Centrally Managed Email Encryption Gateway for S/MIME, PGP, TLS and PDF

Founded in 2008 and privately held in Amsterdam, CipherMail builds centrally managed email encryption for organisations that must protect message content both in transit and in storage. Its stated customer base runs from SMBs to Fortune 500 enterprises, with concentrations in banking, law firms, pension funds, healthcare and government agencies, sectors where confidentiality obligations make transparent, policy-driven encryption a compliance requirement rather than a user preference. The product line comprises an Email Encryption Gateway, the Webmail Messenger portal and an Android client.

The gateway sits inline with any SMTP email service, including on-premises Exchange, Microsoft 365 and Google Workspace, and decides per message how to protect it. It detects what the recipient can actually handle, then applies S/MIME, PGP in either PGP/MIME or inline form, TLS at the connection level, or conversion to a password-protected PDF. Policies are configured at gateway, domain and user level, including domain-to-domain rules between business partners, and a built-in DLP module inspects outbound mail for card numbers, bank accounts and similar patterns.

Where no recipient-side encryption is possible, messages route automatically to Webmail Messenger, a secure portal the recipient logs into, so delivery does not fail for lack of a key. Certificate handling is pluggable through request handlers for a local CA, CMP, CSR, CEMA, GlobalSign EPKI and SwissSign, and private keys can be generated and held on a tamper-proof HSM. Positioning rests on open Internet standards, a publicly reviewable open-source core and a free community edition, framed against proprietary secure-email suites and vendor lock-in.