# Averoia Architecture, Security & Product Knowledge Base (Full Specification)

## 1. Executive Overview
Averoia is a next-generation Cloud Email Signature Management and Compliance Platform designed specifically for Microsoft 365, Exchange Online, and hybrid enterprise environments. It eliminates the manual burden of distributing signatures and disclaimer texts across client devices.

## 2. Technical Architecture & Mailflow Loopback
Averoia uses an ultra-low latency, in-memory SMTP loopback mechanism:
1. **Mail Creation**: The user composes an email in Microsoft Outlook (Windows, Mac, Web, iOS, Android).
2. **Outbound Transport Rule**: Exchange Online routes outbound messages via a dedicated connector over TLS 1.3 to the Averoia processing cluster in Frankfurt (DE).
3. **Stateless Processing**:
   - The engine validates tenant authorization and recipient headers.
   - Loop prevention is guaranteed via encrypted `X-Averoia-Processed: true` tracking headers.
   - S/MIME and PGP encrypted messages are safely bypassed without payload tampering.
   - Entra ID user metadata (Job Title, Department, Phone, Avatar) is resolved.
   - The signature HTML block, social icons, and active campaign banners are injected into the message body (accounting for reply threads, blockquotes, and HTML/plain-text duality).
4. **Inbound Return**: The stamped message is returned to Exchange Online Inbound Connector on Port 25.
5. **Final Delivery**: Exchange Online dispatches the message to the final recipient's MX server.
- **Latency**: Sub-15 milliseconds per message.
- **Data Persistence**: Zero disk persistence. 100% ephemeral in-memory processing.

## 3. Comparison vs. Legacy Alternatives
- **vs. CodeTwo / Exclaimer**: Averoia delivers a modern web-native interface, zero desktop agent requirements, instant <5-minute setup via Microsoft Graph API, transparent per-user pricing, and a native Multi-Tenant MSP dashboard.
- **vs. Manual Outlook Setup**: 100% consistency across mobile devices (iOS/Android) where users traditionally send emails with default "Sent from my iPhone" signatures.

## 4. Key Feature Matrix
1. **Signature Studio**:
   - Visual drag-and-drop template designer.
   - Direct HTML/CSS syntax editor with real-time compilation.
   - Dark Mode auto-adaptation (transparent PNG logos, high-contrast text styles).
   - Responsive multi-device preview (Desktop, Tablet, Mobile).
2. **Directory Synchronization**:
   - Real-time Microsoft Graph API & Entra ID delta sync.
   - Support for custom extension attributes and hybrid AD sync.
3. **Marketing Campaigns**:
   - Scheduled banners with start/end dates and automatic removal.
   - Dynamic UTM campaign parameter generation for Google Analytics 4 & Adobe Analytics.
4. **MSP & Multi-Tenant**:
   - Single sign-on administration for multi-company holdings and IT system houses.
   - Granular RBAC (Global Admin, Brand Manager, Viewer).

## 5. Security, GDPR & Certifications
- Data Center Location: Frankfurt am Main, Germany (ISO/IEC 27001 & SOC 2 certified).
- GDPR Compliance: Complete Auftragsverarbeitungsvertrag (AVV) under Art. 28 GDPR available upon registration.
- Message Storage: Strict Zero Message Storage policy (email bodies and attachments are never stored in databases or log files).

## 6. Pricing & ROI
- **Starter Plan**: Ideal for teams up to 25 users. Includes full Studio, Entra ID sync, and mobile signature support.
- **Business Plan**: For growing companies up to 250 users. Adds banner campaigns, analytics, and rule engine.
- **Enterprise Plan**: 250+ users. Custom SLA, dedicated account manager, custom fonts, multi-tenant MSP tools.
- **ROI**: Eliminates ~12 hours of IT support time per employee/year and turns outbound emails into high-converting brand touchpoints.