Account review & sending unlock

Every new HukProof account is reviewed before it can run real campaigns. The review protects your recipients, and our sending reputation, from a misconfigured first send, but it never blocks you from setting things up. Here is exactly how the stages work and what unlocks when.

The first 24 hours

For the first day after sign-up your account is in a short safety window. You can build everything, your targets, people lists, templates, campaigns and your sending domain, and save as many drafts as you like. Test sending opens once that window passes; real campaign sending unlocks separately (below).

Testing deliverability (up to 20 emails)

After the 24-hour window, and before your account is fully approved, you can send a small number of real test emails to confirm that allowlisting and deliverability are working. This lets you prove emails reach the inbox, and integrate allowlisting with your mail provider, before you commit to anything.

• The cap is 20 test sends in total, for checking deliverability only, not full campaigns.
• Set up allowlisting from Settings → Allowlisting, then send a test to confirm it lands.
• Send each test to a mailbox you control, then mark whether it arrived in the inbox or in spam.

Full campaign sending

Running real simulation campaigns unlocks once we have verified your signed authorization letter, the document confirming you are permitted to run security tests for your organization. Generate and upload it from Settings → Sending authorization, and we verify it as part of the review. Until then, campaign launches stay locked even after the 24-hour window.

What we check

The review is about one thing: your signed authorization letter, the attestation that you’re allowed to run security tests for your organization. Once a member of our team has verified it, we approve your account, full campaign sending opens, and the review banner clears from your dashboard. Setting up your sending domain (see Connect a sending domain) is a separate step you can do whenever you like.

Invite-only organizations

An organization is tied to your company email domain, and only one organization can exist per domain. If someone signs up with a work address that already belongs to an organization, we show an invite-only notice instead of creating a second one. Ask an existing admin to invite you from Settings → Members. Shared providers such as Gmail or iCloud are exempt, since they can’t be tied to a single company.