REDDOXX and Conbool compared.
On filtering, encryption and archiving the two cover the same ground. The difference lies in the six disciplines beside them, and in whether you run an appliance or subscribe to a platform.
Where the two meet, and where they do not.
Nine modules, one platform, one contract. REDDOXX covers three of them according to its public portfolio, six it does not.
- MailGuardspam, phishing, BEC
- SecureMailS/MIME, OpenPGP, portal
- SecureFileslarge attachments
- Disclaimersignatures centrally
- DMARC Reportsoutbound identity
- Archiveaudit-proof, WORM
- 365 Backupback up Microsoft 365
- Awarenessphishing simulation
- Continuitymail flow during an outage
Classification follows the portfolio published on reddoxx.com, retrieved in September 2026. Listed there are MailDepot and Cloud Archive for archiving, MailSealer and REDDCRYPT for encryption and Spamfinder for filtering. What your contract covers is settled by the quote.
Verifiable
Eight points that make the difference.
Every point is described in our public documentation and can be checked in a demo.
Signatures and legal footers centrally
One template per tenant, applied server side, with campaign banners and measurement. Also available as an add-in without touching the mail flow.
DocumentationEvaluating DMARC, not just sending it
Reports are collected, evaluated and translated into steps until your own domain sits at reject.
DocumentationBack up Microsoft 365 and restore it
Mailboxes, calendars and files on a fixed schedule, plus users and groups from Entra ID. Restorability is tested and documented once a year.
DocumentationAwareness built on real incidents
Phishing simulation and training from the same interface, using defused attacks from your own traffic rather than a library.
DocumentationLarge attachments without a detour
Anything too large for the mail flow goes out as a retrieval link with an expiry and a log. For the sender it stays an attachment in Outlook.
DocumentationContinuity when the mail server is down
Incoming mail is accepted and stays readable, replies keep working. After the outage the backlog is moved into the mailbox in a controlled way.
DocumentationRetrospective threat scan
Links and attachments are re-assessed after delivery. If the verdict changes, the platform reports the affected message.
DocumentationTenants from one account
Partners and system houses manage every customer from one interface, distribute licences from a pool and hand rule sets on as a sealed package.
DocumentationPath to the recipient
How the message arrives.
For encryption REDDOXX names S/MIME, PGP and, with REDDCRYPT, a method of its own. Conbool builds on the two standards and keeps a reader portal ready for recipients without a key.
Conbool
- Recipient with a certificate or key: encryption with S/MIME or OpenPGP, opened in the familiar client.
- Recipient with neither: an invitation to the reader portal, replies possible, no account needed.
- Optionally as an encrypted PDF that opens on any device.
REDDOXX
- MailSealer signs and encrypts at the gateway, by its own description with S/MIME, PGP and REDDCRYPT.
- REDDCRYPT is described as a separate route for users, with an Outlook extension and an app.
- Incoming encrypted mail is, by its own statement, processed as well.
Details from reddoxx.com, retrieved in September 2026. On the two standards we see no defensible difference we could claim.
Operations
Where messages are processed.
REDDOXX comes from appliance operations and names cloud offerings for archiving and REDDCRYPT alongside. At Conbool the deployment model is a property of the tenant and can differ per customer.
Cloud in Germany
Operated in German data centres, a German company as your contracting party, processing under Article 28 GDPR.
Your own outbound path
Partners and system houses send from their own IP without leaving the shared administration.
In your own data centre
A complete installation on your premises when no message may leave the building. Same interface, same rules.
In operation
Six points from everyday use.
What matters in operation is documented and can be followed in a demo.
Outbound messages
Rules per recipient domain, attachment type and size decide whether a message is signed, encrypted or placed in the portal.
DocumentationInbound messages
Decryption and signature checking at the gateway, so the filter sees the plain text instead of stopping at the encryption.
DocumentationMicrosoft 365
Connected through a connector, or as an add-in without touching the mail flow where no connector may be set.
DocumentationThunderbird and other clients
A dedicated Thunderbird add-on, plus the gateway route for any client that speaks SMTP.
DocumentationArchive and search
Full-text search across the archive, export for auditors, retention per tenant.
DocumentationRunning it yourself
The same platform on premises, updated at the push of a button and with no call home to the cloud.
DocumentationOur view
When Conbool is the right choice.
- If you would rather not assemble signatures, DMARC, backup, awareness, file transfer and continuity from six further contracts.
- If you want to choose the deployment model per customer, from cloud to an installation in your own data centre.
- If you are a system house managing several tenants from one account.
- If you want the filter to act again after delivery when a verdict changes.
- If you need one shared audit log across every module rather than one per product.
In fairness
When REDDOXX is the right choice.
- If you prefer an appliance in your own building and have run it smoothly for years.
- If you have to archive e-invoices together with their structured data: a dedicated offering is described for that.
- If you are looking for an archive and have the remaining disciplines covered elsewhere.
- If you prefer a German manufacturer with a long history in the archiving market.
What prospects ask us about this.
Where these statements come from.
Statements about REDDOXX rely exclusively on publicly available sources: reddoxx.com with the product descriptions for MailDepot, Cloud Archive, MailSealer, REDDCRYPT and Spamfinder. We make no claims about internal processes or architecture that are not publicly documented. Where a source is silent, the table says not stated rather than no. Statements about Conbool rely on our own documentation and on contractual commitments. As of September 2026. Products change, so we recommend asking both vendors directly about the points that matter to you and taking the answers in writing.
See both in a demo.
We show filtering, encryption and archiving using an example from your industry, along with the six disciplines beside them.