Emails are all sent by AWS. When you first sign up, you're sent a verification email from AWS to confirm your ownership of that address. I'm also hoping to improve this further in the near future by adding DKIM verification also.

Most of the complexity in building this app has been around preventing abuse of the service for the purpose of sending spam emails by closely monitoring what's being sent via AWS SNS.