Summary

  1. Enforce does not host your entire DNS. Enforce only hosts SPF, DKIM and DMARC records after a one time change to the customer DNS to allow this to happen.

  2. Since the customer retains ultimate control of DNS configuration, the delegation of these records to Enforce can be removed at any time by the customer.

  3. Once the Enforce is hosting these records, the customer has direct control over the configuration of SPF/DKIM/DMARC through the Enforce interface.

  4. The Enforce service is specifically built to manage SPF, DKIM and DMARC records and is not capable of hosting any other types of services.

  5. Due to the use of underscores in the DNS records themselves, the DNS protocol also prevents Enforce from hosting other services like Web/Mail etc.

  6. Enforce is globally resilient with POPs in Ireland, US (West and East) as well as South Korea.