Integration · Ticketing & workflow

Postmark integration for continuous SOC 2 & PCI DSS compliance

CATAAM connects to Postmark with read-only access and runs 3 automated checks against your real configuration. The results map to 1 control across 4 frameworks, including SOC 2, PCI DSS, NIST CSF, SOC 1.

automated checks: 3
controls mapped: 1
frameworks: 4

What happens when you connect Postmark

Connect with read-only access
Add a read-only role, OAuth scope or API token for Postmark. The credential is encrypted at rest.
Discover assets
CATAAM pulls the accounts, users, repositories or devices it finds into one asset inventory.
Run 3 automated checks
Every check runs against your real configuration, then keeps running on a schedule.
Map results to 1 control
Each result lands on the controls it proves — and counts for every framework that shares them.
Store evidence and raise issues
Passing checks become audit evidence. Failures show up for the control owner and can open a Jira issue.

The 3 checks CATAAM runs on Postmark

Each check runs against your real Postmark configuration and keeps running on a schedule. Check names are shown as they appear in the CATAAM platform.

Postmark sending domains are SPF-verified
Postmark sending domains have DKIM signing enabled
Postmark sending domains have a verified custom Return-Path

Controls these checks support (1)

A passing check becomes evidence for each control below, and counts for every framework that shares the control.

Control	Requirement	Frameworks
NET-1	Data transmission encrypted	SOC 2, PCI DSS, NIST CSF, SOC 1

Postmark integration: frequently asked questions

What does CATAAM check in Postmark?

CATAAM runs 3 automated checks on Postmark, for example: Postmark sending domains are SPF-verified; Postmark sending domains have DKIM signing enabled; Postmark sending domains have a verified custom Return-Path. The full list is on this page.

Which compliance frameworks does the Postmark integration support?

The Postmark checks map to 1 controls and count toward SOC 2, PCI DSS, NIST CSF, SOC 1.

Does CATAAM need write access to Postmark?

No. Connectors use read-only roles, scopes or API tokens, and credentials are encrypted at rest. The only optional write anywhere in CATAAM is opening Jira issues for failed checks.

How do I connect Postmark to CATAAM?

Add a read-only role, OAuth scope or API token for Postmark in CATAAM. CATAAM then discovers your assets, runs the checks and keeps running them on a schedule, storing each result as audit evidence.