Administration.Encrypted.With BSI context.
MailGuard and SecureMail for federal, state and local administration with BSI IT-Grundschutz context. EU hosting, EVB-IT-fit, clear boundary to beBPo. As of 2026.
Encryption and protection without running it yourself.
- Self-running mail securityBSI-aligned service with DPA
- Confusion with beBPo and EGVPClear boundary to mandatory channels
- Procurement without EVB-IT contextEVB-IT-fit contract structure
Compliance anchors
Conbool supports measures from BSI IT-Grundschutz at the mail and data layer. Conbool does not replace beBPo, EGVP or other legally mandated electronic channels and only complements them in general administrative communication.
Four building blocks for administration.
MailGuard for inboxes, SecureMail for confidential correspondence, SecureFiles for large attachments, Disclaimer for required disclosures.
MailGuard
BEC, phishing and attachment protection for administrative inboxes.
MailGuard in detailSecureMailSecureMail
Encrypted correspondence to citizens, counsel and other authorities.
SecureMail in detailSecureFilesSecureFiles
Direct line for large case files and attachments, with audit log per access.
SecureFiles in detailDisclaimerDisclaimer
Per-authority and per-department disclosures, server-side.
Disclaimer in detailFour scenarios from public administration.
From the citizen inbox to inter-agency correspondence.
Protect the citizen inbox
Phishing and spam waves to administrative inboxes are caught by MailGuard at the authentication layer.
Encrypted citizen communication
Citizens without a certificate read the message in the web reader, no account or software install.
Inter-agency case files
SecureFiles as a direct line for large case files between agencies, beyond Outlook size limits.
Procurement-fit acquisition
EVB-IT-fit contract structure and acquisition via framework agreements possible.
Conbool as an independent layer.
Conbool sits in front of Microsoft 365 or Exchange. Specialised case-handling systems remain unchanged.
MX switch
Inbound SMTP runs through Conbool, Microsoft 365 stays the back-end.
Specialised systems
Conbool does not interact with specialised case-handling systems and only complements office communication.
beBPo and EGVP
Mandatory channels like beBPo and EGVP continue unchanged.
SIEM hook
Audit log via standard connector to the agency SIEM.
BSI IT-Grundschutz in technical terms.
BSI IT-Grundschutz defines building blocks for protection on different layers. Conbool covers blocks in the area of email and data transport.
Building-block mapping
Conbool maps to blocks in the application area, in particular email security.
Protection-needs assessment
Conbool as a documentable technical measure in the protection-needs analysis.
Emergency management
Multi-stage filter and backpressure protection layers for the mail chain.
Audit trail
Audit log per GDPR Art. 30 as evidence.
EVB-IT, framework agreement and pilot.
Conbool is EVB-IT-fit and can be acquired via framework agreements. Pilot starts in one department.
EVB-IT-fit
Contract structure complies with EVB-IT requirements.
Framework agreement
Acquisition via framework agreement or direct procurement under the threshold.
Pilot in one department
One department starts, the rest of the agency stays unchanged.
OZG hook
Conbool supports OZG requirements at the mail layer but does not replace the OZG portal itself.
Frequently asked questions
Does Conbool replace beBPo or EGVP?
How does Conbool fit BSI IT-Grundschutz?
What does the EVB-IT context look like?
What does that mean for OZG online services?
What about NIS-2 for public bodies?
What does ISMS integration look like?
What does Conbool cost for the public sector?
Verwandte Lösungen
Hornetsecurity-Alternative
Deutsche MailGuard-Alternative nach der Proofpoint-Übernahme.
Phishing-Schutz
BEC, Spear-Phishing und QR-Code-Phishing erkennen und entfernen.
Ransomware-Schutz E-Mail
Mehrstufige Anhang-Filter und URL-Reputation gegen Ransomware-Kampagnen.
Spam-Filter Unternehmen
Spam und unerwünschte Massenmail mit DACH-Heuristiken filtern.
CEO-Fraud-Schutz
BEC und CEO-Fraud-Attacken über Authentifizierungs-Layer abwehren.
Verwandte Branchen
Conbool ist in benachbarten Branchen mit ähnlichem Compliance-Profil im Einsatz.
A BSI-fit platform for administration.
Demo in 30 minutes. Pilot in one department. EVB-IT-fit.
Sources and date
Statements about BSI IT-Grundschutz are based on BSI standards and the IT-Grundschutz building blocks in their respective version. Statements about OZG are based on the German Online Access Act and its follow-up regulations. Statements about NIS-2 are based on Directive (EU) 2022/2555. Statements about EVB-IT are based on the supplementary contract conditions for IT procurement. As of 2026.
BSI is a designation of the Federal Office for Information Security. beBPo and EGVP are state electronic channels. Microsoft, Microsoft 365 and Exchange are trademarks of Microsoft Corporation. Conbool is a trademark of Conbool GmbH.