Customer or authorized DNS administrator
- Controls domain settings.
- Approves the email provider.
- Approves DNS changes.
- Publishes records or delegates authorized access.
- Approves cutover timing.
BUSINESS EMAIL · DOMAIN AUTHENTICATION · MIGRATION
Novatelia helps businesses plan and configure professional email on their own domains. Depending on the agreed scope, work may include Microsoft 365, Google Workspace or a named mail host, along with mailboxes, migration, DNS records, anti-spam controls, backup planning and administration handover.
Domain mail. Business email at Novatelia is mailbox setup on the customer’s domain, including migration from the system they leave. The domain and the mail environment stay under the customer’s authorized ownership. No subscription price is published, and delivery into every inbox is not guaranteed.
Every engagement includes the records named in the approved scope.
Inbound mail runs from an external sender, through an MX lookup for the recipient domain, to the receiving service, through the filtering that service applies, and into the authorized mailbox. Outbound mail runs from an authorized client or application, through the selected sending service, through message authentication, to the recipient’s mail service. Routing, sender authentication, filtering, mailbox administration, and backup are separate.
Conceptual email architecture — not a live mail server or customer configuration.
01
The mailbox domain belongs to the customer. Novatelia does not become the domain owner by configuring mail.
02
The party who controls the DNS zone publishes records. A delegated administrator may execute a change the domain owner has approved. This page does not change DNS.
03
MX records name the mail exchangers that should receive mail for the domain. They do not authenticate who may send.
04
The platform is Microsoft 365, Google Workspace, or another host the requirement names. Capabilities follow that platform and its licenses.
05
A mailbox is a destination with its own store. An alias is an extra address on a mailbox. They are not the same object.
06
A shared mailbox is a mailbox with delegated access. A distribution group expands to members and does not by itself store a separate mailbox. Send-as and send-on-behalf are further permissions.
07
SPF names authorized sending infrastructure for the SPF identity. DKIM adds a cryptographic signature for a signing domain. DMARC checks alignment with the visible From domain and applies the policy the domain owner published. SPF alone does not establish DMARC alignment.
08
Filtering uses the controls the platform provides. It can reduce unwanted mail. It does not promise an empty junk folder or a blocked malicious message every time.
09
Mail moves from the agreed source during a window the customer authorizes. Calendar migration is included when the source can export it. Zero downtime is not offered.
10
A backup method is selected when a copy outside the live mailbox is required. Administrators receive the records for the work that was agreed.
Customer-tenant business email. Mailboxes, shared access, calendars, and administration follow the licenses in that tenant.
Customer-account business email. Gmail and the related collaboration features follow the edition the customer holds.
A supported service used only when the requirement names it. It is not assumed to match Microsoft 365 or Google Workspace feature for feature.
Evaluation covers mailbox needs, shared access, calendars, migration compatibility, administration, identity, security features, data requirements, backup options, and licensing. No subscription price is published.
Individual mailboxes, aliases, shared mailboxes, and distribution groups are planned with ownership and a user lifecycle. An alias is not a separate mailbox. A shared mailbox is not a distribution group. Opening a shared mailbox is not the same permission as sending as that address. Exact behavior depends on the platform and the license.
Original mailbox work. Each item is included when the scope names it.
MX handles incoming delivery direction. SPF, DKIM, and DMARC relate to sender authentication and the domain owner’s policy. No DNS record on this page is a production value, and no pass result is shown.
01
An MX record identifies a preferred destination mail exchanger for incoming mail, with a preference value. It answers where to deliver. It does not list who may send, and a sample value on a diagram would not be this customer’s zone. No record on this page is production-ready.
02
SPF publishes the infrastructure authorized to send for the domain identity SPF evaluates. It is not a universal list of everyone allowed to use the visible From address. Receivers apply a lookup limit. A passing SPF result does not by itself create DMARC alignment.
03
DKIM signs selected message content with a key the domain publishes, usually through a selector. A valid signature supports authentication and an integrity check for what was signed. It does not prove the message is benign, and the selector is taken from the platform, not invented here.
04
DMARC evaluates SPF and DKIM results for alignment with the visible From domain and applies the published policy: none, quarantine, or reject. The domain owner chooses the policy. Monitoring is the safer start when legitimate senders are not yet known. One policy is not correct for every domain.
Original domain and filtering scope.
01
Every service that sends as the domain is listed, including third parties, before a policy is tightened.
02
SPF and DKIM are configured for those senders, as each platform supports them.
03
Results are checked for alignment with the visible From domain. A pass on one mechanism is not alignment by itself.
04
A policy of none, with reporting where the owner wants reports, lets failures be seen before mail is rejected.
05
Forwarding, mailing lists, and indirect flows can break alignment. Those cases are reviewed before the policy changes.
06
Quarantine or reject is a later decision the domain owner accepts. p=reject is not prescribed for every business. A wrong policy can reject legitimate mail. No DMARC report is invented here.
Spam classification, phishing indicators, sender reputation, authentication checks, user reporting, quarantine, and administrative review exist only as the chosen platform provides them. Filtering can reduce risk. It does not guarantee that every malicious message is blocked or that legitimate mail is never quarantined. No detection rate is stated, and this page is not a managed security operations service.
01
The source might be a hosting mailbox, Microsoft 365, Google Workspace, or another system the customer names. Support is confirmed for that source.
02
The mailboxes and aliases in scope are listed. Anything absent from the list stays behind.
03
Mail is the default conversation. Contacts, permissions, and other objects are included only after a compatibility review.
04
The target platform, the licenses, and the domain verification have to be ready. Licenses are the customer’s. No mailbox price is published.
05
Calendar migration is conditional on the source and the tool. Not every calendar object moves.
06
The customer approves the window. DNS TTL reduction can be a planning step. It does not guarantee instant propagation.
07
A sample of mail and the inbound and outbound routes are checked. The check is not a guarantee of inbox placement.
08
What did not move is written down with the administration notes. The timeline on this page is not a completed migration.
DNS planning, the approved maintenance window, current routing, any period when source and target coexist, mailbox readiness, user communication, inbound and outbound checks, and exception handling are part of the cutover. Monitoring after cutover exists where the contract includes it. TTL reduction is a planning consideration, not instant propagation. An interruption-free cutover is not promised.
MFA where the platform offers it, administrative access, account lifecycle, authentication policy, shared-mailbox delegation, and the platform’s own suspicious-sign-in signals are specified for the host that was chosen. Role permissions follow that host. Platforms differ. No login form is provided.
A live mailbox, a synchronized mailbox, native retention or recovery, an independent backup, and a restore test are different. Coverage depends on the platform, the mailbox data the product supports, the retention that was approved, the destination, and the restore the agreement includes. Mailboxes are not described as backed up automatically, and no retention period or recovery guarantee is invented.
Backup and Disaster RecoveryHuman communication through company mailboxes and authorized users.
Application-generated messages such as account notices, orders, and system notifications, with their own infrastructure, reputation, authentication, volume, and monitoring.
Deliverables apply to the work that was in scope. Passwords, mailbox contents, and sensitive configuration are not published.
01
The customer, or the administrator they authorize, controls the domain and approves the mail platform and the DNS changes.
02
MX directs inbound delivery. SPF, DKIM, and DMARC speak to sending authentication and the domain owner’s policy. The values come from the chosen platform and are published by the zone owner.
03
Mailboxes, aliases, shared mailboxes, and distribution groups are created for the people and the addresses in scope.
04
The cutover window is agreed. A backup method is selected when a copy outside the live mailbox is required.
Possible checks include domain verification, MX resolution, an SPF evaluation the design approved, DKIM signing, DMARC alignment, internal mail, external inbound delivery, external outbound sending, shared-mailbox permissions, a migration sample, and a backup restore where backup was included. Configured, tested, verified, and accepted are different states. No pass badge and no inbox-placement guarantee are shown.
Business email is mailbox service on a domain the organization owns, used by its people. At Novatelia that means domain mail: setup, an agreed migration, authentication records, administration, and a backup method when one is required.
It is an address at the organization’s own domain, delivered to a mailbox on the platform the design names, rather than a consumer mailbox the company does not control.
The organization confirms domain and DNS control, chooses Microsoft 365, Google Workspace, or a named host, and agrees mailboxes, authentication records, and a cutover. Novatelia prepares the values and verifies them with the domain owner. Prices are not listed on this page.
Yes, within an agreed scope: mailboxes, migration from the system the customer is leaving, and the DNS records the domain owner publishes. The domain remains the customer’s.
The customer owns the domain and the mail environment. Novatelia does not take ownership by configuring it.
MX for inbound delivery, SPF for the sending infrastructure, DKIM signing for those senders, and a DMARC policy the domain owner accepts. The exact values come from the platform. Examples on this page are illustrative and are not a customer zone.
An MX record identifies the preferred mail exchangers for incoming mail. It does not authenticate senders.
SPF is the Sender Policy Framework. It publishes authorized sending infrastructure for the domain identity SPF evaluates. It is not a universal allow-list of visible From addresses, and it does not by itself establish DMARC alignment.
DKIM is DomainKeys Identified Mail. A cryptographic signature, published through a selector, supports authentication and an integrity check of the signed content. A valid signature does not prove the message is benign.
DMARC checks whether SPF or DKIM results align with the visible From domain and applies the domain’s policy: none, quarantine, or reject. The domain owner publishes the policy.
MX directs where inbound mail is delivered. SPF declares which infrastructure may send for the SPF identity. They answer different questions and both can be required.
SPF and DKIM produce authentication results. DMARC looks for alignment of those results with the visible From domain and applies the policy. All three are configured for the services that actually send. Together they do not eliminate spoofing, spam, phishing, or every deliverability problem.
No. DMARC helps receivers apply the domain owner’s policy to unaligned mail. It does not stop every phishing message, including messages that do not spoof the organization’s exact domain.
None asks receivers to report or take no policy action. Quarantine asks them to treat failing mail with suspicion, often as junk. Reject asks them to refuse it. The domain owner chooses, usually after monitoring.
No. Rejection is unsafe until legitimate senders authenticate and align. The published approach starts where monitoring is safer than rejection.
Yes. An incorrect MX can send inbound mail to the wrong host or to none. An incorrect SPF, DKIM, or DMARC policy can cause legitimate mail to be rejected. Records are checked against the platform’s values before cutover.
No. The party who controls the zone publishes MX, SPF, DKIM, and DMARC. Novatelia supplies the values and verifies them.
Mail can be migrated from the agreed source when the tool and the permissions support it. The scope is the inventory. Fidelity depends on the source and the target.
Hosting mail can be a source for Microsoft 365 when the migration method supports that host. The result is validated for the mailboxes in scope. It is not assumed for every control panel.
Google Workspace can be the target when the source method supports the mail in scope. The move is specified for that account. It is not automatic.
Calendars migrate when the source can export them and the target can accept them. Calendar migration is conditional. Not every calendar object is promised.
No. The cutover is planned inside an agreed window. DNS changes propagate according to TTL and resolver behavior. An interruption-free cutover is not promised, and zero data loss is not promised.
An alias is an additional address that delivers to an existing mailbox. It does not create a separate store or a separate sign-in.
A shared mailbox is a mailbox that several authorized people can open, subject to the platform’s license and permission model. Access to the mailbox and permission to send as it are different grants.
A distribution group sends a message to its members. It is not a mailbox, unless the platform also provides a separate shared mailbox that was explicitly created.
A shared mailbox has its own store and delegated access. An alias is only an extra address on a mailbox. A distribution group is a third object: it expands to recipients.
The platform can classify spam, use sender reputation, check authentication, quarantine suspicious mail, and let users report messages, where those controls exist. Administrators review what the policy quarantined. Legitimate mail can still be quarantined, and malicious mail can still arrive.
No. Filtering reduces unwanted mail. It does not promise an empty junk folder.
MFA where the platform offers it, administrative roles, account lifecycle, authentication policy, and careful delegation on shared mailboxes. Platforms do not all offer the same controls. Suspicious sign-in handling follows the platform’s own signals. This page does not provide a sign-in form.
No. Which mail platform is required? The platform is chosen in the design. Microsoft 365 and Google Workspace are the published productivity options. Another host is used only when the requirement names it.
No. Google Workspace is one published option. It is chosen when the design selects it. It is not mandatory.
No. A live mailbox, a synchronized copy, native retention, and an independent backup are different. A backup is selected when a copy outside the live mailbox is required, and a restore is tested only when that test is in scope.
Business email is human communication through company mailboxes. Transactional email is application-generated mail such as receipts and system notices, with its own sending infrastructure, reputation, and volume. An ordinary mailbox service is not treated as suitable for unrestricted bulk application mail.
Where the scope includes them: domain and DNS notes, the platform, the mailbox and alias inventory, shared access, routing, SPF, DKIM, DMARC, migration exceptions, the backup decision, administrator roles, and cutover notes. Passwords and mailbox contents are not published. Not every project includes every item.
Open the RFQ draft or contact Novatelia. An RFQ saves a browser draft. It does not publish a mailbox price, partner status or quotation reference.
An RFQ saves a browser draft. It does not publish a mailbox price, partner status or quotation reference.
The RFQ page keeps a browser draft. It does not submit a quotation or issue a reference.