Step 1
Choose a tier.
You pick one of the three tiers. Billing is per productive mailbox; shared mailboxes and functional addresses are listed separately in the quote.
Suite license per mailbox
Start small.Grow any time.Without a new contract.
Nine modules across three tiers, billed per mailbox. Every tier contains everything below it, and whoever needs more later switches it on instead of renegotiating.
Add modules any timeOne contract, one contactOperated in Germany
Included in every tier.
The platform is not an extra. Administration, evidence, integration and support sit in every tier, no matter how far you go.
Admin portal and audit logEU hosting in GermanyDPA under GDPR Art. 28German support
From quote to operation
Three steps, two weeks.
Switching is not a project. Between your decision and running operation there are usually one to two weeks.
Step 2
Switch the mail path.
We set up the tenant and the policies and switch the MX record. That typically takes a week and causes no interruption to mail flow.
Step 3
Extend later.
When a higher tier is needed, we switch it on. No new contract, no second migration, the modules are already part of the same platform.
What comes at no extra cost.
No surcharge for standard compliance, no onboarding fee. What does cost extra is stated in the footnote of the tier overview: additional storage and the full SecureFiles plan.
Platform base
Admin portal, audit log under GDPR Art. 30, SSO via Entra ID, multi-tenant tenant management. EU hosting in Germany on ISO 27001 certified infrastructure.
Outlook integration
Native Outlook add-ins for Classic, New and Outlook Web App. Rollout via the Microsoft 365 Admin Center, no setup on the device.
Compliance packages
GDPR data processing agreement, sub-processor list, ISO 27001 proof, BSI C5 in preparation, German standard contract.
German support
Support and onboarding from Germany. Response times per SLA, escalation path up to management, the contracting party is Conbool GmbH.
SIEM export and audit-log streaming
Security events via pull API or webhook to Splunk, Sentinel, QRadar and Elastic. CEF, LEEF, ECS and JSON, included from Suite 1.
Three tiers
Suite 1 to 3.
Every tier contains everything below it. You do not choose between packages, only how far you go. Individual modules remain available alongside.
1
MailGuard
SecureMail
Disclaimer
DMARC
Conbool LFERequest a quote
Suite 1
The daily mail path. Filtered, encrypted, signed, deliverable.
The foundation
MailGuardSecureMailDisclaimerDMARCConbool LFE2
Continuity
ArchiveRequest a quote
Suite 2
Plus the preparation: keep working through an outage and retain what the law requires.
New in this tier
ContinuityArchiveIncludes everything from Suite 1, 7 modules in total
3
365 Backup
AwarenessRequest a quote
Suite 3
Plus recovery from Microsoft 365 and training for your team.
New in this tier
365 BackupAwarenessIncludes everything from Suite 2, 9 modules in total
| Module | Suite 1 | Suite 2 | Suite 3 |
|---|---|---|---|
| MailGuard | |||
| SecureMail | |||
| Disclaimer | |||
| DMARC | |||
| Conbool LFE | |||
| Continuity | |||
| Archive | |||
| 365 Backup | |||
| Awareness |
Conbool LFE is the SecureFiles recipient plan and included in every tier: addressed sending and replying. The full plan with public links, secure inbox and pools is available per seat, as is additional storage.
Nine modules
Available individually.
If you only need one module, you get one module. All nine can later be combined into a tier without renegotiating the contract.
MailGuard
Inbound protection
Inbound protection with anti-spam, anti-phishing, BEC and CEO fraud detection, structural and macro analysis for attachments, DACH DLP detectors.
Included in the suiteModule details
SecureMail
Email encryption
S/MIME, OpenPGP and an integrated message portal as a web reader for recipients without a certificate.
Included in the suiteModule details
SecureFiles
Secure file transfer
Secure file transfer with recipient authentication, audit log, expiry policies and retrieval log.
Included in the suiteModule details
Disclaimer
Signatures and legal disclosures
Server-side signatures and mandatory legal disclosures from Entra ID, Active Directory or LDAP, per business unit.
Included in the suiteModule details
DMARC Reports
Outbound identity protection
Outbound identity protection with DMARC aggregate and forensic reports, BIMI preparation.
Included in the suiteModule details
Archive
Audit-proof archiving
Audit-proof email archiving to GoBD and HGB with WORM storage, full-text search and retention rules.
Included in the suiteModule details
Continuity
Keep working during an outage
Incoming mail is stored as it passes the gateway. When Microsoft 365 is down, your team reads and replies through a separate web interface, and everything flows back into the mailbox afterwards.
Included in the suiteModule details
365 Backup
Backup for Microsoft 365
Mailboxes and online archives, OneDrive, SharePoint, Teams channels, Teams chats, Planner and Entra ID captured on a schedule. Individual messages, files and folders come back on their own, without replaying whole mailboxes.
Included in the suiteModule details
Awareness
Training and simulation
Phishing simulations spread across the year, short training right afterwards and reports that carry the evidence for the training obligation. Evaluation happens at group level.
Included in the suiteModule details
What makes Conbool special
What sets the Conbool Suite apart from the competition.
Four properties that you will find in this combination at hardly any other provider in the DACH region.
Multi-tenant for groups and MSPs
Policies per tenant, separate audit logs, separate contractual relationships depending on the setup. Suitable for groups with subsidiaries and for managed service providers with end customers.
DACH DLP detectors
Real checksum validation for German IBAN, VAT ID DE and AT, Swiss UID, AHV number, social security number and tax ID. Instead of generic DLP with a high false positive rate.
Integrated encryption
S/MIME, OpenPGP and a web reader portal in the same suite as MailGuard, SecureFiles and Disclaimer. No separate add-ons, no separate contracts, one audit log.
German GmbH as contracting party
Conbool is a German GmbH and data processor under GDPR Art. 28. EU hosting in Germany on ISO 27001 certified infrastructure. No third-country transfer to US hyperscalers without Standard Contractual Clauses and a Transfer Impact Assessment.
Frequently asked questions about licensing
Answers to the questions asked most often during the procurement process.
What does the Conbool Suite cost.
Pricing depends on the number of mailboxes, the activated modules and the contract term. We prepare a concrete quote after a 30 minute demo in which we align the stack and your use case. Pricing on request via the demo form or directly by email.
How is it billed.
Suite license per mailbox plus activated modules. One quote per tenant, one contractual relationship, one contracting party. Billing in euro via a German invoice with itemized VAT, no third-country contract, no currency switch.
Can I add modules later.
Yes. The suite is built so that you start with one module and add more modules later without new contract negotiations. The admin portal and the audit log cover all activated modules automatically, onboarding for an additional module is usually one week.
Is there a minimum term.
The usual term is one year with a renewal option. Longer terms are possible and are taken into account in the quote. Talk to us about your preferred model, we align the contract and billing with your procurement process.
What happens during onboarding.
MX switch technically in under 30 minutes, parallel operation with the existing setup is possible. Outlook add-ins are rolled out to all mailboxes via the Microsoft 365 Admin Center. A pilot phase in one department usually takes two to four weeks, the rollout across the entire organization afterwards one to two weeks.
Who is my contracting party.
Conbool GmbH, based in Germany, is your contracting party and data processor under GDPR Art. 28. The DPA is standardized, the sub-processor list in the DPA is transparent. No US contracting party, no third-country transfer to US hyperscalers without Standard Contractual Clauses and a Transfer Impact Assessment.
Do we get a trial setup.
Yes. After the demo you receive a trial setup in an isolated tenant in which you can test the modules with real example emails and a selected group of mailboxes. The trial setup is time limited but already uses the audit log and policies, so the transition into the production license is seamless.
Ready for a quoteMailGuardSecureMailSecureFilesDisclaimerDMARC ReportsArchiveContinuity365 BackupAwareness
A concrete quote for your setup.
Demo in 30 minutes. Suite stack with MailGuard, SecureMail, SecureFiles, Disclaimer and DMARC. EU hosting in Germany. Followed by a concrete quote.
MailGuardSecureMailSecureFilesDisclaimerDMARC ReportsArchiveContinuity365 BackupAwarenessConbool GmbH, German invoice, EU hosting in Germany.