DMARC, PTR, TLS and relevant mail-flow checks. |
| Backups and restore | WZ-IT | Back up agreed components and test recovery in a controlled way. |
| Domains, accounts and quotas | Shared | WZ-IT implements approved structures and administrative processes. |
| Content and account use | Customer | Lawful use, password hygiene and business communication. |
| Migration and archiving | Optional WZ-IT service | Mailbox migration, journaling and separate archives are planned by project. |
Administer mailboxes, aliases, lists, quotas and domains in a controlled way.
Provide webmail, calendars, contacts and supported synchronisation paths.
Configure and monitor Rspamd, ClamAV and policies around your mail flow.
Configure DNS authentication, reverse DNS and transport encryption correctly.
Move mailboxes, domains, DNS, Outlook, mobile and other clients in a controlled process.
Monitor mail data, configuration, databases, queues, certificates and resources.
Assess existing data and configuration, migrate them in a test run and move to managed operations through a controlled cutover.
Secure SSO, roles, administrative paths and external access for the application and existing infrastructure.
Back up all stateful components consistently and document the recovery path for the agreed scope.
Monitor and update the application and its technical dependencies and operate them under the agreed service level.
A clearly defined operating scope instead of an opaque hosting flat fee.
We set up a test instance for you, usually on the next business day. No payment details required. After seven days it is deleted unless you continue.
We combine the right compute size with ongoing operations, backups, monitoring and a service level appropriate for the criticality of mailcow. High availability and recovery targets are designed separately where needed.
We also design custom hosting architectures, integrations and migrations around mailcow. Contact us for a technical assessment.
One managed standard mailcow application is included in the Starter workload. Business and higher levels add a flexible operations allowance for planned work during regular service hours. Select compute, additional applications, storage and the appropriate service level.
A workload is one compute instance with the applications agreed for it.
One standard app per workload is already included. Additional dedicated servers count as separate workloads.
€79.90 per started TB and month, including daily encrypted offsite backup with 7-day retention.
Enquiry
Briefly describe the current state and objective for mailcow. We assess infrastructure, integration, and ongoing operations.
Mailbox count, storage growth, message rate, spam scanning, groupware use, backup windows and retention determine resources and operating cost.
| Usage scenario | Technical starting point | Key factors |
|---|---|---|
| Small organisation | Dedicated mail server | A manageable number of domains, mailboxes and storage profiles. |
| Many mailboxes or groupware use | Performance and storage assessment | Memory, I/O, search, synchronisation and backup are considered. |
| Large data migration | Migration assessment | Source, data volume, delta sync, DNS and cutover are designed. |
| Critical communication | Operations assessment | Recovery, replacement service, queues, response and communication are defined. |
The calculator covers an operated standard mailcow server. Mailboxes, storage, migration, backup target, DNS access, provider, higher response tiers and archiving needs are added after technical discovery.
A mail server requires a suitable static IP, controllable reverse DNS, clean network paths and sufficient local storage.
Dedicated mailcow environment with a suitable provider and managed operations.
Only where mail ports, PTR, IP reputation and provider policies fit.
Possible with suitable redundant connectivity, IP and operating design.
Connect mail to external gateways, archiving or internal directories.
Public mail endpoints are hardened while administration, backups and optional directory or archive services use separate access paths.
SMTP, IMAP, webmail, calendars, contacts and supported clients.
MX, PTR, SPF, DKIM, DMARC and protected client access.
Mailboxes, aliases, MFA, quotas and administrative roles.
Mail transfer, IMAP, SOGo, filters, antivirus and administration.
Performant persistent storage with capacity monitoring.
External dependencies and optional compliance services.
Queues, delivery, certificates, blocklists, resources and recovery.
Recovery is not invented during an outage. DNS changes, certificates, mail queues, data state and client behaviour are included in restart documentation.
Answers about migration, deliverability, backup, archiving and continuous operations.
Yes. We plan inventory, test migration, delta synchronisation, DNS cutover, client changes and rollback according to the source system.
No provider can guarantee acceptance by external recipients. We configure authentication and mail flow correctly, monitor reputation and errors and resolve technical delivery issues.
Within the agreed managed scope we back up mail data, databases and configuration with defined retention. Restore scope and test interval are specified in the proposal.
No. Binding retention, immutability, search and deletion policies need a separate archiving system with business and legal approval.
Certain identity and provisioning paths can be integrated, but they must fit the deployed mailcow version, directory and expected client behaviour. We assess this specifically.
As an alternative to managed hosting in the data centre, WZ-IT provides the hardware, configures mailcow, and handles hardening, monitoring, updates, backup and technical support. Access can be limited to the internal network or enabled through VPN and existing identities.
from EUR 349 excl. VAT / month · plus one-time provisioning and initial setup

These solutions are often used together with mailcow
These solutions offer similar functionalities and can be evaluated together
No risk: worst case, you leave with a clearer understanding of your project than before.


“WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.”
Whether a specific IT challenge or just an idea - we look forward to the exchange. In a brief conversation, we'll evaluate together if and how your project fits with WZ-IT.