Add compliance page mailing list base

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/coredata/entity_type_reg.go

@@ -87,6 +87,8 @@ const (
 	EmailAttachmentEntityType                  uint16 = 61
 	ComplianceFrameworkEntityType              uint16 = 62
 	ComplianceExternalURLEntityType            uint16 = 63
+	MailingListEntityType                      uint16 = 64
+	MailingListSubscriberEntityType            uint16 = 65
 )
 
 func NewEntityFromID(id gid.GID) (any, bool) {
@@ -215,6 +217,10 @@ func NewEntityFromID(id gid.GID) (any, bool) {
 		return &ComplianceFramework{ID: id}, true
 	case ComplianceExternalURLEntityType:
 		return &ComplianceExternalURL{ID: id}, true
+	case MailingListEntityType:
+		return &MailingList{ID: id}, true
+	case MailingListSubscriberEntityType:
+		return &MailingListSubscriber{ID: id}, true
 	default:
 		return nil, false
 	}

pkg/coredata/mailing_list.go

@@ -0,0 +1,170 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package coredata
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"maps"
+	"time"
+
+	"github.com/jackc/pgx/v5"
+	"go.gearno.de/kit/pg"
+	"go.probo.inc/probo/pkg/gid"
+	"go.probo.inc/probo/pkg/mail"
+)
+
+type MailingList struct {
+	ID             gid.GID    `db:"id"`
+	OrganizationID gid.GID    `db:"organization_id"`
+	ReplyTo        *mail.Addr `db:"reply_to"`
+	CreatedAt      time.Time  `db:"created_at"`
+	UpdatedAt      time.Time  `db:"updated_at"`
+}
+
+func (ml *MailingList) AuthorizationAttributes(ctx context.Context, conn pg.Conn) (map[string]string, error) {
+	q := `SELECT organization_id FROM mailing_lists WHERE id = $1 LIMIT 1;`
+
+	var organizationID gid.GID
+	if err := conn.QueryRow(ctx, q, ml.ID).Scan(&organizationID); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, ErrResourceNotFound
+		}
+		return nil, fmt.Errorf("cannot query mailing list authorization attributes: %w", err)
+	}
+
+	return map[string]string{"organization_id": organizationID.String()}, nil
+}
+
+func (ml *MailingList) LoadByID(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+	id gid.GID,
+) error {
+	q := `
+SELECT
+	id,
+	organization_id,
+	reply_to,
+	created_at,
+	updated_at
+FROM
+	mailing_lists
+WHERE
+	%s
+	AND id = @mailing_list_id
+LIMIT 1;
+`
+
+	q = fmt.Sprintf(q, scope.SQLFragment())
+
+	args := pgx.StrictNamedArgs{"mailing_list_id": id}
+	maps.Copy(args, scope.SQLArguments())
+
+	rows, err := conn.Query(ctx, q, args)
+	if err != nil {
+		return fmt.Errorf("cannot query mailing list: %w", err)
+	}
+
+	result, err := pgx.CollectExactlyOneRow(rows, pgx.RowToStructByName[MailingList])
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return ErrResourceNotFound
+		}
+		return fmt.Errorf("cannot collect mailing list: %w", err)
+	}
+
+	*ml = result
+
+	return nil
+}
+
+func (ml *MailingList) Update(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+) error {
+	q := `
+UPDATE mailing_lists
+SET
+	reply_to = @reply_to,
+	updated_at = @updated_at
+WHERE
+	%s
+	AND id = @mailing_list_id;
+`
+
+	q = fmt.Sprintf(q, scope.SQLFragment())
+
+	args := pgx.StrictNamedArgs{
+		"mailing_list_id": ml.ID,
+		"reply_to":        ml.ReplyTo,
+		"updated_at":      ml.UpdatedAt,
+	}
+	maps.Copy(args, scope.SQLArguments())
+
+	tag, err := conn.Exec(ctx, q, args)
+	if err != nil {
+		return fmt.Errorf("cannot update mailing list: %w", err)
+	}
+
+	if tag.RowsAffected() == 0 {
+		return ErrResourceNotFound
+	}
+
+	return nil
+}
+
+func (ml *MailingList) Insert(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+) error {
+	q := `
+INSERT INTO mailing_lists (
+	id,
+	tenant_id,
+	organization_id,
+	reply_to,
+	created_at,
+	updated_at
+)
+VALUES (
+	@mailing_list_id,
+	@tenant_id,
+	@organization_id,
+	@reply_to,
+	@created_at,
+	@updated_at
+);
+`
+
+	args := pgx.StrictNamedArgs{
+		"mailing_list_id": ml.ID,
+		"tenant_id":       scope.GetTenantID(),
+		"organization_id": ml.OrganizationID,
+		"reply_to":        ml.ReplyTo,
+		"created_at":      ml.CreatedAt,
+		"updated_at":      ml.UpdatedAt,
+	}
+
+	if _, err := conn.Exec(ctx, q, args); err != nil {
+		return fmt.Errorf("cannot insert mailing list: %w", err)
+	}
+
+	return nil
+}

pkg/coredata/mailing_list_subscriber.go

@@ -0,0 +1,316 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package coredata
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"maps"
+	"time"
+
+	"github.com/jackc/pgx/v5"
+	"github.com/jackc/pgx/v5/pgconn"
+	"go.gearno.de/kit/pg"
+	"go.probo.inc/probo/pkg/gid"
+	"go.probo.inc/probo/pkg/mail"
+	"go.probo.inc/probo/pkg/page"
+)
+
+type (
+	MailingListSubscriber struct {
+		ID             gid.GID                     `db:"id"`
+		OrganizationID gid.GID                     `db:"organization_id"`
+		MailingListID  gid.GID                     `db:"mailing_list_id"`
+		FullName       string                      `db:"full_name"`
+		Email          mail.Addr                   `db:"email"`
+		Status         MailingListSubscriberStatus `db:"status"`
+		CreatedAt      time.Time                   `db:"created_at"`
+		UpdatedAt      time.Time                   `db:"updated_at"`
+	}
+
+	MailingListSubscribers []*MailingListSubscriber
+)
+
+func (cns *MailingListSubscriber) AuthorizationAttributes(ctx context.Context, conn pg.Conn) (map[string]string, error) {
+	q := `SELECT organization_id FROM mailing_list_subscribers WHERE id = $1 LIMIT 1;`
+
+	var organizationID gid.GID
+	if err := conn.QueryRow(ctx, q, cns.ID).Scan(&organizationID); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, ErrResourceNotFound
+		}
+		return nil, fmt.Errorf("cannot query mailing list subscriber authorization attributes: %w", err)
+	}
+
+	return map[string]string{"organization_id": organizationID.String()}, nil
+}
+
+func (cns *MailingListSubscriber) CursorKey(orderBy MailingListSubscriberOrderField) page.CursorKey {
+	switch orderBy {
+	case MailingListSubscriberOrderFieldCreatedAt:
+		return page.NewCursorKey(cns.ID, cns.CreatedAt)
+	}
+
+	panic(fmt.Sprintf("unsupported order by: %s", orderBy))
+}
+
+func (cns *MailingListSubscriber) LoadByMailingListIDAndEmail(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+	mailingListID gid.GID,
+	email mail.Addr,
+) error {
+	q := `
+SELECT
+	id,
+	organization_id,
+	mailing_list_id,
+	full_name,
+	email,
+	status,
+	created_at,
+	updated_at
+FROM
+	mailing_list_subscribers
+WHERE
+	%s
+	AND mailing_list_id = @mailing_list_id
+	AND email = @email
+LIMIT 1;
+`
+
+	q = fmt.Sprintf(q, scope.SQLFragment())
+
+	args := pgx.StrictNamedArgs{
+		"mailing_list_id": mailingListID,
+		"email":           email,
+	}
+	maps.Copy(args, scope.SQLArguments())
+
+	rows, err := conn.Query(ctx, q, args)
+	if err != nil {
+		return fmt.Errorf("cannot query mailing list subscriber: %w", err)
+	}
+
+	subscriber, err := pgx.CollectExactlyOneRow(rows, pgx.RowToStructByName[MailingListSubscriber])
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return ErrResourceNotFound
+		}
+
+		return fmt.Errorf("cannot collect mailing list subscriber: %w", err)
+	}
+
+	*cns = subscriber
+
+	return nil
+}
+
+func (cns *MailingListSubscriber) Insert(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+) error {
+	q := `
+INSERT INTO mailing_list_subscribers (
+	id,
+	tenant_id,
+	organization_id,
+	mailing_list_id,
+	full_name,
+	email,
+	status,
+	created_at,
+	updated_at
+)
+VALUES (
+	@mailing_list_subscriber_id,
+	@tenant_id,
+	@organization_id,
+	@mailing_list_id,
+	@full_name,
+	@email,
+	@status,
+	@created_at,
+	@updated_at
+);
+`
+
+	args := pgx.StrictNamedArgs{
+		"mailing_list_subscriber_id": cns.ID,
+		"tenant_id":                  scope.GetTenantID(),
+		"organization_id":            cns.OrganizationID,
+		"mailing_list_id":            cns.MailingListID,
+		"full_name":                  cns.FullName,
+		"email":                      cns.Email,
+		"status":                     cns.Status,
+		"created_at":                 cns.CreatedAt,
+		"updated_at":                 cns.UpdatedAt,
+	}
+
+	if _, err := conn.Exec(ctx, q, args); err != nil {
+		if pgErr, ok := errors.AsType[*pgconn.PgError](err); ok && pgErr.Code == "23505" {
+			return ErrResourceAlreadyExists
+		}
+
+		return fmt.Errorf("cannot insert mailing list subscriber: %w", err)
+	}
+
+	return nil
+}
+
+func (cns *MailingListSubscriber) Update(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+) error {
+	q := `
+UPDATE mailing_list_subscribers
+SET
+	status = @status,
+	updated_at = @updated_at
+WHERE
+	%s
+	AND id = @mailing_list_subscriber_id;
+`
+
+	q = fmt.Sprintf(q, scope.SQLFragment())
+
+	args := pgx.StrictNamedArgs{
+		"mailing_list_subscriber_id": cns.ID,
+		"status":                     cns.Status,
+		"updated_at":                 cns.UpdatedAt,
+	}
+	maps.Copy(args, scope.SQLArguments())
+
+	tag, err := conn.Exec(ctx, q, args)
+	if err != nil {
+		return fmt.Errorf("cannot update mailing list subscriber: %w", err)
+	}
+
+	if tag.RowsAffected() == 0 {
+		return ErrResourceNotFound
+	}
+
+	return nil
+}
+
+func (cns *MailingListSubscriber) Delete(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+) error {
+	q := `
+DELETE FROM
+	mailing_list_subscribers
+WHERE
+	%s
+	AND id = @mailing_list_subscriber_id;
+`
+
+	q = fmt.Sprintf(q, scope.SQLFragment())
+
+	args := pgx.StrictNamedArgs{"mailing_list_subscriber_id": cns.ID}
+	maps.Copy(args, scope.SQLArguments())
+
+	_, err := conn.Exec(ctx, q, args)
+	if err != nil {
+		return fmt.Errorf("cannot delete mailing list subscriber: %w", err)
+	}
+
+	return nil
+}
+
+func (cnss *MailingListSubscribers) CountByMailingListID(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+	mailingListID gid.GID,
+) (int, error) {
+	q := `
+SELECT
+	COUNT(id)
+FROM
+	mailing_list_subscribers
+WHERE
+	%s
+	AND mailing_list_id = @mailing_list_id
+`
+
+	q = fmt.Sprintf(q, scope.SQLFragment())
+
+	args := pgx.StrictNamedArgs{"mailing_list_id": mailingListID}
+	maps.Copy(args, scope.SQLArguments())
+
+	row := conn.QueryRow(ctx, q, args)
+
+	var count int
+	err := row.Scan(&count)
+	if err != nil {
+		return 0, fmt.Errorf("cannot count mailing list subscribers: %w", err)
+	}
+
+	return count, nil
+}
+
+func (cnss *MailingListSubscribers) LoadByMailingListID(
+	ctx context.Context,
+	conn pg.Conn,
+	scope Scoper,
+	mailingListID gid.GID,
+	cursor *page.Cursor[MailingListSubscriberOrderField],
+) error {
+	q := `
+SELECT
+	id,
+	organization_id,
+	mailing_list_id,
+	full_name,
+	email,
+	status,
+	created_at,
+	updated_at
+FROM
+	mailing_list_subscribers
+WHERE
+	%s
+	AND mailing_list_id = @mailing_list_id
+	AND %s
+`
+
+	q = fmt.Sprintf(q, scope.SQLFragment(), cursor.SQLFragment())
+
+	args := pgx.StrictNamedArgs{
+		"mailing_list_id": mailingListID,
+	}
+	maps.Copy(args, scope.SQLArguments())
+	maps.Copy(args, cursor.SQLArguments())
+
+	rows, err := conn.Query(ctx, q, args)
+	if err != nil {
+		return fmt.Errorf("cannot query mailing list subscribers: %w", err)
+	}
+
+	subscribers, err := pgx.CollectRows(rows, pgx.RowToAddrOfStructByName[MailingListSubscriber])
+	if err != nil {
+		return fmt.Errorf("cannot collect mailing list subscribers: %w", err)
+	}
+
+	*cnss = subscribers
+
+	return nil
+}

pkg/coredata/mailing_list_subscriber_order_field.go

@@ -0,0 +1,36 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package coredata
+
+import "fmt"
+
+type MailingListSubscriberOrderField string
+
+const (
+	MailingListSubscriberOrderFieldCreatedAt MailingListSubscriberOrderField = "CREATED_AT"
+)
+
+func (f MailingListSubscriberOrderField) String() string {
+	return string(f)
+}
+
+func (f MailingListSubscriberOrderField) Column() string {
+	switch f {
+	case MailingListSubscriberOrderFieldCreatedAt:
+		return "created_at"
+	}
+
+	panic(fmt.Sprintf("unsupported order by: %s", f))
+}

pkg/coredata/mailing_list_subscriber_status.go

@@ -0,0 +1,58 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package coredata
+
+import (
+	"database/sql/driver"
+	"fmt"
+)
+
+type MailingListSubscriberStatus string
+
+const (
+	MailingListSubscriberStatusPending   MailingListSubscriberStatus = "PENDING"
+	MailingListSubscriberStatusConfirmed MailingListSubscriberStatus = "CONFIRMED"
+)
+
+func (s MailingListSubscriberStatus) String() string {
+	return string(s)
+}
+
+func (s *MailingListSubscriberStatus) Scan(value any) error {
+	var str string
+	switch v := value.(type) {
+	case string:
+		str = v
+	case []byte:
+		str = string(v)
+	default:
+		return fmt.Errorf("unsupported type for MailingListSubscriberStatus: %T", value)
+	}
+
+	switch str {
+	case "PENDING":
+		*s = MailingListSubscriberStatusPending
+	case "CONFIRMED":
+		*s = MailingListSubscriberStatusConfirmed
+	default:
+		return fmt.Errorf("invalid MailingListSubscriberStatus value: %q", str)
+	}
+
+	return nil
+}
+
+func (s MailingListSubscriberStatus) Value() (driver.Value, error) {
+	return s.String(), nil
+}

pkg/coredata/migrations/20260225T000000Z.sql

@@ -0,0 +1,50 @@
+CREATE TABLE mailing_lists (
+    id TEXT PRIMARY KEY,
+    tenant_id TEXT NOT NULL,
+    organization_id TEXT NOT NULL REFERENCES organizations(id) ON UPDATE CASCADE ON DELETE CASCADE,
+    reply_to CITEXT,
+    created_at TIMESTAMP WITH TIME ZONE NOT NULL,
+    updated_at TIMESTAMP WITH TIME ZONE NOT NULL,
+    UNIQUE (organization_id)
+);
+
+CREATE TYPE mailing_list_subscriber_status AS ENUM (
+    'PENDING',
+    'CONFIRMED'
+);
+
+CREATE TABLE mailing_list_subscribers (
+    id TEXT PRIMARY KEY,
+    tenant_id TEXT NOT NULL,
+    organization_id TEXT NOT NULL REFERENCES organizations(id) ON UPDATE CASCADE ON DELETE CASCADE,
+    mailing_list_id TEXT NOT NULL REFERENCES mailing_lists(id) ON UPDATE CASCADE ON DELETE CASCADE,
+    full_name TEXT NOT NULL,
+    email CITEXT NOT NULL,
+    status mailing_list_subscriber_status NOT NULL DEFAULT 'PENDING',
+    created_at TIMESTAMP WITH TIME ZONE NOT NULL,
+    updated_at TIMESTAMP WITH TIME ZONE NOT NULL,
+    UNIQUE (mailing_list_id, email)
+);
+
+ALTER TABLE trust_centers
+    ADD COLUMN mailing_list_id TEXT REFERENCES mailing_lists(id) ON UPDATE CASCADE ON DELETE RESTRICT;
+
+INSERT INTO mailing_lists (
+    id,
+    tenant_id,
+    organization_id,
+    created_at,
+    updated_at
+)
+SELECT
+    generate_gid(decode_base64_unpadded(tc.tenant_id), 64),
+    tc.tenant_id,
+    tc.organization_id,
+    NOW(),
+    NOW()
+FROM trust_centers tc;
+
+UPDATE trust_centers tc
+SET mailing_list_id = ml.id
+FROM mailing_lists ml
+WHERE ml.organization_id = tc.organization_id;

pkg/coredata/trust_center.go

@@ -35,6 +35,7 @@ type (
 		TenantID                     gid.TenantID `db:"tenant_id"`
 		Active                       bool         `db:"active"`
 		Slug                         string       `db:"slug"`
+		MailingListID                *gid.GID     `db:"mailing_list_id"`
 		LogoFileID                   *gid.GID     `db:"logo_file_id"`
 		DarkLogoFileID               *gid.GID     `db:"dark_logo_file_id"`
 		NonDisclosureAgreementFileID *gid.GID     `db:"non_disclosure_agreement_file_id"`
@@ -79,6 +80,7 @@ SELECT
 	id,
 	organization_id,
 	tenant_id,
+	mailing_list_id,
 	logo_file_id,
 	dark_logo_file_id,
 	active,
@@ -129,6 +131,7 @@ SELECT
 	id,
 	organization_id,
 	tenant_id,
+	mailing_list_id,
 	logo_file_id,
 	dark_logo_file_id,
 	active,
@@ -179,6 +182,7 @@ SELECT
 	id,
 	organization_id,
 	tenant_id,
+	mailing_list_id,
 	logo_file_id,
 	dark_logo_file_id,
 	active,
@@ -224,6 +228,7 @@ INSERT INTO trust_centers (
 	id,
 	organization_id,
 	tenant_id,
+	mailing_list_id,
 	logo_file_id,
 	dark_logo_file_id,
 	active,
@@ -235,6 +240,7 @@ INSERT INTO trust_centers (
 	@id,
 	@organization_id,
 	@tenant_id,
+	@mailing_list_id,
 	@logo_file_id,
 	@dark_logo_file_id,
 	@active,
@@ -249,6 +255,7 @@ INSERT INTO trust_centers (
 		"id":                               tc.ID,
 		"organization_id":                  tc.OrganizationID,
 		"tenant_id":                        tc.TenantID,
+		"mailing_list_id":                  tc.MailingListID,
 		"logo_file_id":                     tc.LogoFileID,
 		"dark_logo_file_id":                tc.DarkLogoFileID,
 		"active":                           tc.Active,

pkg/iam/organization_service.go

@@ -480,12 +480,20 @@ func (s *OrganizationService) CreateOrganization(
 			UpdatedAt:      now,
 		}
 
+		mailingList = &coredata.MailingList{
+			ID:             gid.New(tenantID, coredata.MailingListEntityType),
+			OrganizationID: organization.ID,
+			CreatedAt:      now,
+			UpdatedAt:      now,
+		}
+
 		trustCenter = &coredata.TrustCenter{
 			ID:             gid.New(tenantID, coredata.TrustCenterEntityType),
 			OrganizationID: organization.ID,
 			TenantID:       organization.TenantID,
 			Active:         false,
 			Slug:           slug.Make(organization.Name),
+			MailingListID:  &mailingList.ID,
 			CreatedAt:      now,
 			UpdatedAt:      now,
 		}
@@ -616,6 +624,10 @@ func (s *OrganizationService) CreateOrganization(
 				return fmt.Errorf("cannot insert organization context: %w", err)
 			}
 
+			if err := mailingList.Insert(ctx, tx, scope); err != nil {
+				return fmt.Errorf("cannot insert mailing list: %w", err)
+			}
+
 			if err := trustCenter.Insert(ctx, tx, scope); err != nil {
 				return fmt.Errorf("cannot insert trust center: %w", err)
 			}

pkg/mailman/errors.go

@@ -0,0 +1,23 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package mailman
+
+import "errors"
+
+var (
+	ErrMailingListNotFound    = errors.New("mailing list not found")
+	ErrSubscriberNotFound     = errors.New("mailing list subscriber not found")
+	ErrSubscriberAlreadyExist = errors.New("mailing list subscriber already exists")
+)

pkg/mailman/service.go

@@ -0,0 +1,218 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package mailman
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"time"
+
+	"go.gearno.de/kit/pg"
+	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/gid"
+	"go.probo.inc/probo/pkg/mail"
+	"go.probo.inc/probo/pkg/page"
+)
+
+type Service struct {
+	pg *pg.Client
+}
+
+func NewService(pgClient *pg.Client) *Service {
+	return &Service{pg: pgClient}
+}
+
+func (s *Service) WithTenant(tenantID gid.TenantID) *TenantService {
+	return &TenantService{pg: s.pg, scope: coredata.NewScope(tenantID)}
+}
+
+type TenantService struct {
+	pg    *pg.Client
+	scope coredata.Scoper
+}
+
+func (s *TenantService) UpdateMailingList(
+	ctx context.Context,
+	id gid.GID,
+	replyTo *mail.Addr,
+) (*coredata.MailingList, error) {
+	var ml coredata.MailingList
+
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			if err := ml.LoadByID(ctx, conn, s.scope, id); err != nil {
+				if errors.Is(err, coredata.ErrResourceNotFound) {
+					return ErrMailingListNotFound
+				}
+				return fmt.Errorf("cannot load mailing list: %w", err)
+			}
+
+			ml.ReplyTo = replyTo
+			ml.UpdatedAt = time.Now()
+
+			if err := ml.Update(ctx, conn, s.scope); err != nil {
+				return fmt.Errorf("cannot update mailing list: %w", err)
+			}
+
+			return nil
+		},
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	return &ml, nil
+}
+
+func (s *TenantService) GetSubscriber(
+	ctx context.Context,
+	mailingListID gid.GID,
+	email mail.Addr,
+) (*coredata.MailingListSubscriber, error) {
+	var subscriber coredata.MailingListSubscriber
+
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			if err := subscriber.LoadByMailingListIDAndEmail(ctx, conn, s.scope, mailingListID, email); err != nil {
+				return fmt.Errorf("cannot load mailing list subscriber: %w", err)
+			}
+
+			return nil
+		},
+	)
+	if err != nil {
+		if errors.Is(err, coredata.ErrResourceNotFound) {
+			return nil, nil
+		}
+		return nil, err
+	}
+
+	return &subscriber, nil
+}
+
+func (s *TenantService) CreateSubscriber(
+	ctx context.Context,
+	mailingListID gid.GID,
+	email mail.Addr,
+	fullName string,
+) (*coredata.MailingListSubscriber, error) {
+	now := time.Now()
+
+	subscriber := &coredata.MailingListSubscriber{
+		ID:            gid.New(s.scope.GetTenantID(), coredata.MailingListSubscriberEntityType),
+		MailingListID: mailingListID,
+		FullName:      fullName,
+		Email:         email,
+		Status:        coredata.MailingListSubscriberStatusPending,
+		CreatedAt:     now,
+		UpdatedAt:     now,
+	}
+
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			var ml coredata.MailingList
+			if err := ml.LoadByID(ctx, conn, s.scope, mailingListID); err != nil {
+				return fmt.Errorf("cannot load mailing list: %w", err)
+			}
+			subscriber.OrganizationID = ml.OrganizationID
+
+			if err := subscriber.Insert(ctx, conn, s.scope); err != nil {
+				if errors.Is(err, coredata.ErrResourceAlreadyExists) {
+					return ErrSubscriberAlreadyExist
+				}
+				return fmt.Errorf("cannot insert mailing list subscriber: %w", err)
+			}
+
+			return nil
+		},
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	return subscriber, nil
+}
+
+func (s *TenantService) DeleteSubscriber(
+	ctx context.Context,
+	id gid.GID,
+) error {
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			subscriber := coredata.MailingListSubscriber{ID: id}
+			if err := subscriber.Delete(ctx, conn, s.scope); err != nil {
+				return fmt.Errorf("cannot delete mailing list subscriber: %w", err)
+			}
+			return nil
+		},
+	)
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (s *TenantService) CountSubscribers(
+	ctx context.Context,
+	mailingListID gid.GID,
+) (int, error) {
+	var count int
+
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) (err error) {
+			subscribers := coredata.MailingListSubscribers{}
+			count, err = subscribers.CountByMailingListID(ctx, conn, s.scope, mailingListID)
+			if err != nil {
+				return fmt.Errorf("cannot count mailing list subscribers: %w", err)
+			}
+			return nil
+		},
+	)
+	if err != nil {
+		return 0, err
+	}
+
+	return count, nil
+}
+
+func (s *TenantService) ListSubscribers(
+	ctx context.Context,
+	mailingListID gid.GID,
+	cursor *page.Cursor[coredata.MailingListSubscriberOrderField],
+) (*page.Page[*coredata.MailingListSubscriber, coredata.MailingListSubscriberOrderField], error) {
+	var subscribers coredata.MailingListSubscribers
+
+	err := s.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			if err := subscribers.LoadByMailingListID(ctx, conn, s.scope, mailingListID, cursor); err != nil {
+				return fmt.Errorf("cannot load mailing list subscribers: %w", err)
+			}
+			return nil
+		},
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	return page.NewPage(subscribers, cursor), nil
+}

pkg/probo/actions.go

@@ -40,6 +40,14 @@ const (
 	ActionTrustCenterAccessUpdate = "core:trust-center-access:update"
 	ActionTrustCenterAccessDelete = "core:trust-center-access:delete"
 
+	// MailingList actions
+	ActionMailingListUpdate = "core:mailing-list:update"
+
+	// MailingListSubscriber actions
+	ActionMailingListSubscriberList   = "core:mailing-list-subscriber:list"
+	ActionMailingListSubscriberCreate = "core:mailing-list-subscriber:create"
+	ActionMailingListSubscriberDelete = "core:mailing-list-subscriber:delete"
+
 	// TrustCenterReference actions
 	ActionTrustCenterReferenceList       = "core:trust-center-reference:list"
 	ActionTrustCenterReferenceGetLogoUrl = "core:trust-center-reference:get-logo-url"

pkg/probo/trust_center_service.go

@@ -673,3 +673,36 @@ func (s *TrustCenterService) EmailPresenterConfig(ctx context.Context, complianc
 
 	return emailPresenterCfg, nil
 }
+
+func (s *TrustCenterService) GetMailingList(
+	ctx context.Context,
+	trustCenterID gid.GID,
+) (*coredata.MailingList, error) {
+	var mailingList *coredata.MailingList
+
+	err := s.svc.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			trustCenter := &coredata.TrustCenter{}
+			if err := trustCenter.LoadByID(ctx, conn, s.svc.scope, trustCenterID); err != nil {
+				return fmt.Errorf("cannot load trust center: %w", err)
+			}
+
+			if trustCenter.MailingListID == nil {
+				return nil
+			}
+
+			mailingList = &coredata.MailingList{}
+			if err := mailingList.LoadByID(ctx, conn, s.svc.scope, *trustCenter.MailingListID); err != nil {
+				return fmt.Errorf("cannot load mailing list: %w", err)
+			}
+
+			return nil
+		},
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	return mailingList, nil
+}

pkg/probod/probod.go

@@ -56,6 +56,7 @@ import (
 	"go.probo.inc/probo/pkg/html2pdf"
 	"go.probo.inc/probo/pkg/iam"
 	"go.probo.inc/probo/pkg/mailer"
+	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/probo"
 	"go.probo.inc/probo/pkg/securecookie"
 	"go.probo.inc/probo/pkg/server"
@@ -471,6 +472,8 @@ func (impl *Implm) Run(
 		slackService,
 	)
 
+	mailmanService := mailman.NewService(pgClient)
+
 	serverHandler, err := server.NewServer(
 		server.Config{
 			AllowedOrigins:    impl.cfg.Api.Cors.AllowedOrigins,
@@ -479,6 +482,7 @@ func (impl *Implm) Run(
 			IAM:               iamService,
 			Trust:             trustService,
 			ESign:             esignService,
+			Mailman:           mailmanService,
 			Slack:             slackService,
 			ConnectorRegistry: defaultConnectorRegistry,
 			BaseURL:           baseURL,

pkg/server/api/api.go

@@ -27,6 +27,7 @@ import (
 	"go.probo.inc/probo/pkg/connector"
 	"go.probo.inc/probo/pkg/esign"
 	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/probo"
 	"go.probo.inc/probo/pkg/securecookie"
 	connect_v1 "go.probo.inc/probo/pkg/server/api/connect/v1"
@@ -47,6 +48,7 @@ type (
 		Trust             *trust.Service
 		ESign             *esign.Service
 		Slack             *slack.Service
+		Mailman           *mailman.Service
 		Cookie            securecookie.Config
 		TokenSecret       string
 		ConnectorRegistry *connector.ConnectorRegistry
@@ -120,7 +122,9 @@ func NewServer(cfg Config) (*Server, error) {
 			cfg.IAM,
 			cfg.Trust,
 			cfg.ESign,
+			cfg.Mailman,
 			cfg.Cookie,
+			cfg.TokenSecret,
 			cfg.BaseURL,
 		),
 		consoleHandler: console_v1.NewMux(
@@ -128,6 +132,7 @@ func NewServer(cfg Config) (*Server, error) {
 			cfg.Probo,
 			cfg.IAM,
 			cfg.ESign,
+			cfg.Mailman,
 			cfg.Cookie,
 			cfg.TokenSecret,
 			cfg.ConnectorRegistry,

pkg/server/api/console/v1/graphql_handler.go

@@ -20,19 +20,21 @@ import (
 	"go.gearno.de/kit/log"
 	"go.probo.inc/probo/pkg/esign"
 	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/probo"
 	"go.probo.inc/probo/pkg/server/api/authz"
 	"go.probo.inc/probo/pkg/server/api/console/v1/schema"
 	"go.probo.inc/probo/pkg/server/gqlutils"
 )
 
-func NewGraphQLHandler(iamSvc *iam.Service, proboSvc *probo.Service, esignSvc *esign.Service, customDomainCname string, logger *log.Logger) http.Handler {
+func NewGraphQLHandler(iamSvc *iam.Service, proboSvc *probo.Service, esignSvc *esign.Service, mailmanSvc *mailman.Service, customDomainCname string, logger *log.Logger) http.Handler {
 	config := schema.Config{
 		Resolvers: &Resolver{
 			authorize:         authz.NewAuthorizeFunc(iamSvc, logger),
 			probo:             proboSvc,
 			iam:               iamSvc,
 			esign:             esignSvc,
+			mailman:           mailmanSvc,
 			customDomainCname: customDomainCname,
 			logger:            logger,
 		},

pkg/server/api/console/v1/resolver.go

@@ -31,6 +31,7 @@ import (
 	"go.probo.inc/probo/pkg/esign"
 	"go.probo.inc/probo/pkg/gid"
 	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/probo"
 	"go.probo.inc/probo/pkg/saferedirect"
 	"go.probo.inc/probo/pkg/securecookie"
@@ -45,6 +46,7 @@ type (
 		probo             *probo.Service
 		iam               *iam.Service
 		esign             *esign.Service
+		mailman           *mailman.Service
 		logger            *log.Logger
 		customDomainCname string
 	}
@@ -55,6 +57,7 @@ func NewMux(
 	proboSvc *probo.Service,
 	iamSvc *iam.Service,
 	esignSvc *esign.Service,
+	mailmanSvc *mailman.Service,
 	cookieConfig securecookie.Config,
 	tokenSecret string,
 	connectorRegistry *connector.ConnectorRegistry,
@@ -65,7 +68,7 @@ func NewMux(
 
 	safeRedirect := &saferedirect.SafeRedirect{AllowedHost: baseURL.Host()}
 
-	graphqlHandler := NewGraphQLHandler(iamSvc, proboSvc, esignSvc, customDomainCname, logger)
+	graphqlHandler := NewGraphQLHandler(iamSvc, proboSvc, esignSvc, mailmanSvc, customDomainCname, logger)
 
 	r.Group(func(r chi.Router) {
 		r.Use(authn.NewSessionMiddleware(iamSvc, cookieConfig))
@@ -199,6 +202,10 @@ func (r *Resolver) ProboService(ctx context.Context, tenantID gid.TenantID) *pro
 	return r.probo.WithTenant(tenantID)
 }
 
+func (r *Resolver) MailmanService(ctx context.Context, tenantID gid.TenantID) *mailman.TenantService {
+	return r.mailman.WithTenant(tenantID)
+}
+
 func (r *Resolver) Permission(ctx context.Context, obj types.Node, action string) (bool, error) {
 	return r.authorize(ctx, obj.GetID(), action) == nil, nil
 }

pkg/server/api/console/v1/schema.graphql

@@ -1634,7 +1634,10 @@ input VendorFilter {
 }
 
 # Core Types
-type TrustCenter implements Node {
+type TrustCenter implements Node
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.TrustCenter"
+    ) {
     id: ID!
     active: Boolean!
     logoFileUrl: String @goField(forceResolver: true)
@@ -1677,9 +1680,60 @@ type TrustCenter implements Node {
         orderBy: ComplianceExternalURLOrder
     ): ComplianceExternalURLConnection! @goField(forceResolver: true)
 
+    mailingList: MailingList @goField(forceResolver: true)
+
     permission(action: String!): Boolean! @goField(forceResolver: true)
 }
 
+type MailingList implements Node {
+    id: ID!
+    replyTo: EmailAddr
+
+    subscribers(
+        first: Int
+        after: CursorKey
+        last: Int
+        before: CursorKey
+    ): MailingListSubscriberConnection! @goField(forceResolver: true)
+}
+
+enum MailingListSubscriberStatus
+    @goModel(
+        model: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatus"
+    ) {
+    PENDING
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusPending"
+        )
+    CONFIRMED
+        @goEnum(
+            value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusConfirmed"
+        )
+}
+
+type MailingListSubscriber implements Node {
+    id: ID!
+    fullName: String!
+    email: EmailAddr!
+    status: MailingListSubscriberStatus!
+    createdAt: Datetime!
+    updatedAt: Datetime!
+}
+
+type MailingListSubscriberConnection
+    @goModel(
+        model: "go.probo.inc/probo/pkg/server/api/console/v1/types.MailingListSubscriberConnection"
+    ) {
+    edges: [MailingListSubscriberEdge!]!
+    pageInfo: PageInfo!
+    totalCount: Int! @goField(forceResolver: true)
+}
+
+type MailingListSubscriberEdge {
+    cursor: CursorKey!
+    node: MailingListSubscriber!
+}
+
 type Organization implements Node {
     id: ID!
     name: String!
@@ -3353,6 +3407,17 @@ type Mutation {
     deleteTrustCenterAccess(
         input: DeleteTrustCenterAccessInput!
     ): DeleteTrustCenterAccessPayload!
+    # Mailing List mutations
+    updateMailingList(
+        input: UpdateMailingListInput!
+    ): UpdateMailingListPayload!
+    # Mailing List Subscriber mutations
+    createMailingListSubscriber(
+        input: CreateMailingListSubscriberInput!
+    ): CreateMailingListSubscriberPayload!
+    deleteMailingListSubscriber(
+        input: DeleteMailingListSubscriberInput!
+    ): DeleteMailingListSubscriberPayload!
     # Trust Center Reference mutations
     createTrustCenterReference(
         input: CreateTrustCenterReferenceInput!
@@ -3755,6 +3820,25 @@ input DeleteTrustCenterAccessInput {
     id: ID!
 }
 
+input UpdateMailingListInput {
+    id: ID!
+    replyTo: EmailAddr
+}
+
+type UpdateMailingListPayload {
+    mailingList: MailingList!
+}
+
+input CreateMailingListSubscriberInput {
+    mailingListId: ID!
+    fullName: String!
+    email: EmailAddr!
+}
+
+input DeleteMailingListSubscriberInput {
+    id: ID!
+}
+
 input CreateTrustCenterReferenceInput {
     trustCenterId: ID!
     name: String!
@@ -4606,6 +4690,14 @@ type DeleteTrustCenterAccessPayload {
     deletedTrustCenterAccessId: ID!
 }
 
+type CreateMailingListSubscriberPayload {
+    mailingListSubscriberEdge: MailingListSubscriberEdge!
+}
+
+type DeleteMailingListSubscriberPayload {
+    deletedMailingListSubscriberId: ID!
+}
+
 type CreateTrustCenterReferencePayload {
     trustCenterReferenceEdge: TrustCenterReferenceEdge!
 }

pkg/server/api/console/v1/types/mailing_list.go

@@ -0,0 +1,26 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package types
+
+import (
+	"go.probo.inc/probo/pkg/coredata"
+)
+
+func NewMailingList(ml *coredata.MailingList) *MailingList {
+	return &MailingList{
+		ID:      ml.ID,
+		ReplyTo: ml.ReplyTo,
+	}
+}

pkg/server/api/console/v1/types/mailing_list_subscriber.go

@@ -0,0 +1,71 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package types
+
+import (
+	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/gid"
+	"go.probo.inc/probo/pkg/page"
+)
+
+type (
+	MailingListSubscriberOrderBy OrderBy[coredata.MailingListSubscriberOrderField]
+
+	MailingListSubscriberConnection struct {
+		TotalCount int
+		Edges      []*MailingListSubscriberEdge
+		PageInfo   *PageInfo
+
+		Resolver any
+		ParentID gid.GID
+	}
+)
+
+func NewMailingListSubscriber(s *coredata.MailingListSubscriber) *MailingListSubscriber {
+	return &MailingListSubscriber{
+		ID:        s.ID,
+		FullName:  s.FullName,
+		Email:     s.Email,
+		Status:    s.Status,
+		CreatedAt: s.CreatedAt,
+		UpdatedAt: s.UpdatedAt,
+	}
+}
+
+func NewMailingListSubscriberEdge(s *coredata.MailingListSubscriber, orderBy coredata.MailingListSubscriberOrderField) *MailingListSubscriberEdge {
+	return &MailingListSubscriberEdge{
+		Cursor: s.CursorKey(orderBy),
+		Node:   NewMailingListSubscriber(s),
+	}
+}
+
+func NewMailingListSubscriberConnection(
+	p *page.Page[*coredata.MailingListSubscriber, coredata.MailingListSubscriberOrderField],
+	resolver any,
+	mailingListID gid.GID,
+) *MailingListSubscriberConnection {
+	var edges = make([]*MailingListSubscriberEdge, len(p.Data))
+
+	for i := range edges {
+		edges[i] = NewMailingListSubscriberEdge(p.Data[i], p.Cursor.OrderBy.Field)
+	}
+
+	return &MailingListSubscriberConnection{
+		Edges:    edges,
+		PageInfo: NewPageInfo(p),
+		Resolver: resolver,
+		ParentID: mailingListID,
+	}
+}

pkg/server/api/console/v1/types/trust_center.go

@@ -15,9 +15,33 @@
 package types
 
 import (
+	"time"
+
 	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/gid"
 )
 
+type TrustCenter struct {
+	ID                   gid.GID                         `json:"id"`
+	Active               bool                            `json:"active"`
+	LogoFileURL          *string                         `json:"logoFileUrl,omitempty"`
+	DarkLogoFileURL      *string                         `json:"darkLogoFileUrl,omitempty"`
+	NdaFileName          *string                         `json:"ndaFileName,omitempty"`
+	NdaFileURL           *string                         `json:"ndaFileUrl,omitempty"`
+	CreatedAt            time.Time                       `json:"createdAt"`
+	UpdatedAt            time.Time                       `json:"updatedAt"`
+	Organization         *Organization                   `json:"organization"`
+	Accesses             *TrustCenterAccessConnection    `json:"accesses"`
+	References           *TrustCenterReferenceConnection `json:"references"`
+	ComplianceFrameworks *ComplianceFrameworkConnection   `json:"complianceFrameworks"`
+	ExternalUrls         *ComplianceExternalURLConnection `json:"externalUrls"`
+	MailingList          *MailingList                     `json:"mailingList,omitempty"`
+	Permission           bool                             `json:"permission"`
+}
+
+func (TrustCenter) IsNode()          {}
+func (t TrustCenter) GetID() gid.GID { return t.ID }
+
 func NewTrustCenter(tc *coredata.TrustCenter, file *coredata.File) *TrustCenter {
 	var ndaFileName *string
 	if file != nil {

pkg/server/api/console/v1/types/types.go

@@ -436,6 +436,16 @@ type CreateFrameworkPayload struct {
 	FrameworkEdge *FrameworkEdge `json:"frameworkEdge"`
 }
 
+type CreateMailingListSubscriberInput struct {
+	MailingListID gid.GID   `json:"mailingListId"`
+	FullName      string    `json:"fullName"`
+	Email         mail.Addr `json:"email"`
+}
+
+type CreateMailingListSubscriberPayload struct {
+	MailingListSubscriberEdge *MailingListSubscriberEdge `json:"mailingListSubscriberEdge"`
+}
+
 type CreateMeasureInput struct {
 	OrganizationID gid.GID `json:"organizationId"`
 	Name           string  `json:"name"`
@@ -959,6 +969,14 @@ type DeleteFrameworkPayload struct {
 	DeletedFrameworkID gid.GID `json:"deletedFrameworkId"`
 }
 
+type DeleteMailingListSubscriberInput struct {
+	ID gid.GID `json:"id"`
+}
+
+type DeleteMailingListSubscriberPayload struct {
+	DeletedMailingListSubscriberID gid.GID `json:"deletedMailingListSubscriberId"`
+}
+
 type DeleteMeasureInput struct {
 	MeasureID gid.GID `json:"measureId"`
 }
@@ -1431,6 +1449,32 @@ type ImportMeasurePayload struct {
 	MeasureEdges []*MeasureEdge `json:"measureEdges"`
 }
 
+type MailingList struct {
+	ID          gid.GID                          `json:"id"`
+	ReplyTo     *mail.Addr                       `json:"replyTo,omitempty"`
+	Subscribers *MailingListSubscriberConnection `json:"subscribers"`
+}
+
+func (MailingList) IsNode()             {}
+func (this MailingList) GetID() gid.GID { return this.ID }
+
+type MailingListSubscriber struct {
+	ID        gid.GID                              `json:"id"`
+	FullName  string                               `json:"fullName"`
+	Email     mail.Addr                            `json:"email"`
+	Status    coredata.MailingListSubscriberStatus `json:"status"`
+	CreatedAt time.Time                            `json:"createdAt"`
+	UpdatedAt time.Time                            `json:"updatedAt"`
+}
+
+func (MailingListSubscriber) IsNode()             {}
+func (this MailingListSubscriber) GetID() gid.GID { return this.ID }
+
+type MailingListSubscriberEdge struct {
+	Cursor page.CursorKey         `json:"cursor"`
+	Node   *MailingListSubscriber `json:"node"`
+}
+
 type Measure struct {
 	ID          gid.GID               `json:"id"`
 	Category    string                `json:"category"`
@@ -1899,26 +1943,6 @@ type TransferImpactAssessmentFilter struct {
 	SnapshotID *gid.GID `json:"snapshotId,omitempty"`
 }
 
-type TrustCenter struct {
-	ID                   gid.GID                          `json:"id"`
-	Active               bool                             `json:"active"`
-	LogoFileURL          *string                          `json:"logoFileUrl,omitempty"`
-	DarkLogoFileURL      *string                          `json:"darkLogoFileUrl,omitempty"`
-	NdaFileName          *string                          `json:"ndaFileName,omitempty"`
-	NdaFileURL           *string                          `json:"ndaFileUrl,omitempty"`
-	CreatedAt            time.Time                        `json:"createdAt"`
-	UpdatedAt            time.Time                        `json:"updatedAt"`
-	Organization         *Organization                    `json:"organization"`
-	Accesses             *TrustCenterAccessConnection     `json:"accesses"`
-	References           *TrustCenterReferenceConnection  `json:"references"`
-	ComplianceFrameworks *ComplianceFrameworkConnection   `json:"complianceFrameworks"`
-	ExternalUrls         *ComplianceExternalURLConnection `json:"externalUrls"`
-	Permission           bool                             `json:"permission"`
-}
-
-func (TrustCenter) IsNode()             {}
-func (this TrustCenter) GetID() gid.GID { return this.ID }
-
 type TrustCenterAccess struct {
 	ID                        gid.GID                              `json:"id"`
 	NdaSignature              *ElectronicSignature                 `json:"ndaSignature,omitempty"`
@@ -2148,6 +2172,15 @@ type UpdateFrameworkPayload struct {
 	Framework *Framework `json:"framework"`
 }
 
+type UpdateMailingListInput struct {
+	ID      gid.GID    `json:"id"`
+	ReplyTo *mail.Addr `json:"replyTo,omitempty"`
+}
+
+type UpdateMailingListPayload struct {
+	MailingList *MailingList `json:"mailingList"`
+}
+
 type UpdateMeasureInput struct {
 	ID          gid.GID                    `json:"id"`
 	Name        *string                    `json:"name,omitempty"`

pkg/server/api/console/v1/v1_resolver.go

@@ -1524,6 +1524,47 @@ func (r *frameworkConnectionResolver) TotalCount(ctx context.Context, obj *types
 	panic(fmt.Errorf("unsupported resolver: %T", obj.Resolver))
 }
 
+// Subscribers is the resolver for the subscribers field on MailingList.
+func (r *mailingListResolver) Subscribers(ctx context.Context, obj *types.MailingList, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.MailingListSubscriberConnection, error) {
+	if err := r.authorize(ctx, obj.ID, probo.ActionMailingListSubscriberList); err != nil {
+		return nil, err
+	}
+
+	pageOrderBy := page.OrderBy[coredata.MailingListSubscriberOrderField]{
+		Field:     coredata.MailingListSubscriberOrderFieldCreatedAt,
+		Direction: page.OrderDirectionDesc,
+	}
+
+	cursor := types.NewCursor(first, after, last, before, pageOrderBy)
+
+	result, err := r.MailmanService(ctx, obj.ID.TenantID()).ListSubscribers(ctx, obj.ID, cursor)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot list mailing list subscribers", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return types.NewMailingListSubscriberConnection(result, r, obj.ID), nil
+}
+
+// TotalCount is the resolver for the totalCount field.
+func (r *mailingListSubscriberConnectionResolver) TotalCount(ctx context.Context, obj *types.MailingListSubscriberConnection) (int, error) {
+	if err := r.authorize(ctx, obj.ParentID, probo.ActionMailingListSubscriberList); err != nil {
+		return 0, err
+	}
+
+	switch obj.Resolver.(type) {
+	case *mailingListResolver:
+		count, err := r.MailmanService(ctx, obj.ParentID.TenantID()).CountSubscribers(ctx, obj.ParentID)
+		if err != nil {
+			r.logger.ErrorCtx(ctx, "cannot count mailing list subscribers", log.Error(err))
+			return 0, gqlutils.Internal(ctx)
+		}
+		return count, nil
+	}
+
+	panic(fmt.Errorf("not implemented: TotalCount for parent type %T", obj.Resolver))
+}
+
 // Evidences is the resolver for the evidences field.
 func (r *measureResolver) Evidences(ctx context.Context, obj *types.Measure, first *int, after *page.CursorKey, last *int, before *page.CursorKey, orderBy *types.EvidenceOrderBy) (*types.EvidenceConnection, error) {
 	if err := r.authorize(ctx, obj.ID, probo.ActionEvidenceList); err != nil {
@@ -1987,6 +2028,56 @@ func (r *mutationResolver) DeleteTrustCenterAccess(ctx context.Context, input ty
 	}, nil
 }
 
+// UpdateMailingList is the resolver for the updateMailingList field.
+func (r *mutationResolver) UpdateMailingList(ctx context.Context, input types.UpdateMailingListInput) (*types.UpdateMailingListPayload, error) {
+	if err := r.authorize(ctx, input.ID, probo.ActionMailingListUpdate); err != nil {
+		return nil, err
+	}
+
+	ml, err := r.MailmanService(ctx, input.ID.TenantID()).UpdateMailingList(ctx, input.ID, input.ReplyTo)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot update mailing list", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.UpdateMailingListPayload{
+		MailingList: types.NewMailingList(ml),
+	}, nil
+}
+
+// CreateMailingListSubscriber is the resolver for the createMailingListSubscriber field.
+func (r *mutationResolver) CreateMailingListSubscriber(ctx context.Context, input types.CreateMailingListSubscriberInput) (*types.CreateMailingListSubscriberPayload, error) {
+	if err := r.authorize(ctx, input.MailingListID, probo.ActionMailingListSubscriberCreate); err != nil {
+		return nil, err
+	}
+
+	subscriber, err := r.MailmanService(ctx, input.MailingListID.TenantID()).CreateSubscriber(ctx, input.MailingListID, input.Email, input.FullName)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot create mailing list subscriber", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.CreateMailingListSubscriberPayload{
+		MailingListSubscriberEdge: types.NewMailingListSubscriberEdge(subscriber, coredata.MailingListSubscriberOrderFieldCreatedAt),
+	}, nil
+}
+
+// DeleteMailingListSubscriber is the resolver for the deleteMailingListSubscriber field.
+func (r *mutationResolver) DeleteMailingListSubscriber(ctx context.Context, input types.DeleteMailingListSubscriberInput) (*types.DeleteMailingListSubscriberPayload, error) {
+	if err := r.authorize(ctx, input.ID, probo.ActionMailingListSubscriberDelete); err != nil {
+		return nil, err
+	}
+
+	if err := r.MailmanService(ctx, input.ID.TenantID()).DeleteSubscriber(ctx, input.ID); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot delete mailing list subscriber", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.DeleteMailingListSubscriberPayload{
+		DeletedMailingListSubscriberID: input.ID,
+	}, nil
+}
+
 // CreateTrustCenterReference is the resolver for the createTrustCenterReference field.
 func (r *mutationResolver) CreateTrustCenterReference(ctx context.Context, input types.CreateTrustCenterReferenceInput) (*types.CreateTrustCenterReferencePayload, error) {
 	if err := r.authorize(ctx, input.TrustCenterID, probo.ActionTrustCenterReferenceCreate); err != nil {
@@ -7990,6 +8081,31 @@ func (r *trustCenterResolver) ExternalUrls(ctx context.Context, obj *types.Trust
 	return types.NewComplianceExternalURLConnection(result), nil
 }
 
+// MailingList is the resolver for the mailingList field.
+func (r *trustCenterResolver) MailingList(ctx context.Context, obj *types.TrustCenter) (*types.MailingList, error) {
+	if err := r.authorize(ctx, obj.ID, probo.ActionMailingListSubscriberList); err != nil {
+		return nil, err
+	}
+
+	if obj.MailingList != nil {
+		return obj.MailingList, nil
+	}
+
+	prb := r.ProboService(ctx, obj.ID.TenantID())
+
+	ml, err := prb.TrustCenters.GetMailingList(ctx, obj.ID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot get mailing list for trust center", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if ml == nil {
+		return nil, nil
+	}
+
+	return types.NewMailingList(ml), nil
+}
+
 // Permission is the resolver for the permission field.
 func (r *trustCenterResolver) Permission(ctx context.Context, obj *types.TrustCenter, action string) (bool, error) {
 	return r.Resolver.Permission(ctx, obj, action)
@@ -9072,6 +9188,14 @@ func (r *Resolver) FrameworkConnection() schema.FrameworkConnectionResolver {
 	return &frameworkConnectionResolver{r}
 }
 
+// MailingList returns schema.MailingListResolver implementation.
+func (r *Resolver) MailingList() schema.MailingListResolver { return &mailingListResolver{r} }
+
+// MailingListSubscriberConnection returns schema.MailingListSubscriberConnectionResolver implementation.
+func (r *Resolver) MailingListSubscriberConnection() schema.MailingListSubscriberConnectionResolver {
+	return &mailingListSubscriberConnectionResolver{r}
+}
+
 // Measure returns schema.MeasureResolver implementation.
 func (r *Resolver) Measure() schema.MeasureResolver { return &measureResolver{r} }
 
@@ -9306,6 +9430,8 @@ type evidenceConnectionResolver struct{ *Resolver }
 type fileResolver struct{ *Resolver }
 type frameworkResolver struct{ *Resolver }
 type frameworkConnectionResolver struct{ *Resolver }
+type mailingListResolver struct{ *Resolver }
+type mailingListSubscriberConnectionResolver struct{ *Resolver }
 type measureResolver struct{ *Resolver }
 type measureConnectionResolver struct{ *Resolver }
 type meetingResolver struct{ *Resolver }

pkg/server/api/trust/v1/graphql_handler.go

@@ -21,6 +21,7 @@ import (
 	"go.probo.inc/probo/pkg/baseurl"
 	"go.probo.inc/probo/pkg/esign"
 	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/securecookie"
 	"go.probo.inc/probo/pkg/server/api/authn"
 	"go.probo.inc/probo/pkg/server/api/trust/v1/schema"
@@ -29,12 +30,13 @@ import (
 	"go.probo.inc/probo/pkg/trust"
 )
 
-func NewGraphQLHandler(iamSvc *iam.Service, trustSvc *trust.Service, esignSvc *esign.Service, logger *log.Logger, baseURL *baseurl.BaseURL, cookieConfig securecookie.Config) http.Handler {
+func NewGraphQLHandler(iamSvc *iam.Service, trustSvc *trust.Service, esignSvc *esign.Service, mailmanSvc *mailman.Service, logger *log.Logger, baseURL *baseurl.BaseURL, cookieConfig securecookie.Config, tokenSecret string) http.Handler {
 	config := schema.Config{
 		Resolvers: &Resolver{
 			iam:           iamSvc,
 			trust:         trustSvc,
 			esign:         esignSvc,
+			mailman:       mailmanSvc,
 			logger:        logger,
 			baseURL:       baseURL,
 			sessionCookie: authn.NewCookie(&cookieConfig),

pkg/server/api/trust/v1/resolver.go

@@ -26,6 +26,7 @@ import (
 	"go.probo.inc/probo/pkg/esign"
 	"go.probo.inc/probo/pkg/gid"
 	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/securecookie"
 	"go.probo.inc/probo/pkg/server/api/authn"
 	"go.probo.inc/probo/pkg/server/api/compliancepage"
@@ -39,7 +40,6 @@ type (
 		CookieDuration    time.Duration
 		TokenDuration     time.Duration
 		ReportURLDuration time.Duration
-		TokenSecret       string
 		Scope             string
 		TokenType         string
 		CookieSecure      bool
@@ -48,6 +48,7 @@ type (
 	Resolver struct {
 		trust         *trust.Service
 		esign         *esign.Service
+		mailman       *mailman.Service
 		logger        *log.Logger
 		iam           *iam.Service
 		sessionCookie *authn.Cookie
@@ -78,7 +79,9 @@ func NewMux(
 	iamSvc *iam.Service,
 	trustSvc *trust.Service,
 	esignSvc *esign.Service,
+	mailmanSvc *mailman.Service,
 	cookieConfig securecookie.Config,
+	tokenSecret string,
 	baseURL *baseurl.BaseURL,
 ) *chi.Mux {
 	r := chi.NewMux()
@@ -86,17 +89,17 @@ func NewMux(
 	r.Use(compliancepage.NewCompliancePagePresenceMiddleware())
 	r.Use(authn.NewSessionMiddleware(iamSvc, cookieConfig))
 
-	graphqlHandler := NewGraphQLHandler(iamSvc, trustSvc, esignSvc, logger, baseURL, cookieConfig)
+	graphqlHandler := NewGraphQLHandler(iamSvc, trustSvc, esignSvc, mailmanSvc, logger, baseURL, cookieConfig, tokenSecret)
 
 	r.Handle("/graphql", graphqlHandler)
 
 	return r
 }
 
-func (r *Resolver) RootTrustService(ctx context.Context) *trust.TenantService {
-	return r.trust.WithTenant(gid.NewTenantID())
-}
-
 func (r *Resolver) TrustService(ctx context.Context, tenantID gid.TenantID) *trust.TenantService {
 	return r.trust.WithTenant(tenantID)
 }
+
+func (r *Resolver) MailmanService(ctx context.Context, tenantID gid.TenantID) *mailman.TenantService {
+	return r.mailman.WithTenant(tenantID)
+}

pkg/server/api/trust/v1/schema.graphql

@@ -530,6 +530,7 @@ type TrustCenter implements Node {
 
   nonDisclosureAgreement: NonDisclosureAgreement @goField(forceResolver: true)
 
+  viewerSubscription: MailingListSubscriber @goField(forceResolver: true)
   organization: Organization! @goField(forceResolver: true)
 
   documents(
@@ -892,4 +893,41 @@ type Mutation {
   recordSigningEvent(
     input: RecordSigningEventInput!
   ): RecordSigningEventPayload @session(required: PRESENT)
+
+  subscribeToMailingList: SubscribeToMailingListPayload! @session(required: PRESENT)
+
+  unsubscribeFromMailingList: UnsubscribeFromMailingListPayload! @session(required: PRESENT)
+}
+
+type SubscribeToMailingListPayload {
+  subscription: MailingListSubscriber!
+}
+
+type UnsubscribeFromMailingListPayload {
+  deletedMailingListSubscriberId: ID
+}
+
+enum MailingListSubscriberStatus
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatus"
+  ) {
+  PENDING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusPending"
+    )
+  CONFIRMED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusConfirmed"
+    )
+}
+
+type MailingListSubscriber implements Node
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.MailingListSubscriber"
+  ) {
+  id: ID!
+  email: EmailAddr!
+  status: MailingListSubscriberStatus!
+  createdAt: Datetime!
+  updatedAt: Datetime!
 }

pkg/server/api/trust/v1/schema/schema.go

@@ -172,6 +172,14 @@ type ComplexityRoot struct {
 		UpdatedAt     func(childComplexity int) int
 	}
 
+	MailingListSubscriber struct {
+		CreatedAt func(childComplexity int) int
+		Email     func(childComplexity int) int
+		ID        func(childComplexity int) int
+		Status    func(childComplexity int) int
+		UpdatedAt func(childComplexity int) int
+	}
+
 	Mutation struct {
 		AcceptElectronicSignature    func(childComplexity int, input types.AcceptElectronicSignatureInput) int
 		ExportDocumentPDF            func(childComplexity int, input types.ExportDocumentPDFInput) int
@@ -183,6 +191,8 @@ type ComplexityRoot struct {
 		RequestReportAccess          func(childComplexity int, input types.RequestReportAccessInput) int
 		RequestTrustCenterFileAccess func(childComplexity int, input types.RequestTrustCenterFileAccessInput) int
 		SendMagicLink                func(childComplexity int, input types.SendMagicLinkInput) int
+		SubscribeToMailingList       func(childComplexity int) int
+		UnsubscribeFromMailingList   func(childComplexity int) int
 		UpdateFullName               func(childComplexity int, input types.UpdateFullNameInput) int
 		VerifyMagicLink              func(childComplexity int, input types.VerifyMagicLinkInput) int
 	}
@@ -247,6 +257,10 @@ type ComplexityRoot struct {
 		Success func(childComplexity int) int
 	}
 
+	SubscribeToMailingListPayload struct {
+		Subscription func(childComplexity int) int
+	}
+
 	TrustCenter struct {
 		Active                 func(childComplexity int) int
 		Audits                 func(childComplexity int, first *int, after *page.CursorKey, last *int, before *page.CursorKey) int
@@ -262,6 +276,7 @@ type ComplexityRoot struct {
 		Slug                   func(childComplexity int) int
 		TrustCenterFiles       func(childComplexity int, first *int, after *page.CursorKey, last *int, before *page.CursorKey) int
 		Vendors                func(childComplexity int, first *int, after *page.CursorKey, last *int, before *page.CursorKey) int
+		ViewerSubscription     func(childComplexity int) int
 	}
 
 	TrustCenterAccess struct {
@@ -308,6 +323,10 @@ type ComplexityRoot struct {
 		Node   func(childComplexity int) int
 	}
 
+	UnsubscribeFromMailingListPayload struct {
+		DeletedMailingListSubscriberID func(childComplexity int) int
+	}
+
 	UpdateFullNamePayload struct {
 		Success func(childComplexity int) int
 	}
@@ -366,6 +385,8 @@ type MutationResolver interface {
 	RequestTrustCenterFileAccess(ctx context.Context, input types.RequestTrustCenterFileAccessInput) (*types.RequestFileAccessPayload, error)
 	AcceptElectronicSignature(ctx context.Context, input types.AcceptElectronicSignatureInput) (*types.AcceptElectronicSignaturePayload, error)
 	RecordSigningEvent(ctx context.Context, input types.RecordSigningEventInput) (*types.RecordSigningEventPayload, error)
+	SubscribeToMailingList(ctx context.Context) (*types.SubscribeToMailingListPayload, error)
+	UnsubscribeFromMailingList(ctx context.Context) (*types.UnsubscribeFromMailingListPayload, error)
 }
 type NonDisclosureAgreementResolver interface {
 	FileURL(ctx context.Context, obj *types.NonDisclosureAgreement) (string, error)
@@ -387,6 +408,7 @@ type TrustCenterResolver interface {
 	LogoFileURL(ctx context.Context, obj *types.TrustCenter) (*string, error)
 	DarkLogoFileURL(ctx context.Context, obj *types.TrustCenter) (*string, error)
 	NonDisclosureAgreement(ctx context.Context, obj *types.TrustCenter) (*types.NonDisclosureAgreement, error)
+	ViewerSubscription(ctx context.Context, obj *types.TrustCenter) (*types.MailingListSubscriber, error)
 	Organization(ctx context.Context, obj *types.TrustCenter) (*types.Organization, error)
 	Documents(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.DocumentConnection, error)
 	Audits(ctx context.Context, obj *types.TrustCenter, first *int, after *page.CursorKey, last *int, before *page.CursorKey) (*types.AuditConnection, error)
@@ -771,6 +793,37 @@ func (e *executableSchema) Complexity(ctx context.Context, typeName, field strin
 
 		return e.ComplexityRoot.Identity.UpdatedAt(childComplexity), true
 
+	case "MailingListSubscriber.createdAt":
+		if e.ComplexityRoot.MailingListSubscriber.CreatedAt == nil {
+			break
+		}
+
+		return e.ComplexityRoot.MailingListSubscriber.CreatedAt(childComplexity), true
+	case "MailingListSubscriber.email":
+		if e.ComplexityRoot.MailingListSubscriber.Email == nil {
+			break
+		}
+
+		return e.ComplexityRoot.MailingListSubscriber.Email(childComplexity), true
+	case "MailingListSubscriber.id":
+		if e.ComplexityRoot.MailingListSubscriber.ID == nil {
+			break
+		}
+
+		return e.ComplexityRoot.MailingListSubscriber.ID(childComplexity), true
+	case "MailingListSubscriber.status":
+		if e.ComplexityRoot.MailingListSubscriber.Status == nil {
+			break
+		}
+
+		return e.ComplexityRoot.MailingListSubscriber.Status(childComplexity), true
+	case "MailingListSubscriber.updatedAt":
+		if e.ComplexityRoot.MailingListSubscriber.UpdatedAt == nil {
+			break
+		}
+
+		return e.ComplexityRoot.MailingListSubscriber.UpdatedAt(childComplexity), true
+
 	case "Mutation.acceptElectronicSignature":
 		if e.ComplexityRoot.Mutation.AcceptElectronicSignature == nil {
 			break
@@ -876,6 +929,18 @@ func (e *executableSchema) Complexity(ctx context.Context, typeName, field strin
 		}
 
 		return e.ComplexityRoot.Mutation.SendMagicLink(childComplexity, args["input"].(types.SendMagicLinkInput)), true
+	case "Mutation.subscribeToMailingList":
+		if e.ComplexityRoot.Mutation.SubscribeToMailingList == nil {
+			break
+		}
+
+		return e.ComplexityRoot.Mutation.SubscribeToMailingList(childComplexity), true
+	case "Mutation.unsubscribeFromMailingList":
+		if e.ComplexityRoot.Mutation.UnsubscribeFromMailingList == nil {
+			break
+		}
+
+		return e.ComplexityRoot.Mutation.UnsubscribeFromMailingList(childComplexity), true
 	case "Mutation.updateFullName":
 		if e.ComplexityRoot.Mutation.UpdateFullName == nil {
 			break
@@ -1078,6 +1143,13 @@ func (e *executableSchema) Complexity(ctx context.Context, typeName, field strin
 
 		return e.ComplexityRoot.SendMagicLinkPayload.Success(childComplexity), true
 
+	case "SubscribeToMailingListPayload.subscription":
+		if e.ComplexityRoot.SubscribeToMailingListPayload.Subscription == nil {
+			break
+		}
+
+		return e.ComplexityRoot.SubscribeToMailingListPayload.Subscription(childComplexity), true
+
 	case "TrustCenter.active":
 		if e.ComplexityRoot.TrustCenter.Active == nil {
 			break
@@ -1197,6 +1269,12 @@ func (e *executableSchema) Complexity(ctx context.Context, typeName, field strin
 		}
 
 		return e.ComplexityRoot.TrustCenter.Vendors(childComplexity, args["first"].(*int), args["after"].(*page.CursorKey), args["last"].(*int), args["before"].(*page.CursorKey)), true
+	case "TrustCenter.viewerSubscription":
+		if e.ComplexityRoot.TrustCenter.ViewerSubscription == nil {
+			break
+		}
+
+		return e.ComplexityRoot.TrustCenter.ViewerSubscription(childComplexity), true
 
 	case "TrustCenterAccess.createdAt":
 		if e.ComplexityRoot.TrustCenterAccess.CreatedAt == nil {
@@ -1343,6 +1421,13 @@ func (e *executableSchema) Complexity(ctx context.Context, typeName, field strin
 
 		return e.ComplexityRoot.TrustCenterReferenceEdge.Node(childComplexity), true
 
+	case "UnsubscribeFromMailingListPayload.deletedMailingListSubscriberId":
+		if e.ComplexityRoot.UnsubscribeFromMailingListPayload.DeletedMailingListSubscriberID == nil {
+			break
+		}
+
+		return e.ComplexityRoot.UnsubscribeFromMailingListPayload.DeletedMailingListSubscriberID(childComplexity), true
+
 	case "UpdateFullNamePayload.success":
 		if e.ComplexityRoot.UpdateFullNamePayload.Success == nil {
 			break
@@ -2058,6 +2143,7 @@ type TrustCenter implements Node {
 
   nonDisclosureAgreement: NonDisclosureAgreement @goField(forceResolver: true)
 
+  viewerSubscription: MailingListSubscriber @goField(forceResolver: true)
   organization: Organization! @goField(forceResolver: true)
 
   documents(
@@ -2420,6 +2506,43 @@ type Mutation {
   recordSigningEvent(
     input: RecordSigningEventInput!
   ): RecordSigningEventPayload @session(required: PRESENT)
+
+  subscribeToMailingList: SubscribeToMailingListPayload! @session(required: PRESENT)
+
+  unsubscribeFromMailingList: UnsubscribeFromMailingListPayload! @session(required: PRESENT)
+}
+
+type SubscribeToMailingListPayload {
+  subscription: MailingListSubscriber!
+}
+
+type UnsubscribeFromMailingListPayload {
+  deletedMailingListSubscriberId: ID
+}
+
+enum MailingListSubscriberStatus
+  @goModel(
+    model: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatus"
+  ) {
+  PENDING
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusPending"
+    )
+  CONFIRMED
+    @goEnum(
+      value: "go.probo.inc/probo/pkg/coredata.MailingListSubscriberStatusConfirmed"
+    )
+}
+
+type MailingListSubscriber implements Node
+  @goModel(
+    model: "go.probo.inc/probo/pkg/server/api/trust/v1/types.MailingListSubscriber"
+  ) {
+  id: ID!
+  email: EmailAddr!
+  status: MailingListSubscriberStatus!
+  createdAt: Datetime!
+  updatedAt: Datetime!
 }
 `, BuiltIn: false},
 	{Name: "../../../../gqlutils/directives/session/schema.graphql", Input: `# Session directive for GraphQL APIs
@@ -4698,6 +4821,151 @@ func (ec *executionContext) fieldContext_Identity_updatedAt(_ context.Context, f
 	return fc, nil
 }
 
+func (ec *executionContext) _MailingListSubscriber_id(ctx context.Context, field graphql.CollectedField, obj *types.MailingListSubscriber) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_MailingListSubscriber_id,
+		func(ctx context.Context) (any, error) {
+			return obj.ID, nil
+		},
+		nil,
+		ec.marshalNID2goᚗproboᚗincᚋproboᚋpkgᚋgidᚐGID,
+		true,
+		true,
+	)
+}
+
+func (ec *executionContext) fieldContext_MailingListSubscriber_id(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "MailingListSubscriber",
+		Field:      field,
+		IsMethod:   false,
+		IsResolver: false,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			return nil, errors.New("field of type ID does not have child fields")
+		},
+	}
+	return fc, nil
+}
+
+func (ec *executionContext) _MailingListSubscriber_email(ctx context.Context, field graphql.CollectedField, obj *types.MailingListSubscriber) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_MailingListSubscriber_email,
+		func(ctx context.Context) (any, error) {
+			return obj.Email, nil
+		},
+		nil,
+		ec.marshalNEmailAddr2goᚗproboᚗincᚋproboᚋpkgᚋmailᚐAddr,
+		true,
+		true,
+	)
+}
+
+func (ec *executionContext) fieldContext_MailingListSubscriber_email(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "MailingListSubscriber",
+		Field:      field,
+		IsMethod:   false,
+		IsResolver: false,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			return nil, errors.New("field of type EmailAddr does not have child fields")
+		},
+	}
+	return fc, nil
+}
+
+func (ec *executionContext) _MailingListSubscriber_status(ctx context.Context, field graphql.CollectedField, obj *types.MailingListSubscriber) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_MailingListSubscriber_status,
+		func(ctx context.Context) (any, error) {
+			return obj.Status, nil
+		},
+		nil,
+		ec.marshalNMailingListSubscriberStatus2goᚗproboᚗincᚋproboᚋpkgᚋcoredataᚐMailingListSubscriberStatus,
+		true,
+		true,
+	)
+}
+
+func (ec *executionContext) fieldContext_MailingListSubscriber_status(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "MailingListSubscriber",
+		Field:      field,
+		IsMethod:   false,
+		IsResolver: false,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			return nil, errors.New("field of type MailingListSubscriberStatus does not have child fields")
+		},
+	}
+	return fc, nil
+}
+
+func (ec *executionContext) _MailingListSubscriber_createdAt(ctx context.Context, field graphql.CollectedField, obj *types.MailingListSubscriber) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_MailingListSubscriber_createdAt,
+		func(ctx context.Context) (any, error) {
+			return obj.CreatedAt, nil
+		},
+		nil,
+		ec.marshalNDatetime2timeᚐTime,
+		true,
+		true,
+	)
+}
+
+func (ec *executionContext) fieldContext_MailingListSubscriber_createdAt(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "MailingListSubscriber",
+		Field:      field,
+		IsMethod:   false,
+		IsResolver: false,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			return nil, errors.New("field of type Datetime does not have child fields")
+		},
+	}
+	return fc, nil
+}
+
+func (ec *executionContext) _MailingListSubscriber_updatedAt(ctx context.Context, field graphql.CollectedField, obj *types.MailingListSubscriber) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_MailingListSubscriber_updatedAt,
+		func(ctx context.Context) (any, error) {
+			return obj.UpdatedAt, nil
+		},
+		nil,
+		ec.marshalNDatetime2timeᚐTime,
+		true,
+		true,
+	)
+}
+
+func (ec *executionContext) fieldContext_MailingListSubscriber_updatedAt(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "MailingListSubscriber",
+		Field:      field,
+		IsMethod:   false,
+		IsResolver: false,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			return nil, errors.New("field of type Datetime does not have child fields")
+		},
+	}
+	return fc, nil
+}
+
 func (ec *executionContext) _Mutation_sendMagicLink(ctx context.Context, field graphql.CollectedField) (ret graphql.Marshaler) {
 	return graphql.ResolveField(
 		ctx,
@@ -5491,6 +5759,108 @@ func (ec *executionContext) fieldContext_Mutation_recordSigningEvent(ctx context
 	return fc, nil
 }
 
+func (ec *executionContext) _Mutation_subscribeToMailingList(ctx context.Context, field graphql.CollectedField) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_Mutation_subscribeToMailingList,
+		func(ctx context.Context) (any, error) {
+			return ec.Resolvers.Mutation().SubscribeToMailingList(ctx)
+		},
+		func(ctx context.Context, next graphql.Resolver) graphql.Resolver {
+			directive0 := next
+
+			directive1 := func(ctx context.Context) (any, error) {
+				required, err := ec.unmarshalNSessionRequirement2goᚗproboᚗincᚋproboᚋpkgᚋserverᚋgqlutilsᚋdirectivesᚋsessionᚐSessionRequirement(ctx, "PRESENT")
+				if err != nil {
+					var zeroVal *types.SubscribeToMailingListPayload
+					return zeroVal, err
+				}
+				if ec.Directives.Session == nil {
+					var zeroVal *types.SubscribeToMailingListPayload
+					return zeroVal, errors.New("directive session is not implemented")
+				}
+				return ec.Directives.Session(ctx, nil, directive0, required)
+			}
+
+			next = directive1
+			return next
+		},
+		ec.marshalNSubscribeToMailingListPayload2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐSubscribeToMailingListPayload,
+		true,
+		true,
+	)
+}
+
+func (ec *executionContext) fieldContext_Mutation_subscribeToMailingList(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "Mutation",
+		Field:      field,
+		IsMethod:   true,
+		IsResolver: true,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			switch field.Name {
+			case "subscription":
+				return ec.fieldContext_SubscribeToMailingListPayload_subscription(ctx, field)
+			}
+			return nil, fmt.Errorf("no field named %q was found under type SubscribeToMailingListPayload", field.Name)
+		},
+	}
+	return fc, nil
+}
+
+func (ec *executionContext) _Mutation_unsubscribeFromMailingList(ctx context.Context, field graphql.CollectedField) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_Mutation_unsubscribeFromMailingList,
+		func(ctx context.Context) (any, error) {
+			return ec.Resolvers.Mutation().UnsubscribeFromMailingList(ctx)
+		},
+		func(ctx context.Context, next graphql.Resolver) graphql.Resolver {
+			directive0 := next
+
+			directive1 := func(ctx context.Context) (any, error) {
+				required, err := ec.unmarshalNSessionRequirement2goᚗproboᚗincᚋproboᚋpkgᚋserverᚋgqlutilsᚋdirectivesᚋsessionᚐSessionRequirement(ctx, "PRESENT")
+				if err != nil {
+					var zeroVal *types.UnsubscribeFromMailingListPayload
+					return zeroVal, err
+				}
+				if ec.Directives.Session == nil {
+					var zeroVal *types.UnsubscribeFromMailingListPayload
+					return zeroVal, errors.New("directive session is not implemented")
+				}
+				return ec.Directives.Session(ctx, nil, directive0, required)
+			}
+
+			next = directive1
+			return next
+		},
+		ec.marshalNUnsubscribeFromMailingListPayload2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐUnsubscribeFromMailingListPayload,
+		true,
+		true,
+	)
+}
+
+func (ec *executionContext) fieldContext_Mutation_unsubscribeFromMailingList(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "Mutation",
+		Field:      field,
+		IsMethod:   true,
+		IsResolver: true,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			switch field.Name {
+			case "deletedMailingListSubscriberId":
+				return ec.fieldContext_UnsubscribeFromMailingListPayload_deletedMailingListSubscriberId(ctx, field)
+			}
+			return nil, fmt.Errorf("no field named %q was found under type UnsubscribeFromMailingListPayload", field.Name)
+		},
+	}
+	return fc, nil
+}
+
 func (ec *executionContext) _NonDisclosureAgreement_fileName(ctx context.Context, field graphql.CollectedField, obj *types.NonDisclosureAgreement) (ret graphql.Marshaler) {
 	return graphql.ResolveField(
 		ctx,
@@ -6035,6 +6405,8 @@ func (ec *executionContext) fieldContext_Query_currentTrustCenter(_ context.Cont
 				return ec.fieldContext_TrustCenter_darkLogoFileUrl(ctx, field)
 			case "nonDisclosureAgreement":
 				return ec.fieldContext_TrustCenter_nonDisclosureAgreement(ctx, field)
+			case "viewerSubscription":
+				return ec.fieldContext_TrustCenter_viewerSubscription(ctx, field)
 			case "organization":
 				return ec.fieldContext_TrustCenter_organization(ctx, field)
 			case "documents":
@@ -6547,6 +6919,47 @@ func (ec *executionContext) fieldContext_SendMagicLinkPayload_success(_ context.
 	return fc, nil
 }
 
+func (ec *executionContext) _SubscribeToMailingListPayload_subscription(ctx context.Context, field graphql.CollectedField, obj *types.SubscribeToMailingListPayload) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_SubscribeToMailingListPayload_subscription,
+		func(ctx context.Context) (any, error) {
+			return obj.Subscription, nil
+		},
+		nil,
+		ec.marshalNMailingListSubscriber2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐMailingListSubscriber,
+		true,
+		true,
+	)
+}
+
+func (ec *executionContext) fieldContext_SubscribeToMailingListPayload_subscription(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "SubscribeToMailingListPayload",
+		Field:      field,
+		IsMethod:   false,
+		IsResolver: false,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			switch field.Name {
+			case "id":
+				return ec.fieldContext_MailingListSubscriber_id(ctx, field)
+			case "email":
+				return ec.fieldContext_MailingListSubscriber_email(ctx, field)
+			case "status":
+				return ec.fieldContext_MailingListSubscriber_status(ctx, field)
+			case "createdAt":
+				return ec.fieldContext_MailingListSubscriber_createdAt(ctx, field)
+			case "updatedAt":
+				return ec.fieldContext_MailingListSubscriber_updatedAt(ctx, field)
+			}
+			return nil, fmt.Errorf("no field named %q was found under type MailingListSubscriber", field.Name)
+		},
+	}
+	return fc, nil
+}
+
 func (ec *executionContext) _TrustCenter_id(ctx context.Context, field graphql.CollectedField, obj *types.TrustCenter) (ret graphql.Marshaler) {
 	return graphql.ResolveField(
 		ctx,
@@ -6729,6 +7142,47 @@ func (ec *executionContext) fieldContext_TrustCenter_nonDisclosureAgreement(_ co
 	return fc, nil
 }
 
+func (ec *executionContext) _TrustCenter_viewerSubscription(ctx context.Context, field graphql.CollectedField, obj *types.TrustCenter) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_TrustCenter_viewerSubscription,
+		func(ctx context.Context) (any, error) {
+			return ec.Resolvers.TrustCenter().ViewerSubscription(ctx, obj)
+		},
+		nil,
+		ec.marshalOMailingListSubscriber2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐMailingListSubscriber,
+		true,
+		false,
+	)
+}
+
+func (ec *executionContext) fieldContext_TrustCenter_viewerSubscription(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "TrustCenter",
+		Field:      field,
+		IsMethod:   true,
+		IsResolver: true,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			switch field.Name {
+			case "id":
+				return ec.fieldContext_MailingListSubscriber_id(ctx, field)
+			case "email":
+				return ec.fieldContext_MailingListSubscriber_email(ctx, field)
+			case "status":
+				return ec.fieldContext_MailingListSubscriber_status(ctx, field)
+			case "createdAt":
+				return ec.fieldContext_MailingListSubscriber_createdAt(ctx, field)
+			case "updatedAt":
+				return ec.fieldContext_MailingListSubscriber_updatedAt(ctx, field)
+			}
+			return nil, fmt.Errorf("no field named %q was found under type MailingListSubscriber", field.Name)
+		},
+	}
+	return fc, nil
+}
+
 func (ec *executionContext) _TrustCenter_organization(ctx context.Context, field graphql.CollectedField, obj *types.TrustCenter) (ret graphql.Marshaler) {
 	return graphql.ResolveField(
 		ctx,
@@ -7951,6 +8405,35 @@ func (ec *executionContext) fieldContext_TrustCenterReferenceEdge_node(_ context
 	return fc, nil
 }
 
+func (ec *executionContext) _UnsubscribeFromMailingListPayload_deletedMailingListSubscriberId(ctx context.Context, field graphql.CollectedField, obj *types.UnsubscribeFromMailingListPayload) (ret graphql.Marshaler) {
+	return graphql.ResolveField(
+		ctx,
+		ec.OperationContext,
+		field,
+		ec.fieldContext_UnsubscribeFromMailingListPayload_deletedMailingListSubscriberId,
+		func(ctx context.Context) (any, error) {
+			return obj.DeletedMailingListSubscriberID, nil
+		},
+		nil,
+		ec.marshalOID2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋgidᚐGID,
+		true,
+		false,
+	)
+}
+
+func (ec *executionContext) fieldContext_UnsubscribeFromMailingListPayload_deletedMailingListSubscriberId(_ context.Context, field graphql.CollectedField) (fc *graphql.FieldContext, err error) {
+	fc = &graphql.FieldContext{
+		Object:     "UnsubscribeFromMailingListPayload",
+		Field:      field,
+		IsMethod:   false,
+		IsResolver: false,
+		Child: func(ctx context.Context, field graphql.CollectedField) (*graphql.FieldContext, error) {
+			return nil, errors.New("field of type ID does not have child fields")
+		},
+	}
+	return fc, nil
+}
+
 func (ec *executionContext) _UpdateFullNamePayload_success(ctx context.Context, field graphql.CollectedField, obj *types.UpdateFullNamePayload) (ret graphql.Marshaler) {
 	return graphql.ResolveField(
 		ctx,
@@ -10218,6 +10701,13 @@ func (ec *executionContext) _Node(ctx context.Context, sel ast.SelectionSet, obj
 			return graphql.Null
 		}
 		return ec._Organization(ctx, sel, obj)
+	case types.MailingListSubscriber:
+		return ec._MailingListSubscriber(ctx, sel, &obj)
+	case *types.MailingListSubscriber:
+		if obj == nil {
+			return graphql.Null
+		}
+		return ec._MailingListSubscriber(ctx, sel, obj)
 	case types.Identity:
 		return ec._Identity(ctx, sel, &obj)
 	case *types.Identity:
@@ -11438,6 +11928,65 @@ func (ec *executionContext) _Identity(ctx context.Context, sel ast.SelectionSet,
 	return out
 }
 
+var mailingListSubscriberImplementors = []string{"MailingListSubscriber", "Node"}
+
+func (ec *executionContext) _MailingListSubscriber(ctx context.Context, sel ast.SelectionSet, obj *types.MailingListSubscriber) graphql.Marshaler {
+	fields := graphql.CollectFields(ec.OperationContext, sel, mailingListSubscriberImplementors)
+
+	out := graphql.NewFieldSet(fields)
+	deferred := make(map[string]*graphql.FieldSet)
+	for i, field := range fields {
+		switch field.Name {
+		case "__typename":
+			out.Values[i] = graphql.MarshalString("MailingListSubscriber")
+		case "id":
+			out.Values[i] = ec._MailingListSubscriber_id(ctx, field, obj)
+			if out.Values[i] == graphql.Null {
+				out.Invalids++
+			}
+		case "email":
+			out.Values[i] = ec._MailingListSubscriber_email(ctx, field, obj)
+			if out.Values[i] == graphql.Null {
+				out.Invalids++
+			}
+		case "status":
+			out.Values[i] = ec._MailingListSubscriber_status(ctx, field, obj)
+			if out.Values[i] == graphql.Null {
+				out.Invalids++
+			}
+		case "createdAt":
+			out.Values[i] = ec._MailingListSubscriber_createdAt(ctx, field, obj)
+			if out.Values[i] == graphql.Null {
+				out.Invalids++
+			}
+		case "updatedAt":
+			out.Values[i] = ec._MailingListSubscriber_updatedAt(ctx, field, obj)
+			if out.Values[i] == graphql.Null {
+				out.Invalids++
+			}
+		default:
+			panic("unknown field " + strconv.Quote(field.Name))
+		}
+	}
+	out.Dispatch(ctx)
+	if out.Invalids > 0 {
+		return graphql.Null
+	}
+
+	atomic.AddInt32(&ec.Deferred, int32(len(deferred)))
+
+	for label, dfs := range deferred {
+		ec.ProcessDeferredGroup(graphql.DeferredGroup{
+			Label:    label,
+			Path:     graphql.GetPath(ctx),
+			FieldSet: dfs,
+			Context:  ctx,
+		})
+	}
+
+	return out
+}
+
 var mutationImplementors = []string{"Mutation"}
 
 func (ec *executionContext) _Mutation(ctx context.Context, sel ast.SelectionSet) graphql.Marshaler {
@@ -11526,6 +12075,20 @@ func (ec *executionContext) _Mutation(ctx context.Context, sel ast.SelectionSet)
 			out.Values[i] = ec.OperationContext.RootResolverMiddleware(innerCtx, func(ctx context.Context) (res graphql.Marshaler) {
 				return ec._Mutation_recordSigningEvent(ctx, field)
 			})
+		case "subscribeToMailingList":
+			out.Values[i] = ec.OperationContext.RootResolverMiddleware(innerCtx, func(ctx context.Context) (res graphql.Marshaler) {
+				return ec._Mutation_subscribeToMailingList(ctx, field)
+			})
+			if out.Values[i] == graphql.Null {
+				out.Invalids++
+			}
+		case "unsubscribeFromMailingList":
+			out.Values[i] = ec.OperationContext.RootResolverMiddleware(innerCtx, func(ctx context.Context) (res graphql.Marshaler) {
+				return ec._Mutation_unsubscribeFromMailingList(ctx, field)
+			})
+			if out.Values[i] == graphql.Null {
+				out.Invalids++
+			}
 		default:
 			panic("unknown field " + strconv.Quote(field.Name))
 		}
@@ -12238,6 +12801,45 @@ func (ec *executionContext) _SendMagicLinkPayload(ctx context.Context, sel ast.S
 	return out
 }
 
+var subscribeToMailingListPayloadImplementors = []string{"SubscribeToMailingListPayload"}
+
+func (ec *executionContext) _SubscribeToMailingListPayload(ctx context.Context, sel ast.SelectionSet, obj *types.SubscribeToMailingListPayload) graphql.Marshaler {
+	fields := graphql.CollectFields(ec.OperationContext, sel, subscribeToMailingListPayloadImplementors)
+
+	out := graphql.NewFieldSet(fields)
+	deferred := make(map[string]*graphql.FieldSet)
+	for i, field := range fields {
+		switch field.Name {
+		case "__typename":
+			out.Values[i] = graphql.MarshalString("SubscribeToMailingListPayload")
+		case "subscription":
+			out.Values[i] = ec._SubscribeToMailingListPayload_subscription(ctx, field, obj)
+			if out.Values[i] == graphql.Null {
+				out.Invalids++
+			}
+		default:
+			panic("unknown field " + strconv.Quote(field.Name))
+		}
+	}
+	out.Dispatch(ctx)
+	if out.Invalids > 0 {
+		return graphql.Null
+	}
+
+	atomic.AddInt32(&ec.Deferred, int32(len(deferred)))
+
+	for label, dfs := range deferred {
+		ec.ProcessDeferredGroup(graphql.DeferredGroup{
+			Label:    label,
+			Path:     graphql.GetPath(ctx),
+			FieldSet: dfs,
+			Context:  ctx,
+		})
+	}
+
+	return out
+}
+
 var trustCenterImplementors = []string{"TrustCenter", "Node"}
 
 func (ec *executionContext) _TrustCenter(ctx context.Context, sel ast.SelectionSet, obj *types.TrustCenter) graphql.Marshaler {
@@ -12362,6 +12964,39 @@ func (ec *executionContext) _TrustCenter(ctx context.Context, sel ast.SelectionS
 				continue
 			}
 
+			out.Concurrently(i, func(ctx context.Context) graphql.Marshaler { return innerFunc(ctx, out) })
+		case "viewerSubscription":
+			field := field
+
+			innerFunc := func(ctx context.Context, _ *graphql.FieldSet) (res graphql.Marshaler) {
+				defer func() {
+					if r := recover(); r != nil {
+						ec.Error(ctx, ec.Recover(ctx, r))
+					}
+				}()
+				res = ec._TrustCenter_viewerSubscription(ctx, field, obj)
+				return res
+			}
+
+			if field.Deferrable != nil {
+				dfs, ok := deferred[field.Deferrable.Label]
+				di := 0
+				if ok {
+					dfs.AddField(field)
+					di = len(dfs.Values) - 1
+				} else {
+					dfs = graphql.NewFieldSet([]graphql.CollectedField{field})
+					deferred[field.Deferrable.Label] = dfs
+				}
+				dfs.Concurrently(di, func(ctx context.Context) graphql.Marshaler {
+					return innerFunc(ctx, dfs)
+				})
+
+				// don't run the out.Concurrently() call below
+				out.Values[i] = graphql.Null
+				continue
+			}
+
 			out.Concurrently(i, func(ctx context.Context) graphql.Marshaler { return innerFunc(ctx, out) })
 		case "organization":
 			field := field
@@ -13114,6 +13749,42 @@ func (ec *executionContext) _TrustCenterReferenceEdge(ctx context.Context, sel a
 	return out
 }
 
+var unsubscribeFromMailingListPayloadImplementors = []string{"UnsubscribeFromMailingListPayload"}
+
+func (ec *executionContext) _UnsubscribeFromMailingListPayload(ctx context.Context, sel ast.SelectionSet, obj *types.UnsubscribeFromMailingListPayload) graphql.Marshaler {
+	fields := graphql.CollectFields(ec.OperationContext, sel, unsubscribeFromMailingListPayloadImplementors)
+
+	out := graphql.NewFieldSet(fields)
+	deferred := make(map[string]*graphql.FieldSet)
+	for i, field := range fields {
+		switch field.Name {
+		case "__typename":
+			out.Values[i] = graphql.MarshalString("UnsubscribeFromMailingListPayload")
+		case "deletedMailingListSubscriberId":
+			out.Values[i] = ec._UnsubscribeFromMailingListPayload_deletedMailingListSubscriberId(ctx, field, obj)
+		default:
+			panic("unknown field " + strconv.Quote(field.Name))
+		}
+	}
+	out.Dispatch(ctx)
+	if out.Invalids > 0 {
+		return graphql.Null
+	}
+
+	atomic.AddInt32(&ec.Deferred, int32(len(deferred)))
+
+	for label, dfs := range deferred {
+		ec.ProcessDeferredGroup(graphql.DeferredGroup{
+			Label:    label,
+			Path:     graphql.GetPath(ctx),
+			FieldSet: dfs,
+			Context:  ctx,
+		})
+	}
+
+	return out
+}
+
 var updateFullNamePayloadImplementors = []string{"UpdateFullNamePayload"}
 
 func (ec *executionContext) _UpdateFullNamePayload(ctx context.Context, sel ast.SelectionSet, obj *types.UpdateFullNamePayload) graphql.Marshaler {
@@ -14823,6 +15494,44 @@ func (ec *executionContext) marshalNInt2int(ctx context.Context, sel ast.Selecti
 	return res
 }
 
+func (ec *executionContext) marshalNMailingListSubscriber2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐMailingListSubscriber(ctx context.Context, sel ast.SelectionSet, v *types.MailingListSubscriber) graphql.Marshaler {
+	if v == nil {
+		if !graphql.HasFieldError(ctx, graphql.GetFieldContext(ctx)) {
+			graphql.AddErrorf(ctx, "the requested element is null which the schema does not allow")
+		}
+		return graphql.Null
+	}
+	return ec._MailingListSubscriber(ctx, sel, v)
+}
+
+func (ec *executionContext) unmarshalNMailingListSubscriberStatus2goᚗproboᚗincᚋproboᚋpkgᚋcoredataᚐMailingListSubscriberStatus(ctx context.Context, v any) (coredata.MailingListSubscriberStatus, error) {
+	tmp, err := graphql.UnmarshalString(v)
+	res := unmarshalNMailingListSubscriberStatus2goᚗproboᚗincᚋproboᚋpkgᚋcoredataᚐMailingListSubscriberStatus[tmp]
+	return res, graphql.ErrorOnPath(ctx, err)
+}
+
+func (ec *executionContext) marshalNMailingListSubscriberStatus2goᚗproboᚗincᚋproboᚋpkgᚋcoredataᚐMailingListSubscriberStatus(ctx context.Context, sel ast.SelectionSet, v coredata.MailingListSubscriberStatus) graphql.Marshaler {
+	_ = sel
+	res := graphql.MarshalString(marshalNMailingListSubscriberStatus2goᚗproboᚗincᚋproboᚋpkgᚋcoredataᚐMailingListSubscriberStatus[v])
+	if res == graphql.Null {
+		if !graphql.HasFieldError(ctx, graphql.GetFieldContext(ctx)) {
+			graphql.AddErrorf(ctx, "the requested element is null which the schema does not allow")
+		}
+	}
+	return res
+}
+
+var (
+	unmarshalNMailingListSubscriberStatus2goᚗproboᚗincᚋproboᚋpkgᚋcoredataᚐMailingListSubscriberStatus = map[string]coredata.MailingListSubscriberStatus{
+		"PENDING":   coredata.MailingListSubscriberStatusPending,
+		"CONFIRMED": coredata.MailingListSubscriberStatusConfirmed,
+	}
+	marshalNMailingListSubscriberStatus2goᚗproboᚗincᚋproboᚋpkgᚋcoredataᚐMailingListSubscriberStatus = map[coredata.MailingListSubscriberStatus]string{
+		coredata.MailingListSubscriberStatusPending:   "PENDING",
+		coredata.MailingListSubscriberStatusConfirmed: "CONFIRMED",
+	}
+)
+
 func (ec *executionContext) marshalNNode2goᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐNode(ctx context.Context, sel ast.SelectionSet, v types.Node) graphql.Marshaler {
 	if v == nil {
 		if !graphql.HasFieldError(ctx, graphql.GetFieldContext(ctx)) {
@@ -14988,6 +15697,20 @@ func (ec *executionContext) marshalNString2string(ctx context.Context, sel ast.S
 	return res
 }
 
+func (ec *executionContext) marshalNSubscribeToMailingListPayload2goᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐSubscribeToMailingListPayload(ctx context.Context, sel ast.SelectionSet, v types.SubscribeToMailingListPayload) graphql.Marshaler {
+	return ec._SubscribeToMailingListPayload(ctx, sel, &v)
+}
+
+func (ec *executionContext) marshalNSubscribeToMailingListPayload2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐSubscribeToMailingListPayload(ctx context.Context, sel ast.SelectionSet, v *types.SubscribeToMailingListPayload) graphql.Marshaler {
+	if v == nil {
+		if !graphql.HasFieldError(ctx, graphql.GetFieldContext(ctx)) {
+			graphql.AddErrorf(ctx, "the requested element is null which the schema does not allow")
+		}
+		return graphql.Null
+	}
+	return ec._SubscribeToMailingListPayload(ctx, sel, v)
+}
+
 func (ec *executionContext) marshalNTrustCenterAccess2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐTrustCenterAccess(ctx context.Context, sel ast.SelectionSet, v *types.TrustCenterAccess) graphql.Marshaler {
 	if v == nil {
 		if !graphql.HasFieldError(ctx, graphql.GetFieldContext(ctx)) {
@@ -15098,6 +15821,20 @@ func (ec *executionContext) marshalNTrustCenterReferenceEdge2ᚖgoᚗproboᚗinc
 	return ec._TrustCenterReferenceEdge(ctx, sel, v)
 }
 
+func (ec *executionContext) marshalNUnsubscribeFromMailingListPayload2goᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐUnsubscribeFromMailingListPayload(ctx context.Context, sel ast.SelectionSet, v types.UnsubscribeFromMailingListPayload) graphql.Marshaler {
+	return ec._UnsubscribeFromMailingListPayload(ctx, sel, &v)
+}
+
+func (ec *executionContext) marshalNUnsubscribeFromMailingListPayload2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐUnsubscribeFromMailingListPayload(ctx context.Context, sel ast.SelectionSet, v *types.UnsubscribeFromMailingListPayload) graphql.Marshaler {
+	if v == nil {
+		if !graphql.HasFieldError(ctx, graphql.GetFieldContext(ctx)) {
+			graphql.AddErrorf(ctx, "the requested element is null which the schema does not allow")
+		}
+		return graphql.Null
+	}
+	return ec._UnsubscribeFromMailingListPayload(ctx, sel, v)
+}
+
 func (ec *executionContext) unmarshalNUpdateFullNameInput2goᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐUpdateFullNameInput(ctx context.Context, v any) (types.UpdateFullNameInput, error) {
 	res, err := ec.unmarshalInputUpdateFullNameInput(ctx, v)
 	return res, graphql.ErrorOnPath(ctx, err)
@@ -15468,6 +16205,24 @@ func (ec *executionContext) marshalOElectronicSignature2ᚖgoᚗproboᚗincᚋpr
 	return ec._ElectronicSignature(ctx, sel, v)
 }
 
+func (ec *executionContext) unmarshalOID2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋgidᚐGID(ctx context.Context, v any) (*gid.GID, error) {
+	if v == nil {
+		return nil, nil
+	}
+	res, err := gid1.UnmarshalGIDScalar(v)
+	return &res, graphql.ErrorOnPath(ctx, err)
+}
+
+func (ec *executionContext) marshalOID2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋgidᚐGID(ctx context.Context, sel ast.SelectionSet, v *gid.GID) graphql.Marshaler {
+	if v == nil {
+		return graphql.Null
+	}
+	_ = sel
+	_ = ctx
+	res := gid1.MarshalGIDScalar(*v)
+	return res
+}
+
 func (ec *executionContext) marshalOIdentity2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐIdentity(ctx context.Context, sel ast.SelectionSet, v *types.Identity) graphql.Marshaler {
 	if v == nil {
 		return graphql.Null
@@ -15493,6 +16248,13 @@ func (ec *executionContext) marshalOInt2ᚖint(ctx context.Context, sel ast.Sele
 	return res
 }
 
+func (ec *executionContext) marshalOMailingListSubscriber2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐMailingListSubscriber(ctx context.Context, sel ast.SelectionSet, v *types.MailingListSubscriber) graphql.Marshaler {
+	if v == nil {
+		return graphql.Null
+	}
+	return ec._MailingListSubscriber(ctx, sel, v)
+}
+
 func (ec *executionContext) marshalONonDisclosureAgreement2ᚖgoᚗproboᚗincᚋproboᚋpkgᚋserverᚋapiᚋtrustᚋv1ᚋtypesᚐNonDisclosureAgreement(ctx context.Context, sel ast.SelectionSet, v *types.NonDisclosureAgreement) graphql.Marshaler {
 	if v == nil {
 		return graphql.Null

pkg/server/api/trust/v1/types/mailing_list_subscriber.go

@@ -0,0 +1,44 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package types
+
+import (
+	"time"
+
+	"go.probo.inc/probo/pkg/coredata"
+	"go.probo.inc/probo/pkg/gid"
+	"go.probo.inc/probo/pkg/mail"
+)
+
+type MailingListSubscriber struct {
+	ID        gid.GID                              `json:"id"`
+	Email     mail.Addr                            `json:"email"`
+	Status    coredata.MailingListSubscriberStatus `json:"status"`
+	CreatedAt time.Time                            `json:"createdAt"`
+	UpdatedAt time.Time                            `json:"updatedAt"`
+}
+
+func (MailingListSubscriber) IsNode()          {}
+func (m MailingListSubscriber) GetID() gid.GID { return m.ID }
+
+func NewMailingListSubscriber(s *coredata.MailingListSubscriber) *MailingListSubscriber {
+	return &MailingListSubscriber{
+		ID:        s.ID,
+		Email:     s.Email,
+		Status:    s.Status,
+		CreatedAt: s.CreatedAt,
+		UpdatedAt: s.UpdatedAt,
+	}
+}

pkg/server/api/trust/v1/types/types.go

@@ -241,6 +241,10 @@ type SendMagicLinkPayload struct {
 	Success bool `json:"success"`
 }
 
+type SubscribeToMailingListPayload struct {
+	Subscription *MailingListSubscriber `json:"subscription"`
+}
+
 type TrustCenter struct {
 	ID                     gid.GID                          `json:"id"`
 	Active                 bool                             `json:"active"`
@@ -248,6 +252,7 @@ type TrustCenter struct {
 	LogoFileURL            *string                          `json:"logoFileUrl,omitempty"`
 	DarkLogoFileURL        *string                          `json:"darkLogoFileUrl,omitempty"`
 	NonDisclosureAgreement *NonDisclosureAgreement          `json:"nonDisclosureAgreement,omitempty"`
+	ViewerSubscription     *MailingListSubscriber           `json:"viewerSubscription,omitempty"`
 	Organization           *Organization                    `json:"organization"`
 	Documents              *DocumentConnection              `json:"documents"`
 	Audits                 *AuditConnection                 `json:"audits"`
@@ -314,6 +319,10 @@ type TrustCenterReferenceEdge struct {
 	Node   *TrustCenterReference `json:"node"`
 }
 
+type UnsubscribeFromMailingListPayload struct {
+	DeletedMailingListSubscriberID *gid.GID `json:"deletedMailingListSubscriberId,omitempty"`
+}
+
 type UpdateFullNameInput struct {
 	FullName string `json:"fullName"`
 }

pkg/server/api/trust/v1/v1_resolver.go

@@ -19,6 +19,7 @@ import (
 	"go.probo.inc/probo/pkg/esign"
 	"go.probo.inc/probo/pkg/gid"
 	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/page"
 	"go.probo.inc/probo/pkg/saferedirect"
 	"go.probo.inc/probo/pkg/server/api/authn"
@@ -694,6 +695,62 @@ func (r *mutationResolver) RecordSigningEvent(ctx context.Context, input types.R
 	return &types.RecordSigningEventPayload{Success: true}, nil
 }
 
+// SubscribeToMailingList is the resolver for the subscribeToMailingList field.
+func (r *mutationResolver) SubscribeToMailingList(ctx context.Context) (*types.SubscribeToMailingListPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	if trustCenter.MailingListID == nil {
+		return nil, gqlutils.NotFoundf(ctx, "mailing list not found")
+	}
+
+	mlSvc := r.MailmanService(ctx, trustCenter.ID.TenantID())
+	identity := authn.IdentityFromContext(ctx)
+
+	subscriber, err := mlSvc.CreateSubscriber(ctx, *trustCenter.MailingListID, identity.EmailAddress, identity.FullName)
+	if err != nil {
+		if errors.Is(err, mailman.ErrSubscriberAlreadyExist) {
+			subscriber, err = mlSvc.GetSubscriber(ctx, *trustCenter.MailingListID, identity.EmailAddress)
+			if err != nil {
+				r.logger.ErrorCtx(ctx, "cannot get existing mailing list subscription", log.Error(err))
+				return nil, gqlutils.Internal(ctx)
+			}
+		} else {
+			r.logger.ErrorCtx(ctx, "cannot subscribe to mailing list", log.Error(err))
+			return nil, gqlutils.Internal(ctx)
+		}
+	}
+
+	return &types.SubscribeToMailingListPayload{
+		Subscription: types.NewMailingListSubscriber(subscriber),
+	}, nil
+}
+
+// UnsubscribeFromMailingList is the resolver for the unsubscribeFromMailingList field.
+func (r *mutationResolver) UnsubscribeFromMailingList(ctx context.Context) (*types.UnsubscribeFromMailingListPayload, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	if trustCenter.MailingListID == nil {
+		return nil, gqlutils.NotFoundf(ctx, "mailing list not found")
+	}
+
+	mlSvc := r.MailmanService(ctx, trustCenter.ID.TenantID())
+	identity := authn.IdentityFromContext(ctx)
+
+	subscriber, err := mlSvc.GetSubscriber(ctx, *trustCenter.MailingListID, identity.EmailAddress)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot get mailing list subscription", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+	if subscriber == nil {
+		return nil, gqlutils.NotFoundf(ctx, "mailing list subscription not found")
+	}
+
+	if err := mlSvc.DeleteSubscriber(ctx, subscriber.ID); err != nil {
+		r.logger.ErrorCtx(ctx, "cannot unsubscribe from mailing list", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.UnsubscribeFromMailingListPayload{DeletedMailingListSubscriberID: &subscriber.ID}, nil
+}
+
 // FileURL is the resolver for the fileUrl field.
 func (r *nonDisclosureAgreementResolver) FileURL(ctx context.Context, obj *types.NonDisclosureAgreement) (string, error) {
 	trustCenter := compliancepage.CompliancePageFromContext(ctx)
@@ -983,6 +1040,31 @@ func (r *trustCenterResolver) NonDisclosureAgreement(ctx context.Context, obj *t
 	return types.NewNonDisclosureAgreement(file), nil
 }
 
+// ViewerSubscription is the resolver for the viewerSubscription field.
+func (r *trustCenterResolver) ViewerSubscription(ctx context.Context, obj *types.TrustCenter) (*types.MailingListSubscriber, error) {
+	trustCenter := compliancepage.CompliancePageFromContext(ctx)
+	if trustCenter.MailingListID == nil {
+		return nil, nil
+	}
+
+	identity := authn.IdentityFromContext(ctx)
+	if identity == nil {
+		return nil, nil
+	}
+
+	subscriber, err := r.MailmanService(ctx, trustCenter.ID.TenantID()).GetSubscriber(ctx, *trustCenter.MailingListID, identity.EmailAddress)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot get mailing list subscription", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	if subscriber == nil {
+		return nil, nil
+	}
+
+	return types.NewMailingListSubscriber(subscriber), nil
+}
+
 // Organization is the resolver for the organization field.
 func (r *trustCenterResolver) Organization(ctx context.Context, obj *types.TrustCenter) (*types.Organization, error) {
 	return obj.Organization, nil

pkg/server/server.go

@@ -27,6 +27,7 @@ import (
 	"go.probo.inc/probo/pkg/connector"
 	"go.probo.inc/probo/pkg/esign"
 	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/probo"
 	"go.probo.inc/probo/pkg/securecookie"
 	"go.probo.inc/probo/pkg/server/api"
@@ -46,6 +47,7 @@ type Config struct {
 	Trust             *trust.Service
 	ESign             *esign.Service
 	Slack             *slack.Service
+	Mailman           *mailman.Service
 	Cookie            securecookie.Config
 	TokenSecret       string
 	ConnectorRegistry *connector.ConnectorRegistry
@@ -74,6 +76,7 @@ func NewServer(cfg Config) (*Server, error) {
 		Trust:             cfg.Trust,
 		ESign:             cfg.ESign,
 		Slack:             cfg.Slack,
+		Mailman:           cfg.Mailman,
 		Cookie:            cfg.Cookie,
 		TokenSecret:       cfg.TokenSecret,
 		ConnectorRegistry: cfg.ConnectorRegistry,

pkg/trust/trust_center_service.go

@@ -333,3 +333,36 @@ func (s *TrustCenterService) EmailPresenterConfig(ctx context.Context, complianc
 
 	return emailPresenterCfg, nil
 }
+
+func (s *TrustCenterService) GetMailingList(
+	ctx context.Context,
+	trustCenterID gid.GID,
+) (*coredata.MailingList, error) {
+	var mailingList *coredata.MailingList
+
+	err := s.svc.pg.WithConn(
+		ctx,
+		func(conn pg.Conn) error {
+			trustCenter := &coredata.TrustCenter{}
+			if err := trustCenter.LoadByID(ctx, conn, s.svc.scope, trustCenterID); err != nil {
+				return fmt.Errorf("cannot load trust center: %w", err)
+			}
+
+			if trustCenter.MailingListID == nil {
+				return nil
+			}
+
+			mailingList = &coredata.MailingList{}
+			if err := mailingList.LoadByID(ctx, conn, s.svc.scope, *trustCenter.MailingListID); err != nil {
+				return fmt.Errorf("cannot load mailing list: %w", err)
+			}
+
+			return nil
+		},
+	)
+	if err != nil {
+		return nil, err
+	}
+
+	return mailingList, nil
+}