eMbox
← Back to home

The idea

The unsecured endpoint is your mailbox

Every bank, government agency, and court still needs to prove delivery to a street address. Email can't do that. Paper can — but paper sits in an unlocked box, visible to thieves and neighbors. The home mailbox is the world's most ignored security gap.

eMbox replaces that gap with a zero-trust delivery anchor: cryptographically bound to your address, verified senders only, encrypted until you retrieve on your phone. AI layers on top — but only after you bring the document inside your trust boundary.

Cybersecurity + AI + Platform

Zero-trust delivery.Intelligent after retrieve.

eMbox is a cybersecurity and AI company built around one thesis: the last unsecured endpoint in official communication is your front door — and fixing it requires hardened infrastructure plus intelligence that respects privacy.

eMbox secure vault hardware

Layer 1

Cybersecurity

Zero-trust home vault

The security foundation. Hardware-rooted identity, end-to-end encryption, and a hard architectural rule: the outdoor display never renders document content.

  • Address-bound vault — payload rejected if GPS + street + device don't match
  • Ed25519 / AES-256-GCM chain-of-custody from sender KMS to your phone
  • Glance-only outdoor UI — count, sender category, urgency; never body text
  • Tamper zeroization — keys wiped on physical compromise
  • Multi-tenant household vaults, duress PIN, expiring delegate tokens

Layer 2

AI

Document intelligence (after retrieve)

AI that assists the household — never the street. Models run on-device or in user-controlled processing after retrieve, so document bodies never touch an outdoor surface or public cloud without consent.

  • Smart summaries — “Your tax notice deadline is April 15”
  • Urgency & deadline extraction from legal and medical mail
  • Household routing — route to the right family member automatically
  • Sender anomaly detection — flag spoofed institution patterns in the cloud
  • Physical mail OCR inside the vault (future) — digitize paper without outdoor exposure
  • Trip-aware routing — boarding passes and itinerary changes to your phone before departure (roadmap)

Layer 3

Platform

Certified delivery network

The business layer banks and government plug into — replacing certified paper with address-bound digital delivery.

  • eMbox Certified Send API for institutions
  • Webhook receipts: secured → retrieved → read
  • Sender enrollment & anti-phishing allowlist
  • Legal affidavit export for courts and compliance

How it works

01

Cybersecurity

Sender verified at the edge

Only institution-signed payloads enter. Unknown senders rejected before they reach your home.

02

Cybersecurity

Secured & encrypted at your address

Vault accepts payload. Outdoor display shows metadata only. Document body encrypted inside.

03

Cybersecurity

You retrieve on your phone

Biometric or NFC handshake at the door. Legal delivery timestamp recorded. Trust boundary crosses to you.

04

AI

Intelligence activates — indoors

Summarize, classify urgency, extract deadlines, route to household members. All on-device or with explicit consent.

05

Platform

Proof & action

Export affidavit, pay bill, forward to attorney, archive — with full audit trail for sender and household.

What eMbox is not

  • Not a virtual PO box — mail arrives at your actual home address
  • Not a package locker — built for official correspondence, not Amazon boxes
  • Not AI reading your mail at the curb — intelligence only after retrieve
  • Not email with extra steps — cryptographically bound to your street address

Aviation & travel

Gate tools work. Trust and proof still don't.

eMbox extends certified delivery beyond passengers — to flight bills, cargo air waybills, MRO airworthiness mail, crew notices, and industry messaging (including SITA-class ops traffic) — all with the same address-bound vault and sender verification as bank and government mail.

Waleed Mehmood Sulehri — Embry-Riddle aviation and eMbox founder

Passenger · operator · infrastructure

Why aviation is part of this story

I studied aviation at Embry-Riddle Aeronautical University and worked IT at Menzies-RAS Global Aviation Services — ServiceNow ITSM, Angular/.NET, and BCP/DR on live ground-handling infrastructure. Passenger apps get you to the gate. SITA and ops messaging move the flight. But the accountable person at home still has no trusted receiver for flight bills, crew notices, customs packs, and phishing-heavy email pretending to be the airline.

Today I pursue an M.S. in Cybersecurity and Critical Infrastructure Protection at St. Francis College (4.0 GPA), researching ATC voice threats and GPS spoofing — while building eMbox as the certified delivery layer at the registered address.

We're not building another airline app, a new ACARS, or a SITA replacement. We're the certified delivery layer: enrolled sender → secured vault → retrieve on phone → audit trail. Full founder story at /founder.

Embry-Riddle taught the systems. Menzies taught the ramp. eMbox closes the last mile of official documents — in aviation and everywhere else.

Passenger trust

Stop spoofed check-in and disruption links. Only enrolled carrier keys deliver to your vault.

SITA & ops messaging

Certified copies of time-sensitive ops traffic to dispatcher or flight-dept address — partner pathway, not a network replacement.

Flight bills & FBO invoices

Fuel, handling, overflight, and charter settlement — verified senders, AP-ready receipt chain.

Cargo & MRO

Air waybills, ADs, and work packages — metadata-only outdoors, full document indoors.

Crew & charter

Schedule, training, manifests, and trip folders — partitioned vaults per role.

GA & regulatory

FAA letters, medical recurrency, authority correspondence — statutory notice classes.

How eMbox relates to SITA (and similar networks)

SITA and airline messaging networks move operational traffic between airports, handlers, and carriers. eMbox does not replace those pipes. We add a **certified last mile** to the registered address of the pilot, dispatcher, or flight department — when a message class needs provable delivery, anti-phishing trust, or an archival copy outside the ops inbox. Integration is via enrolled sender keys and Certified API webhooks — roadmap partnership with industry messaging providers.

What we are not claiming

  • Not a replacement for airline check-in, DCS, or mobile boarding at TSA
  • Not a replacement for SITA, Type B, or airline operational messaging networks
  • Not a new GDS, reservation, or dispatch system
  • Not outdoor display of PNR, AWB commercial detail, or route — glance metadata only
All aviation use casesRetrieve → phone → optional Wallet before travel

Aviation industry segments

One protocol for every document that must reach a known person at a known address — from boarding passes to flight bills, cargo AWBs, MRO releases, and SITA-class operational copies.

Passenger & householdPassenger

Passenger & frequent flyer

Boarding passes, itinerary changes, loyalty, and disruption notices — verified sender, secured to your address, retrieve to phone before travel.

Example documents

  • Mobile boarding passes & wallet pass payloads
  • Itinerary confirmations & schedule changes
  • Gate change, delay, cancellation (IROP) notices
  • +2 more

eMbox: Anti-phishing certified channel; optional Wallet sync after retrieve — not a gate replacement.

On roadmapInfrastructure

SITA & airline messaging ecosystem

Critical operational messages today flow through industry messaging (Type B, SITA, airline ops systems) and fragmented email. eMbox gives operators and flight departments a certified **home-address receiver** for copies of time-sensitive traffic — with proof of receipt, not a replacement for SITA networks.

Example documents

  • Schedule change & movement messages (operational copies)
  • Load and weight-related notices to registered address
  • Station handoff and irregular-ops broadcasts (archived)
  • +2 more

eMbox: Certified delivery endpoint at operator or crew home/base address; webhook + ledger when message class requires provable receipt.

Operator pilotOperator

Flight bills & operator invoicing

Fuel, landing, handling, overflight, catering, and FBO invoices still arrive as PDF email chaos. eMbox binds flight bills to the operator’s registered address with sender verification — ready for AP, audit, and trip cost tracking.

Example documents

  • Fuel releases & into-plane billing
  • Landing, parking & handling invoices
  • Overflight & permit fee statements
  • +2 more

eMbox: Verified sender invoices; exportable receipt chain for accounting and dispute resolution.

On roadmapOperator

Cargo & air waybills

Air waybills, customs prep, and delivery receipts need chain-of-custody without exposing commercial detail on an outdoor display. Metadata-only glance; full AWB retrieved indoors.

Example documents

  • e-AWB and paper waybill digitization
  • Customs & export documentation
  • Delivery receipts & POD
  • +2 more

eMbox: Address-bound vault for high-value cargo paperwork; sender allowlist blocks forged freight phishing.

On roadmapOperator

MRO, airworthiness & maintenance

ADs, service bulletins, work packages, and release certificates must reach the accountable person at a known address — not lost in personal inboxes.

Example documents

  • Airworthiness directives (AD) & SBs
  • Work order packages & sign-off releases
  • Parts traceability & shipping notices
  • +2 more

eMbox: Regulatory-grade delivery proof; partitioned vaults for flight dept vs maintenance manager.

On roadmapOperator

Crew, training & workforce

Schedule changes, training bulletins, medical recurrency, and company policy — workforce documents that need provable delivery without sharing crew portal passwords.

Example documents

  • Schedule change & pairing notices
  • Training & checking reminders
  • Medical & license recurrency
  • +2 more

eMbox: Per-crew household partition; expiring delegate tokens for union reps or family.

Operator pilotOperator

Charter, Part 91/135 & business aviation

Manifests, passenger briefs, contracts, and trip folders for a single leg — one certified folder per trip, tied to the flight department’s address.

Example documents

  • Passenger manifests & customs general declarations
  • Charter agreements & trip sheets
  • Weight & balance package delivery
  • +2 more

eMbox: Fastest aviation wedge — high document value, smaller IT stacks, strong need for proof.

Operator pilotOperator

General aviation & flight training

FAA correspondence, renter insurance, school notices, and club billing behave like government mail — no trusted digital receiver at the pilot’s home.

Example documents

  • FAA letters & airman certificate notices
  • Medical certificate reminders
  • Renter & club insurance documents
  • +2 more

eMbox: Same protocol as bank/gov mail — ideal early adopter community.

On roadmapOperator

FBO & ground services

Service invoices, fuel tickets, and credit applications from FBOs — verified FBO sender keys stop forged fuel-release fraud.

Example documents

  • Fuel tickets & credit receipts
  • Ramp & hangar invoices
  • Credit application & insurance COI exchange
  • +1 more

eMbox: Enrolled FBO as sender; flight bills auto-filed to trip folder.

On roadmapInfrastructure

Regulatory & safety authority mail

FAA, EASA, TSA, and CAA correspondence to operators and certificated individuals — statutory notice classes with affidavit export.

Example documents

  • Certificate actions & enforcement letters
  • TSA & security directive summaries
  • CAA/EASA operator correspondence
  • +1 more

eMbox: Statutory notice classifier; jurisdiction-aware delivery timestamps.

On roadmapOperator

Aviation insurance & claims

Hull, liability, and loss-of-license notices — high sensitivity, sender-verified, never displayed on outdoor UI.

Example documents

  • Policy renewals & endorsements
  • Claim openings & adjuster letters
  • Loss-of-license / medical waiver correspondence

eMbox: Encrypted vault + proof of receipt for coverage disputes.

On roadmapOperator

Customs, carnet & international trip docs

Gen dec, carnet ATA, overflight permits, and visa-support letters for international legs — one retrieve archive per trip.

Example documents

  • General declaration & passenger manifests
  • ATA carnet and temporary import papers
  • Overflight & landing permit packs
  • +1 more

eMbox: Trip-bound address token; all legs secured to same household vault.

The pitch

Cybersecurity

We're securing the last unprotected endpoint in regulated communication — the residential mailbox.

AI

We're building document intelligence that runs inside the user's trust boundary — the opposite of scan-in-the-middle virtual mailrooms.

Combined

Cybersecurity is the moat. AI is the retention layer. Platform is the revenue engine. Together: zero-trust delivery infrastructure for every home with an address.

Download vision & product PDFs

Idea, solution architecture, and complete product brief — with diagrams and product visuals.

Download saves the file; Open in tab previews in the browser. If a link fails, use /documents/ folder on the site. Confidential summaries — patent pending, not legal advice.

Cybersecurity is the moat. AI is the retention layer. Platform is the revenue engine.

Join the waitlist