Your organisation is responsible for ensuring that the SMTP API is used appropriately. Below is a list of factors that should be considered when using the interface.
Data protection
Your organisation is responsible for ensuring that the messages your organisation receives via the SMTP API are not forwarded to unsecured email addresses. The data protection level of Suomi.fi Messages is higher than in ordinary emails, and forwarding messages may endanger the privacy of the messages.
The Cc and Bcc fields must also be left empty when messages are sent via the SMTP API.
The reply-to field enables your organisation to specify a different reply address to the messages it sends. This ensures that a single person is not responsible for replying to an end user’s reply messages. The address entered in the reply-to field must belong to the same email domain your organisation uses which is connected to the Messages service.
Suomi.fi Messages use the personal identity code as an internal identifier. It is forwarded to the client organisation in a message sent from Suomi.fi Messages. In an email-connected service, the personal identity code is displayed in the body of the message in the section ‘Viestin tiedot’ (Message details) and in the sender’s address (PERSONALID@asiointitili.fi). When the end user is sent a reply, the Message details section should be deleted from the message body as described in the instructions "Receiving a message sent by the end user and replying to it".
Acting on behalf of another party
A person can also act on behalf of another person or company, in which case this person is called an agent. It is possible to include the agent’s details in the content of the email message to be received. In that case, the version of the return channel must be defined as 2.0 in client- and service-specific settings. When this interface version has been enabled, the details of the agent will appear at end of the email message.
Archiving sent and received messages
Your organisation must archive the messages sent and received via the SMTP API to the extent necessary for your operations. Messages are stored in Suomi.fi Messages only for the end user, and the organisation that sent the message does not have access to them.
Possible configurations for an organisation’s email server
Your organisation is responsible for ensuring that the interface between your own email server and the email server of Suomi.fi Messages and the methods used for encrypting messages are compliant with the guidelines issued by Digital and Population Data Services Agency.
Instructions for the recipient attached to an email message
Your organisation must create instructions that ensure that the message recipient is provided with the necessary instructions.
Restrictions on the content of attachments
The file types and size of the attachments that can be sent and received in Suomi.fi Messages are restricted. The allowed file formats are described on the page Content of an electronic message.
If your organisation sends a message with an attachment that is not an allowed file type, Suomi.fi Messages will respond with a confirmation message that states the reason for the error.