Email security, compliance and Microsoft 365Twelve products. Four areas. One console.

Stop attacks, communicate securely, retain data, control Microsoft 365. In one console, operated in Germany.

ConboolOne console
12products
4areas
1console
1contract partner
01

Protect: stop attacks before anyone opens them.

Does the attack reach the mailbox?

MailGuard

Stop spam, phishing and CEO fraud

  • Attachment filter with CDR for Office, PDF, HTML and archives, URL rewriting and reputation in real time
  • QR code phishing filter and display name spoofing detection against BEC
  • DACH DLP library with real checksum validation for German, Austrian and Swiss identifiers

Who sends in your name?

DMARC Reports

Check senders, reach p=reject

  • Automated DMARC analysis with SPF and DKIM correlation
  • Staged enforcement to p=reject, optionally automatic with rollback
  • Delegation and daily reconciliation of target and actual state

Does the team spot the attack?

Awareness

Phishing exercises with proof

  • Programmes across several months instead of one off campaigns
  • Training on exactly the technique someone reacted to
  • Reports per department and period, exportable for audits
02

Communicate: confidential on the way out, consistent in appearance.

Can every recipient read encrypted mail?

SecureMail

Encrypt, even without a certificate

  • Central key management, automatic certificate distribution via LDAP directories
  • Web reader portal as a fallback for the majority of recipients without PKI
  • Policies per tenant and per business unit, multi-tenant capable

How do large files leave safely?

SecureFiles

Large files safely from Outlook

  • Recipient authentication via one time password, password or verified identity
  • Audit log per download with timestamp, IP country and user agent
  • Retention periods configurable per package, deletion proof documentable

Does every email look like the company?

Disclaimer

Central signatures for everyone

  • Server-side with nothing to install on devices, or without an MX change through the add-in alone
  • Mandatory disclosures under German Commercial Code (HGB) Section 37a and Section 80 AktG embedded automatically
  • Layered disclaimer for groups with several business units and brands
03

Retain and operate: nothing gets lost, nothing stands still.

Is everything retained with proof?

Archive

Audit-proof retention

  • Capture without a connector, Exchange connection via journaling
  • Cleartext archive for S/MIME and PGP messages with full-text search
  • Automated deletion after retention expiry including legal hold

What if the mail system is down?

Email continuity

Keep working during outages

  • No manual step in an emergency, the store runs continuously
  • Browser access, nothing to set up on devices
  • Independent of the mailbox system, on premises Exchange included

Where do the mailboxes live?

Conbool Mail

Mailboxes on your own domain

  • Three plans, Two with compliant archiving
  • Shared mailboxes up to 50 GB without a licence
  • Migration from Microsoft 365, Google Workspace and IMAP servers
04

Microsoft 365: data, access and settings under control.

Is the data backed up?

365 Backup

Back up and restore Microsoft 365

  • Eight sources on one schedule: Exchange Online, online archive, OneDrive, SharePoint, Teams channels, Teams chat, Planner, Entra ID
  • Restore individual items from a chosen point in time
  • Operated and stored in German data centres

Who may access what?

365 Permissions

Review and clean up sharing

  • Score from 0 to 100, findings by severity, report as PDF
  • Ten tenant setting controls, expected against actual
  • Partner view across all tenants, file contents are never read

Is every tenant configured correctly?

365 Tenants

Configure tenants from a template

  • Eleven areas, from Conditional Access to SharePoint sharing
  • Templates with placeholders per customer and immutable versions
  • Rollback without deleting, alerts on risky changes

The difference

Many tools become one platform.

At Conbool all twelve products run in one console, with one audit log and one sign-in.

Often today

  • Spam filterown portal
  • Encryptionown portal
  • File transferown portal
  • Signaturesown portal
  • Archiveown portal
  • Backupown portal
  • Trainingown portal
  • Permissionsown portal

One contract, one log and one contact per tool.

Conbool
  • 1console
  • 1audit log
  • 1contract partner
  • 1contact person
Operated in Germany
German GmbH as contract partner, ISO 27001 data centres, DPA under Art. 28 GDPR.
On premises as well
Selected modules run in your own data centre.
Multi-tenant
Groups with subsidiaries and IT service providers with their customers in one console, with policies and logs per tenant.
Fits what you have
Alongside Microsoft 365 and Exchange, or with Conbool Mail mailboxes.
Works together
Encrypted on the way out and still searchable in the archive.
Grows with you
Products on their own or as a suite, activated later without a new contract.

Start with one, grow into a suite.

Every product can be booked on its own. Each tier contains everything from the one below.

  1. 1

    Suite 1

    The daily mail path. Filtered, encrypted, signed, deliverable.

  2. 2

    Suite 2

    Plus the preparation: keep working through an outage and retain what the law requires.

  3. 3

    Suite 3

    Plus recovery from Microsoft 365, training for your team and control over permissions and settings in Microsoft 365.

Frequently asked questions about the products

Question not listed?Write to us
Do we have to use all twelve products?

No. Licences are billed per mailbox, products can be added. You can start with one product, such as MailGuard or SecureMail, and add the others later, without a new contract, without a new onboarding phase and without an additional admin portal.

Which product solves which task?

Protect: MailGuard filters spam, phishing and CEO fraud, DMARC Reports shows who sends in your name, Awareness trains the team with phishing exercises. Communicate: SecureMail encrypts, SecureFiles transfers large and confidential files, Disclaimer applies signatures and mandatory details. Retain and operate: Archive retains audit-proof, business continuity keeps the team working during an outage, Conbool Mail provides the mailboxes. Microsoft 365: 365 Backup backs up, 365 Permissions reviews sharing, 365 Tenants keeps every tenant on template.

How does Conbool differ from a Microsoft 365 add-on?

Conbool sits in front of Microsoft 365 as a separate security layer and can run either as a pre-filter or as a full replacement. EU hosting in Germany, German GmbH as contract partner, DPA under Art. 28 GDPR. No transfers to US hyperscalers in third countries without standard contractual clauses and a transfer impact assessment.

How does Conbool integrate with Microsoft 365?

Technical MX switch in under 30 minutes, parallel operation possible. Outlook add-ins rolled out to all mailboxes via the Microsoft 365 admin center. Sign-in via Entra ID, automatic provisioning when an employee joins and immediate removal when they leave. Existing DMS synchronisation via IMAP, POP3 or MAPI keeps working.

Do we need Conbool Mail to use the other products?

No. The products work with Microsoft 365, with on-premises Exchange and with Conbool Mail mailboxes. Conbool Mail is for everyone who wants email, calendar and contacts on their own domain, operated in Germany.

What do the products do for Microsoft 365?

365 Backup backs up mailboxes, online archives, OneDrive, SharePoint, Teams, Teams chats, Planner and Entra ID and restores individual items. 365 Permissions rates sharing in SharePoint, OneDrive and Teams. 365 Tenants compares every tenant with a template and rolls it out with a dry run. All three run in the same console as email security.

Can a group or IT service provider manage several tenants in one console?

Yes. Conbool is multi-tenant with policies per tenant. Groups manage subsidiaries and business units separately, service providers their customers, all in one console with separate audit logs and, depending on the setup, separate contracts.

Where is the data processed?

In data centres in Germany. The contract partner is Conbool GmbH in Hamburg, with a DPA under Art. 28 GDPR; processors with standard contractual clauses are listed in the DPA. Selected modules can also run in your own data centre.

See the platform live.

A conversation or a demo in your own setup, with your own domains.

In three steps

  1. 1ConversationClarify needs and current setup.
  2. 2Demo in your own setupWith your own domains.
  3. 3SetupTypically within one to two weeks.