Information security and AI

Adopt AI without giving up control of your data, your domain or your reputation.

We help companies on Microsoft 365 and Google Workspace use artificial intelligence safely, protect their email domain from SPF to DANE, and automate processes without opening new doors. Everything is implemented in your own tenant and your own DNS.

mtstrat.comA+ · 99/100Result on our own checker
  • SPF-all
  • DKIM2048 bit
  • DMARCp=reject
  • MTA-STSmode: enforce
  • TLS-RPTrua=mailto:
  • DNSSECDS alg. 13
  • DANETLSA · MX
  • BIMI2/3 · no VMC
  • CAAissue + iodef
Maximum score everywhere except BIMI (2 of 3): we have not bought a VMC/CMC certificate yet, so Gmail does not show our logo.

Three areas, one logic

An AI assistant reads whatever your users can open; an automated agent sends email on your company's behalf. That is why identity, trust in your domain and governance come first.

Secure AI adoption

We prepare your organisation for Microsoft 365 Copilot and Gemini for Google Workspace before you switch them on.

  • Permissions and oversharing
  • Sensitivity labels and DLP
  • Acceptable-use policy and training
  • Governance aligned with NIST AI RMF and ISO/IEC 42001
Secure AI adoption

Email and domain security

The complete set of controls, from SPF to DANE and BIMI, with published prices.

  • SPF, DKIM and DMARC up to p=reject
  • Hosted MTA-STS and TLS-RPT
  • DNSSEC and DANE for Microsoft 365
  • BIMI, with clear caveats
Email security

AI process automation

Workflows with n8n and AI agents, designed with security in mind from the start.

  • Least privilege and dedicated service accounts
  • Protected credentials and full traceability
  • Human oversight for critical decisions
  • On your infrastructure or in the cloud
Secure automation

The foundation: managed IT since 2013 — infrastructure, helpdesk, backups and the complete IT function.

Managed IT

How well protected is your email domain?

Our free checker reviews your domain's public records in seconds, gives you a score and the exact SPF, DKIM and DMARC records to publish. No sign-up required.

We run it ourselves first

mtstrat.com scores A+ (99/100) on our own checker. The only point missing is the BIMI certificate, which we have chosen not to buy yet.

You can verify it yourself: the result is based on public records anyone can query.

What this means in practice

  • Nobody can send valid email posing as mtstrat.com: DMARC is at p=reject.
  • Every message leaves signed with a 2048-bit DKIM key.
  • Email sent to us travels encrypted to a verified server (MTA-STS in enforce mode, and DANE).
  • Our DNS answers are signed with DNSSEC, and only the authorities we name may issue certificates (CAA).
  • We receive daily authentication and transport-encryption reports.

Why work with us

Vendor-neutral

We implement in your DNS and your tenant. If you ever stop working with us, the configuration remains yours.

Microsoft 365 and Google Workspace

We know both platforms in depth, including how they differ on AI, identity and email.

Prices and limits up front

We publish prices for standard services and explain what each control does not solve.

Long-term relationships

Several of our clients have worked with us since 2013. Continuity is part of the service.

Companies that have experienced our work

Companies in the financial, logistics and retail sectors trust us, several of them since 2013.

  • Macrocapitales
  • Macroconsult
  • Macroinvest
  • Macro Wealth Management
  • Acres Finance
  • ACRES SAB
  • ACRES Titulizadora
  • ACRES SAFI
  • Monte Azul
  • Monte Azul Sur
  • Monte Azul Almacenes
  • Naturmedizin
  • Pastipan

See clients

Let's talk about your situation

Tell us which platform you use and what you want to achieve. We will reply with a concrete proposal, not a brochure.