Architecture and ownership
All2CF Mail uses one control plane for two customer-owned products. Identity, Cloudflare OAuth, billing, deployment and support are shared. Runtime traffic and operational data are not.
Send data path
Section titled “Send data path”Applications call the Send Runtime with a scoped key. Its Worker validates requests, D1 stores operational state, Queues process delivery and R2 stores attachments. Send is available on Free.
Business Mail data path
Section titled “Business Mail data path”Employees sign in to the branded Webmail hosted by the Business Mail Runtime. That isolated Worker owns mailbox identities, messages, inbox state, routing, storage and company policies. Business Mail starts with Pro.
Shared control plane
Section titled “Shared control plane”The All2CF Mail control plane manages sign-in, organization membership, one Cloudflare authorization, one subscription, installation, verification, managed upgrades and recovery. It is not a shared message relay and does not sit in the normal Send or Webmail data path.
Resource and credential boundaries
Section titled “Resource and credential boundaries”- Send and Business Mail use different Workers, D1 databases, R2 buckets, Queues and credentials.
- Applications receive Send Runtime URLs and scoped API keys.
- Employees receive company mailbox identities and Webmail passwords.
- Optional IMAP/SMTP client connection service requires Business and separate activation by All2CF.
- A deployed Runtime continues operating if the control plane is temporarily unavailable.