Email security suite from Germany
Complete email security.In one platform.
One provider for complete email security. Hosted in Germany.
- ISO 27001
- GDPR & DPA
- Hosted in Germany
What our customers say
The Conbool Suite won us over because it's the best turnkey email solution, one that flexibly adapts to our requirements.
Nine modules. One platform.
Spam protection, encryption, file transfer, signatures, DMARC, archiving, continuity, Microsoft 365 backup and staff training. All in one console, with one audit log and one point of contact.
Stop attacks
Communicate securely
Protect your data
Phishing, CEO fraud, malicious attachments: blocked before they land.
Multi-layer AI detection against the most common attacks. No extra hardware, no employee training required.
- Real-time phishing and spear-phishing detection
- CEO fraud protection with behavioural analysis
- Attachment filter that neutralises active content in PDF and Office files
- Data loss prevention: stops accidental data leaks
- SIEM export to Splunk, Sentinel, QRadar and Elastic
Filter path
DMARC reports made readable: spoofing protection without XML.
The only German-language DMARC platform with plain-text recommendations. See who sends mail in your name, and shut down spoofers in two clicks.
- Aggregated DMARC reports in plain text, not XML
- Step-by-step DNS guidance for SPF, DKIM, DMARC
- Alerts when suspicious senders impersonate your domain
- GDPR-compliant, hosting in Germany
Authentication
Reports arrive automatically and are evaluated.
People are the last line. Prepare them.
Realistic phishing simulations spread across the year, short training right after the reaction and reports that carry the evidence for the training obligation.
- Simulations staggered instead of an obvious campaign
- Training on exactly the technique someone reacted to
- Group level evaluation, no ranking of individuals
- Reports per department and period, exportable for audits
Simulation
Your mailbox has reached its storage limit
it-service@mailbox-administration.net
Encrypt emails, no training, no plug-in pain.
Send and receive confidential emails encrypted. Recipients need neither software nor certificate. They read the message in the secure portal.
- Automatic encryption by your rules
- Message portal for recipients without keys
- Outlook add-in: one click to encrypt
- GDPR- and NIS2-compliant audit log
Encrypted delivery
Centralised email signatures: always current, consistent everywhere.
One template, all employees. Change marketing banners, legal disclaimers and layout centrally. Outlook and mobile sync instantly.
- Server-side signatures: no more outdated layouts
- Marketing banners with expiry date and audience
- Outlook add-in with live preview, optionally with no MX change at all
- Entra ID, Active Directory and LDAP integration
Signature in the mail flow
Conbool GmbH, Hamburg
Commercial register and management
Mandatory details under German company law
Maintained centrally, identical on every device.
Send and receive large files securely, no FTP server.
Send multi-GB files with one Outlook click. Recipients download without an account. You see who accessed what and when.
- Multiple GB per file, straight from Outlook
- Secure inbox: external parties upload files to you
- Passwordless retrieval for recipients without an account
- Encrypted storage, hosting in Germany
Large file delivery
proposal_final.zip
2.4 GB
Legally compliant archiving, right in the mail flow
Archive captures every inbound and outbound message immutably and completely, archives encrypted mail in cleartext and deletes automatically after retention expiry.
- Capture without a connector, Exchange via journaling
- Cleartext archive for S/MIME and PGP with full-text search
- Retention of 6, 8 and 10 years with automated deletion
- EU sovereignty, cloud or on-premises
Search the archive
Deletion after the period, logged
Microsoft protects the platform. We protect your data.
Mailboxes and online archives, OneDrive, SharePoint, Teams channels, Teams chats, Planner and Entra ID run on one schedule. When something is missing, that one item comes back, not the whole mailbox.
- Eight sources in one control surface instead of eight tools
- A single message, file or folder from a chosen state
- Operated outside Azure so one incident cannot hit both
- You set the retention period, not the vendor
Scheduled backup
Microsoft stops. Your mail keeps moving.
Every incoming message is stored as it passes the gateway. When the target system fails, your team carries on in the browser.
- Nothing to switch over, the store runs continuously
- Read and reply from the usual sender address
- Automatic delivery into the mailbox after the outage
- Alerting through a channel that is not affected itself
Service status
Stop attacks
Communicate securely
Protect your data
Phishing, CEO fraud, malicious attachments: blocked before they land.
Multi-layer AI detection against the most common attacks. No extra hardware, no employee training required.
- Real-time phishing and spear-phishing detection
- CEO fraud protection with behavioural analysis
- Attachment filter that neutralises active content in PDF and Office files
- Data loss prevention: stops accidental data leaks
- SIEM export to Splunk, Sentinel, QRadar and Elastic
Filter path
DMARC reports made readable: spoofing protection without XML.
The only German-language DMARC platform with plain-text recommendations. See who sends mail in your name, and shut down spoofers in two clicks.
- Aggregated DMARC reports in plain text, not XML
- Step-by-step DNS guidance for SPF, DKIM, DMARC
- Alerts when suspicious senders impersonate your domain
- GDPR-compliant, hosting in Germany
Authentication
Reports arrive automatically and are evaluated.
People are the last line. Prepare them.
Realistic phishing simulations spread across the year, short training right after the reaction and reports that carry the evidence for the training obligation.
- Simulations staggered instead of an obvious campaign
- Training on exactly the technique someone reacted to
- Group level evaluation, no ranking of individuals
- Reports per department and period, exportable for audits
Simulation
Your mailbox has reached its storage limit
it-service@mailbox-administration.net
Encrypt emails, no training, no plug-in pain.
Send and receive confidential emails encrypted. Recipients need neither software nor certificate. They read the message in the secure portal.
- Automatic encryption by your rules
- Message portal for recipients without keys
- Outlook add-in: one click to encrypt
- GDPR- and NIS2-compliant audit log
Encrypted delivery
Centralised email signatures: always current, consistent everywhere.
One template, all employees. Change marketing banners, legal disclaimers and layout centrally. Outlook and mobile sync instantly.
- Server-side signatures: no more outdated layouts
- Marketing banners with expiry date and audience
- Outlook add-in with live preview, optionally with no MX change at all
- Entra ID, Active Directory and LDAP integration
Signature in the mail flow
Conbool GmbH, Hamburg
Commercial register and management
Mandatory details under German company law
Maintained centrally, identical on every device.
Send and receive large files securely, no FTP server.
Send multi-GB files with one Outlook click. Recipients download without an account. You see who accessed what and when.
- Multiple GB per file, straight from Outlook
- Secure inbox: external parties upload files to you
- Passwordless retrieval for recipients without an account
- Encrypted storage, hosting in Germany
Large file delivery
proposal_final.zip
2.4 GB
Legally compliant archiving, right in the mail flow
Archive captures every inbound and outbound message immutably and completely, archives encrypted mail in cleartext and deletes automatically after retention expiry.
- Capture without a connector, Exchange via journaling
- Cleartext archive for S/MIME and PGP with full-text search
- Retention of 6, 8 and 10 years with automated deletion
- EU sovereignty, cloud or on-premises
Search the archive
Deletion after the period, logged
Microsoft protects the platform. We protect your data.
Mailboxes and online archives, OneDrive, SharePoint, Teams channels, Teams chats, Planner and Entra ID run on one schedule. When something is missing, that one item comes back, not the whole mailbox.
- Eight sources in one control surface instead of eight tools
- A single message, file or folder from a chosen state
- Operated outside Azure so one incident cannot hit both
- You set the retention period, not the vendor
Scheduled backup
Microsoft stops. Your mail keeps moving.
Every incoming message is stored as it passes the gateway. When the target system fails, your team carries on in the browser.
- Nothing to switch over, the store runs continuously
- Read and reply from the usual sender address
- Automatic delivery into the mailbox after the outage
- Alerting through a channel that is not affected itself
Service status
Secure email communication in minutes instead of days.
Conbool is optimized for speed. Minimal manual effort and no complex setup. Connect your domain and start secure communication immediately.
Security & compliance
Proven security. Complete compliance
One complete audit log across all modules. GDPR-compliant, ISO 27001 certified and verifiable at any time.
Permissions & access
Intuitive management and maximum control for teams of any size
- Multi-provider access (Azure & Google)
- Role based access control (RBAC)
- LDAP, Active Directory, and Entra ID integration
- Multi tenant capable for customers and sites
End-to-end transparency
Control security standards and mail flow anytime with minimal effort
- Traceable mail flows and processing
- Extensive audit log and reporting
Compliance out of the box
Communicate in a privacy compliant and legally secure way. 100% made in Germany
- EDIFACT compliant for the energy sector
- Compliance with GDPR and critical infrastructure requirements
- NIS2 ready and aligned with BSI (made in Germany)
More than software
There's a conviction behind Conbool.
No company should have to give up control over its most confidential communication just to be secure. That's the reason we exist.
See for yourself
Experience secure email communication in a practice now
No credit card required - 30 days free - Cancel anytime
Finally easy email encryption.
SecureMail: Encryption that doesn't get in the way.
Enterprise-grade email encryption with S/MIME & PGP. Protect your communication with automated certificate management and seamless gateway integration.
Automated Encryption
Internal and external communication is encrypted fully automatically via S/MIME or PGP.
No complicated key exchange: Conbool handles the finding and assignment of certificates.
Central Key Management
Automated request and renewal of certificates (S/MIME) directly at the CA.
Central dashboard for managing all PGP keys and S/MIME certificates.
Maximum Compatibility
Seamless integration into your existing mail flow (M365, Exchange, Google).
No local installations: The encryption happens centrally at the gateway.
Secure Message Portal
Encrypted communication even with partners who do not have their own keys.
Recipients receive messages securely in the browser in your CI.
Advanced Gateway Features
Content based encryption policies.
Attachment sanitizing and malware protection.
DLP rules to prevent data loss.
Full audit log for compliance requirements.
Detailed analysis and reporting of mail flow security.
No spam. No malware. No worries.
MailGuard: Intelligent email spam filter
Protect your infrastructure with phishing protection, malware defense, and central security policies. MailGuard blocks threats before they reach the inbox and strengthens your email security in real time.
Multi stage threat detection
Detect spam, malware, and phishing
SPF, DKIM, DMARC, RBL, and heuristic analysis
Flexible rule and filter management
Score based filtering with configurable thresholds
Rules by domain, content, header, or user
Ready immediately
Ready in minutes
Integrates into existing mail servers without rebuilds
Comprehensive features
White and blacklisting
Real time tracking and history
Why Conbool MailGuard?
Detect spam, malware, and phishing
SPF, DKIM, DMARC, RBL, and heuristic analysis
Score based filtering with configurable thresholds
Rules by domain, content, header, or user
Ready in minutes
Legal compliance for your email footers.
Disclaimer: Email signatures centrally under control.
Centralized email signatures, disclaimers and marketing banners directly at the gateway for all devices.
Designer signatures without code
Create CI compliant templates in the intuitive drag and drop editor with no HTML knowledge required.
Add logos and banners in seconds thanks to cloud hosting directly in the gateway.
Dynamic personalization
Automatic population with user data from Microsoft Entra ID (Azure AD) or LDAP.
Our smart logic hides empty lines automatically when data is missing.
Intelligent rules
Control by department, language, or recipient.
Time based campaigns per block, the banner ends without touching the signature.
Compliance and brand protection
Central management of mandatory company info.
Consistent branding on all devices.
Central management at enterprise level
Banner, signature and legal text as separate blocks in one message.
Multi language support with automatic language selection.
Full service hosting without your own web servers.
Device independent for perfect rendering everywhere.
Full transparency while composing thanks to Outlook add-in and native enrichment.
Secure file transfer.
SecureFiles: Send and receive files of any size straight from Outlook, encrypted, hosted in the EU.
Secure file transfer straight from Outlook, with a Secure Inbox for external uploads. Encrypted, GDPR-compliant, no US cloud.
Any file size
Send files of any size straight from Outlook, no portal detour.
Multipart upload, retry-capable, performant even at multi-gigabyte attachments.
Secure Inbox
Pools as shared upload folders, externals are granted access by invitation.
Clients, patients, applicants and suppliers send files encrypted, no account required.
Storage sovereignty
Files optionally in your own S3 bucket in Germany.
Even we only see ciphertext, no plaintext.
Compliance
GDPR Art. 32, NIS-2 ready, audit log per Art. 30.
European hosting in EU jurisdiction, no CLOUD-Act exposure.
Right inside your workflow
Native in Outlook: Classic, New Outlook and Outlook on the Web.
Passwordless retrieval for returning recipients, 12-month device trust.
Mail in your own tone: sender name, wording, and layout of notification emails are fully customizable.
Malware scan before every release, infected files are rejected before they reach the recipient.
Multi-tenant, native Entra ID integration, SSO from one product.
Who sends mail in your name? DMARC reports in plain language.
DMARC Reports: Capture, analyze and secure DMARC reports automatically.
DMARC aggregate and forensic reports are captured directly through the existing mail flow, visualized and condensed into concrete recommendations. No additional license, no second vendor, no additional subprocessor.
Zero-touch setup
Conbool already serves as the MX. One TXT record is sufficient.
No mail flow changes, no separate recipient endpoint required.
Pass rate at a glance
Trend, top source IPs, SPF/DKIM alignment matrix and domain drilldown.
Analysis over 24 hours, 7 days, 30 days or 3 months.
Recommendations
Move-to-quarantine and move-to-reject recommendations.
Detection of suspicious sources and pass-rate drops.
Forensics and alerts
Forensic reports including header details.
Automatic notification on critical events.
Built into the workflow
Results appear immediately in the Conbool dashboard.
Overview, domains, sources, authentication and forensics in one hub.
Alerts to the addresses configured in settings.
Data processing in the EU, original mails remain in the mailbox.
Multi-tenant, integrated RBAC permissions, ready to use.
Archive with legal certainty? Archive handles it in the mail flow.
Archive: Capture, search and delete email audit-proof and on time.
Every inbound and outbound message is archived immutably in cleartext, made findable through full-text search and deleted automatically after the legal retention period. Right in the existing mail flow, without a second vendor and without an additional subprocessor.
Capture without a connector
Conbool is already the MX. One journal rule is enough for Exchange Online and Exchange on-premises.
Inbound, outbound and internal messages are captured directly in the mail flow.
Search in seconds
Full text across subject, content and attachments, plus filters by sender, date and attachment.
S/MIME and PGP messages are archived searchably in cleartext.
Retention and deletion concept
Retention classes of 6, 8 and 10 years under German commercial and tax law, periods starting at year end.
Automated, logged deletion after expiry, including legal hold.
Sovereignty and proof
Software-enforced immutability and a tamper-evident audit trail with a hash chain.
Operated exclusively in the EU, no access under the US CLOUD Act.
Right in the workflow
Software-enforced immutable storage with a complete chain of custody.
Search, restore, eDiscovery and audit in one hub.
Pre-filled GoBD process documentation included.
Data processing in the EU, cloud or on-premises.
Multi-tenant, integrated RBAC permissions, ready to use.
Microsoft 365 down? Continuity keeps running.
Continuity: Accept, read and answer mail while the mailbox system does not respond.
Every incoming message is stored as it passes the gateway. If Microsoft 365 or your own server fails, your team carries on through a separate web interface. Once the outage ends, everything flows into the mailbox automatically.
A store alongside
Every incoming message is stored as it passes the gateway.
No manual step in an emergency, the store runs continuously.
Access in the browser
Sign in to the Conbool interface, nothing to install on the device.
Reply from the usual sender address, checked before it leaves.
Delivery afterwards
As soon as the target system accepts again, delivery starts automatically.
Nothing is left in a side channel, not even in the archive.
Alerting and retention
The outage is reported through a channel that is not affected itself.
The fallback copy is removed on its own once the period ends.
At a glance
Independent of the mailbox system, on premises Exchange included.
Reading and replying, not merely being reachable.
Readiness verifiable before it matters.
History from the archive available on request.
Operated in Germany or in your own data centre.
Microsoft protects the platform. 365 Backup protects your data.
365 Backup: Back up mailboxes, online archives, OneDrive, SharePoint, Teams channels, Teams chats, Planner and Entra ID on a schedule and restore them item by item.
Microsoft 365 includes no backup. Anything deleted, overwritten or encrypted is gone for good once the retention window closes. Conbool keeps older states outside the Microsoft environment and brings individual items back instead of overwriting whole mailboxes.
Exchange Online
Mailboxes including folder structure and attachments.
The online archive as a source of its own, with its own structure.
OneDrive and SharePoint
Personal storage and the document libraries of your team sites.
Plus the lists on a site, independent of the recycle bin.
Microsoft Teams
Channels and the files that belong to them.
Private and group chats per user.
Planner and Entra ID
Plans with buckets, tasks and checklists.
Users, groups, roles and conditional access policies.
At a glance
Restore individual messages, files and folders.
Every run is kept as its own state.
You set the retention period, not the vendor.
Roles decide who may restore, every operation is logged.
Operated outside Azure, stored in Germany.
Filters catch most of it. Awareness rehearses the rest.
Awareness: Phishing simulation and training spread across the year, with evidence at the end.
What gets through technical defences is well made and lands with a person under time pressure. Awareness rehearses that moment, explains immediately after the reaction and produces reports that hold up against the statutory training obligation. Evaluation happens at group level.
Phishing simulation
Templates follow techniques that are actually in circulation.
Sending staggered so it does not stand out as a campaign.
Training
A short unit right after the reaction, not weeks later.
Specific to the technique that was fallen for.
Programmes
A plan across several months instead of a one off campaign.
Set it up once and it keeps running without chasing.
Reports
Progress per department and period.
Exportable for audit, internal review and management.
At a glance
Group level evaluation, no ranking of individuals.
Separate records for employees and management.
Repetition across the year, because that is where the effect comes from.
Explanation instead of a report to managers, so incidents get reported.
Operated in Germany or entirely on your own premises.
Encryption, threat protection and signatures: GDPR-compliant, made in Germany
Sensitive content, confidential communication, critical data: With Conbool your email stays private, secure, and GDPR compliant. As a Cloud Email Security platform. With zero effort.
Ready for secure email communication that just works?
No credit card required - 30 days free - Cancel anytime