ZERO CALLS · 48-HOUR SLA · SOVEREIGN ASSET OWNERSHIP

Dedicated Outbound Architecture.Built By Hand. Owned By You.

We engineer enterprise-grade secondary sending infrastructure. Delivered to your sequencer in 48 hours. No client contact. No middleman markups.

Inspect Any Domainin Real-Time.

Enter a domain to query root nameservers directlyvia Cloudflare DNS-over-HTTPS.

PORT: 443 ENCRYPTED

SOCKET: CLOUDFLARE DoH 1.1.1.1

TEST TARGETS:

›PUBLIC DNS ONLY · NO CREDENTIALS REQUIRED · NO MAILBOX ACCESS

Hardened CryptographicBaseline.

What receiving mail servers see.Every domain we deploy is engineered to pass strict RFC criteria before handoff:

RFC 7208/SPF

Sender Policy Framework

ENFORCED

Flattened, single-include architecture. Lookup depth locked at ≤ 2 (RFC limit: 10).

›v=spf1 include:_spf.google.com ~all — Zero DNS resolution overflow risk.

RFC 6376/DKIM

DomainKeys Identified Mail

ENFORCED

Dedicated 2048-bit RSA keys per subdomain.

›Unique cryptographic selector key pairs generated per sending entity with 0% cross-tenant reuse.

RFC 7489/DMARC

Message Authentication & Reporting

ENFORCED

Strict domain alignment enforced with active RUA aggregate reporting.

›v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@... Forensic telemetry active at dispatch.

Edge Security/TLS 1.3

Custom Tracking Domain CNAMEs

ENFORCED

TLS 1.3 enforced across all custom tracking CNAME records with automated HTTP-to-HTTPS redirection.

›Eliminates Cloudflare SSL handshake mismatch errors and spam filter proxy flags.

Three Steps.Zero Friction.

Zero discovery calls. Zero account lock-in. A straightforward, 3-step technical deployment.

Scope & Checkout

Select your domain volume on the pricing engine. Settle the one-off infrastructure fee via Paddle.

The Technical Intake

Complete a 3-minute brief: root naming preferences, target sequencer, and provider choice.

The 48-Hour Handoff

Receive your encrypted deployment sheet, verify RFC compliance through third-party diagnostics, and revoke our temporary DNS permissions.

We never purchase domains under our entity. We deploy inside your Cloudflare and Google accounts using your delegated operator role. We cannot hold assets hostage because we never hold ownership.

Paddle acts as the Merchant of Record. Your transaction is covered by standard SaaS chargeback and dispute protections. If we miss the 48h SLA or fail RFC checks, funds are reversed automatically.

What Happens The SecondYou Settle The Invoice

Exact milestone chronology from transaction settlement to sovereign asset handoff.

Minute 01

PHASE 01 // 06

Intake Dispatch

Paddle settles the transaction and issues an enterprise tax invoice with your corporate VAT/tax details. Your browser redirects immediately to your private Technical Brief.

Minute 05

PHASE 02 // 06

The Handoff

You submit three fields: your naming preferences, your sequencer workspace invite, and scoped operator invites to your Cloudflare and Workspace accounts. You never touch raw DNS records, TXT strings, or user provisioning.

Hour 01 – Hour 24

PHASE 03 // 06

Cryptographic Infrastructure Hardening

We configure your secondary domains inside Cloudflare. We provision isolated Workspace/M365 accounts, generate unique 2048-bit DKIM keys per subdomain, flatten SPF mechanisms to ≤ 2 lookups, stage DMARC at p=quarantine with forensic reporting, and configure TLS 1.3 encrypted tracking subdomains.

Hour 24 – Hour 44

PHASE 04 // 06

Warmup Ignition

We connect every inbox to your Smartlead or Instantly workspace via direct API/OAuth. Custom tracking CNAMEs are validated. Catch-all forwarding is routed to your designated triage address. Automated warmup schedules are initialized at a conservative ramp curve (2 sends/day increment).

Hour 48

PHASE 05 // 06

Audit Delivery & Revocation

You receive a Master Deployment Sheet containing every domain record, individual mailbox credentials, and raw third-party verification links (MXToolbox, Mail-Tester, Dmarcian) showing a 100% pass score. You rotate master tenant passwords, delete our operator seat with one click, and own the infrastructure outright.

Days 03 to 14

PHASE 06 // 06

Sequencer Warmup

Your sequencer ramps volume automatically. If an inbox disconnects due to an automated security challenge, an OAuth desync, or initial DNS propagation drift during the 14-day warmup window, open an async ticket in your portal. We re-authenticate and resolve the record within 12 hours.

SCOPE BOUNDARY SPECIFICATION

(Scope boundary: We do not monitor ongoing campaign deliverability, rewrite copy, or replace domains burned by sending >35 emails/inbox/day or unverified lead lists. At Day 14, the deployment window permanently closes.)

Direct Dedicated vs.Automated Reseller Pools

The structural difference between sovereign digital assets and shared SaaS rental dependencies:

ARCHITECTURAL PARAMETER

DIRECT DEDICATED ARCHITECTURE

AUTOMATED RESELLER POOLS

Workspace Hierarchy

Direct Super-Admin Console

Dedicated Architecture

Restricted Virtualized Seats

Reseller Pools

Asset Ownership & Portability

100% Client-Owned

Dedicated Architecture

Proprietary Vendor Lock-in

Reseller Pools

Network & IP Topology

Zero Cross-Tenant Contamination

Dedicated Architecture

Shared /24 CIDR Subnets

Reseller Pools

DKIM Architecture

Isolated 2048-Bit RSA Keys

Dedicated Architecture

Shared / Dynamic Selectors

Reseller Pools

Unit Economics

Fixed CapEx

Dedicated Architecture

Compounding OpEx

Reseller Pools

Have These ReadyBefore Ordering

To maintain our strict 48-hour SLA without introductory calls or discovery delays, you must provide three assets in the technical brief immediately post-checkout:

Secondary Domains

10 secondary domains added to Cloudflare with DNS zone management delegated to sam@relaycapture.com

Dedicated Tenant

An active Google Workspace or Microsoft 365 parent tenant with one temporary delegated Administrator invite.

Sequencer Access

A member or API invite to your Smartlead or Instantly workspace.

Domain Prefixes

First/last display names and mailbox handle rules (alex@ vs a.vance@).

Catch-All Address

An active address to receive routed catch-all replies.

Transparent Pricing.

Because "Sent to Spam" is an expensive way to say hello.

DOMAINS FLEET SIZE

01234567890123456789Domains(01234567890123456789 Inboxes)

01 Domain50 Domains100 Domains

EMAIL CAPACITY

01234567890123456789,012345678901234567890123456789–01234567890123456789,012345678901234567890123456789/ month

(30 – 35 emails / day / inbox)

ENGINEERING FEE

$0123456789,012345678901234567890123456789

(One-time)

PROVIDER COSTS: Billed directly to your corporate cardat wholesale cost by Google/Cloudflare

Secure checkout powered by Paddle (Merchant of Record). 100% automated refund if any domain fails strict RFC verification at Hour 48 delivery.

DELIVERY: 48-Hour SLA

Questions. Answered.

Direct answers regarding access, wholesale billing, and dedicated infrastructure ownership.

Temporary operator access to your Cloudflare DNS and a delegated admin seat inside your Google Workspace or Microsoft 365 tenant. You never share your primary corporate email passwords, and you revoke our access in one click the second delivery verification clears.