ShrouDB
ShrouDB Engine

Courier

Send sensitive notifications without leaving a trail.

Courier decrypts, renders, sends, and zeroizes — plaintext exists only long enough to leave the building. PII-bearing emails, alerts, and webhooks without the lingering footprint.

DELIVERRENDERDISPATCHZEROIZE

Features

  • Template-based secure delivery
  • Recipients encrypted in transit
  • Plaintext held only long enough to deliver, then zeroized
  • Hot-reload templates
  • Multiple channels: SMTP, webhook, push
  • Template inspection and render preview

Quickstart (standalone)

courier.toml
bind = ":7007"

[templates]
dir = "/etc/shroudb/templates"
auto_reload = true

[channels.email]
type = "smtp"
host = "smtp.sendgrid.net"
port = 587

[channels.webhook]
type = "http"
timeout = "5s"
retry_count = 3
terminal
$ shroudb-courier --config courier.toml

Command reference

CommandArgsDescription
DELIVER<template> <channel> <recipient>Render and deliver
RENDER<template> <vars>Preview a rendered template
DISPATCH<template>Dispatch queued deliveries
ZEROIZE<delivery_id>Force zeroize plaintext
TEMPLATE_LISTList templates
TEMPLATE_RELOADReload templates from disk

Bundle into Moat

Drop Courier into a unified Moat process and it inherits the shared auth layer, storage, and telemetry — no extra wiring.

moat.toml
[engines.courier]
enabled = true
template_dir = "/etc/shroudb/templates"
Run Courier in production today
Free on ShrouDB Cloud up to 10k ops/month — no card required.