Hosts
| Host | Job | Sends email | Hosts tenant content |
|---|---|---|---|
| orvayos.com | Marketing, the app, Orvay's own transactional mail | Orvay's only | No |
| orvay.app | Tenant email identity and tenant websites | Narrowly | Yes |
| a tenant's own domain | All tenant marketing and outreach | Yes | Yes |
Why tenant content never touches the primary domain
Gmail counts its bulk-sender threshold across a primary domain including every subdomain, and bulk-sender status does not expire. So per-tenant subdomains isolate nothing: one tenant behaving badly would cost every tenant at once, permanently, and the only remedy would be a new domain and re-onboarding every customer.
Only a separate registrable domain is a separate reputation.
Inbound is exempt from all of this. Receiving mail carries no reputation, at any volume.
Cold outreach
Never from an Orvay-owned domain. Not as a default, not with an exception path. It works below the threshold, which is what makes it a trap rather than a limit.