Third-Party Email Security

Learn More about NYU’s Third-Party Email Security Requirements

Beginning June 8, any third-party email company sending emails from NYU email addresses must be registered with NYU IT to ensure successful delivery. Typical companies include MailChimp, Eventbrite, Campaign Monitor, Salesforce (notifications via email), and Zendesk (ticket system sends email).

This requirement applies only to third-party email companies—not to NYU services such as NYU Email (Gmail) or Email Direct (Emma) (the University's official bulk email service) or third-party desktop clients such as Thunderbird, Outlook, or Apple Mail. If you have worked with the Email Security Team to register a company, you do not need to register it again.

For the past five years, NYU IT has worked with community members who use third-party email companies to ensure the companies already in use by our community meet our strict security requirements. Data shows that 99% of emails sent at NYU meet the new security requirement, so the vast majority of our community will not be impacted.

NYU IT strongly recommends using NYU services to send emails whenever possible. If an NYU service does not meet your needs and you plan to use a third-party email provider, you must submit a registration request to the Email Security Team, which will work with you to onboard the provider before you send emails.

This requirement will begin with emails sent from:

nyu.edu
stern.nyu.edu and other Stern subdomains
sternad.nyu.edu

Remaining subdomains (e.g., abc123@subdomain.nyu.edu) will follow a phased rollout. Impacted users will be notified at that time.

Not sure if the third-party email company you use will pass NYU’s new security requirements? Onboarding a new company or account? Email third-party-email-security@nyu.edu or use this tool.

Using Third-Party Email Companies at NYU

Check With Your Department Before Registering a Third-Party Email Company

It's always a good idea to check with your department or unit lead before entering into a contract and/or registering a third-party email company, as there may be concerns you are not aware of or alternative solutions available to you, such as an approved service like Email Direct or a registered third-party email company already in use by your department that you can use. If, after consulting with your department, you believe using a third-party email company offers the best solution, please submit a registration request.

Bulk Email: Emailing Hundreds of People

Short answer: Use Email Direct (Emma) whenever possible.

If you need to email a large (100+) number of people on a regular basis as part of your job duties at NY, Email Direct (powered by Emma) is the University's official service for authorized staff to send bulk email to specific segments of the NYU community. However, if you and/or your department determine you need to use a third-party email company you may submit a registration request. All third-party email companies must be registered with NYU IT or emails sent using them will not be delivered successfully.

Third-Party Email to Smaller Audiences

Sometimes, there may be a reason to use a third-party email company outside of bulk email, like inviting people to a small event or wanting to include graphics or email styles not available in NYU Email (Gmail). Make sure you check with your department first to see if there is another tool available to you or already in use. If you and/or your department determine you need to use a third-party email company you may submit a registration request.

Please Note

Third-party desktop clients such as Thunderbird, Outlook, or Apple Mail are not impacted by Third-Party Email Security.

Useful Request Forms

Common Email Issues

Sent an email that was not delivered?

Email messages or notifications may not be delivered to the intended recipient if they are flagged as a security risk either by NYU Email (Gmail), the Third-Party Email Security service, or the recipient’s email company. The three most likely reasons this might happen:

You are sending an email using an unregistered third-party email company
- Submit a registration request form to register the third-party email company with NYU IT
Your recipient’s email is deemed unsafe
- Contact NYU ITSD
Your email went to your recipient’s spam
- Contact NYU ITSD

Received a flagged email?

If an email or notification doesn’t meet NYU IT’s security requirements, it will be flagged as a risk with text added to the subject line (e.g., Failed NYU Email Security Check). If you receive a message with this banner, please submit a flagged email report. Do not reply or click any links in the email.

FAQs

If you have previously worked with NYU IT to register a company, you do not need to register it again. If you are not sure you are using a third-party email company that has been registered, submit a request to register before sending any emails.

To test a specific email before sending, use this test tool.

Please note: If you are sending an email using NYU Email (Gmail) or Email Direct (Emma), these are NYU Services, supported by NYU IT, and messages sent through these services will pass NYU's security protocols.

Make sure the company, system, or tool is registered with NYU IT to ensure your emails are delivered. Use this form to request registration for a new company, system, or tool.

Even if a platform’s main purpose is something other than sending emails, but it sends emails that are “from” an nyu.edu email address, the company must be registered with NYU IT. Use this form to ensure the company you are using is registered with NYU IT.

No, they will not be affected.