Sign In
NIS2-COMPLIANT

NIS2-CompliantEmail Securityfor Businesses.

§30 BSIG requires cryptography, secure communication and incident reporting. Conbool covers it all – on one platform. Made in Germany.

Start free trialRequest a demo

NIS2 has been active law since December 2025.

The NIS2 Implementation Act came into force on December 6, 2025 – with no transition period. Affected companies must comply immediately.

This page covers the email requirements. The legal position, scope, deadlines and the ten measures under Section 30 BSIG are in the NIS2 reference.

29,500
Companies affected in Germany
€10M
Fines for violations (or 2% of annual revenue)
Personal
CEO liability under §38 BSIG
0 Days
Transition period – obligations apply immediately

How Conbool fulfills NIS2 requirements

§30 BSIG defines 10 mandatory measures. Conbool fully covers all email-relevant requirements.

§30 (2) No. 8
Cryptography
Anforderung
Concepts and procedures for the use of cryptographic methods
Conbool solution
SecureMail: Automatic S/MIME & PGP encryption, TLS enforcement, key management
§30 (2) No. 10
Secure Communication
Anforderung
Secured voice, video and text communication
Conbool solution
Secure Message Portal + Gateway encryption for secure email delivery
§30 (2) No. 2
Incident Management
Anforderung
Handling of security incidents
Conbool solution
MailGuard: AI detection, quarantine, tracing & audit logs for incident analysis
Sec. 30(2) no. 4
Supply Chain Security
Anforderung
Security in the supply chain including communication
Conbool solution
Automatic encryption with partners, message portal as fallback
§30 (2) No. 1
Risk Analysis
Anforderung
Concepts for risk analysis and security
Conbool solution
Dashboard, compliance reports & complete email transparency
Sec. 30(2) no. 3
Business Continuity
Anforderung
Maintaining operations
Conbool solution
99.9 % availability on an annual average, ISO 27001 certified data centers, documented backup and recovery

One platform. All NIS2 email requirements.

Conbool is the only solution that combines encryption, threat protection and compliance management for email on one platform.

§30 No. 8 – CRYPTOGRAPHY

SecureMail

Automatic S/MIME & PGP encryption with central certificate management. Fully meets cryptography requirements under §30 BSIG.

  • Automatic encryption in the mail flow
  • Central certificate & key management
  • BSI TR-02102 compliant algorithms
SecureMail in detail
§30 No. 2 – INCIDENT MANAGEMENT

MailGuard

AI-based spam & phishing protection with quarantine and complete audit trail. Meets incident detection and handling requirements.

  • Real-time AI-based threat detection
  • SPF, DKIM, DMARC, ARC validation
  • Quarantine with 90-day audit logs
MailGuard in detail
COMPLIANCE & CORPORATE IDENTITY

Disclaimer

Legally compliant email signatures and mandatory information centrally managed. Ensures consistent compliance in every outgoing email.

  • Legally compliant mandatory info automatically
  • Drag & drop editor without coding
  • Multi-language & dynamic personalization
Disclaimer in detail

NIS2 affects 18 sectors.

Regardless of your industry – if your company meets the size criteria, email security is mandatory.

Energy
Healthcare
Finance & Insurance
Transport & Logistics
Water & Wastewater
Digital Infrastructure
Public Administration
Manufacturing

Regardless of sector – email is attack vector #1.

Enterprise Infrastructure. Made in Germany.

ISO 27001
Certified data centers in Frankfurt & Berlin
BSI-compliant
Cryptography per BSI TR-02102 standard
GDPR & NIS2
Full regulatory compliance
99.9% SLA
Active-active clustering & high availability

NIS2 & Email Security: Knowledge & Guides

NIS2 Guide

NIS2 and Email Security: The Complete Guide 2026

Everything you need to know about NIS2 requirements for email – including checklist.

Read more
NIS2 Guide

NIS2 CEO Liability: Email Security is Now a Board-Level Issue

Personal liability, fines and what executives need to do now.

Read more
NIS2 Guide

§30 BSIG: The 10 Mandatory Measures for Email Explained

Every measure in detail – and what it means for your email infrastructure.

Read more

Frequently Asked Questions about NIS2 & Email Security

Is my company affected by NIS2?
NIS2 affects companies with 50+ employees or €10M+ annual revenue in 18 defined sectors (energy, healthcare, finance, transport, digital infrastructure, manufacturing, etc.). Suppliers of affected companies can also be indirectly obligated.
What email measures does NIS2 specifically require?
§30 BSIG requires cryptography concepts (No. 8), secure communication (No. 10), incident management (No. 2) and supply chain security (No. 5). For email, this means: encryption (S/MIME/PGP), spam & phishing protection, audit logging and secure communication with external partners.
What happens if NIS2 requirements are not met?
Essential entities face fines up to €10M or 2% of global annual revenue. Important entities up to €7M or 1.4% of revenue. Additionally, management is personally liable under §38 BSIG.
Do I need email encryption for NIS2?
Yes. §30 (2) No. 8 BSIG explicitly requires concepts and procedures for the use of cryptographic methods. Emails with sensitive or critical content must be encrypted – both in transit (TLS) and content-wise (S/MIME/PGP).
Is Conbool NIS2-compliant?
Yes. Conbool covers all email-relevant NIS2 requirements: automatic encryption (§30 No. 8), secure communication via message portal (§30 No. 10), threat detection and quarantine (§30 No. 2), and complete audit logs. Hosted in ISO 27001 certified data centers in Germany.
How quickly can I set up Conbool?
In just minutes. Register your domain, set the MX record, configure encryption policies – done. No hardware setup, no complex migration. 30-day free trial.

NIS2-compliant email security in minutes, not months.

Start with Conbool now and meet all email requirements under §30 BSIG – on one platform.

Start free trialRequest a demo
Learn more about NIS2 email encryption in detail