Trust Tiers
Finn accounts progress through three trust tiers as they accumulate clean sending history. Tier gates what you can do.
| Tier | Recipients | Rate limits | Reputation |
|---|---|---|---|
| sandbox (default on signup) | Only to verified recipients (POST /v1/sandbox-recipients requires explicit opt-in) |
Plan default (free: 10/min, 1000/mo) | Shared SES identity — isolated from verified tenants |
| verified | Any recipient, subject to suppression list | Plan default | Dedicated SES Tenant provisioned on promotion |
| trusted | Any recipient | Plan default (higher ceiling possible) | Dedicated SES Tenant; eligible for dedicated-IP pool |
Transitions
- sandbox → verified: automatic once a sending domain finishes DKIM verification (
POST /v1/domains/{id}/verifyreturnsverification_status: "verified"). A dedicated SES Tenant is provisioned at this point — your reputation is now isolated from other sandbox tenants. - verified → trusted: operator promotion after sustained clean sending history (bounce < 5%, complaint < 0.1%).
- any → suspended: automatic if bounce > 5% or complaint > 0.1% over the rolling window. Resolve the cause, then contact support for reinstatement.
Why this exists
Sandbox isolates new accounts so abuse from one signup can't taint shared IP reputation. Verified accounts send from their own dedicated SES Tenant, so your deliverability is tied only to your own sending.