Both vendors solve the same problem: confidential email that reaches the recipient without anyone distributing certificates by hand. They do it differently. This page puts operating model, hosting, method and module scope side by side and backs every statement about Zivver with a public source.
In short
Conbool is an email security suite from Germany with nine modules, running as a cloud service or on-premises; the contracting party is Conbool GmbH in Hamburg. Zivver states on its security page that user data is held in a Virtual Private Cloud across certified data centres in the European Union, currently AWS eu-west-1, and its home page presents Zivver as a Kiteworks company headquartered in Silicon Valley. If you need S/MIME and PGP at the gateway, Conbool covers it; if you must demonstrate the Dutch healthcare standard NEN 7510, Zivver holds that certification.
Side by side, with a source for every statement about the competitor.
The same suite runs as a cloud service or entirely in your own data centre, with the same feature set.
Zivver describes its service as a web application reachable through all major browsers, plus plugins for Outlook and Gmail. The website does not mention an on-premises deployment.
Retrieved from zivver.com on 6 September 2026.
Hosting in Germany, the contracting party is Conbool GmbH in Hamburg, owner-managed and without a parent company outside the EU.
Zivver states that user data is stored in a Virtual Private Cloud across several ISO 27001 and SOC 2 certified data centres in the European Union, currently in AWS data centres in the eu-west-1 region. The home page presents Zivver as a Kiteworks company, headquartered in Silicon Valley.
zivver.com and zivver.com/security, Retrieved from zivver.com on 6 September 2026.
S/MIME and PGP at the gateway, with nothing to install for the user. Recipients without a certificate get the message portal or an encrypted PDF.
Zivver describes its own method: messages are encrypted with AES, the symmetric key asymmetrically with RSA 2048. The key is derived from the user password or the SSO secret; Zivver states that it stores neither the secret nor private decryption keys.
zivver.com/security, Retrieved from zivver.com on 6 September 2026.
Nine modules on one platform: spam and phishing protection, encryption, file transfer, archiving, signatures, DMARC reporting, 365 Backup, awareness and continuity.
The website lists Secure Email, Email Threat Protection, a DMARC service called Secure Your Domain, and awareness training.
Retrieved from zivver.com on 6 September 2026.
Conbool does not hold the Dutch NEN 7510 standard. For the German market the focus is GDPR compliance, data processing with a German contracting party, and the NIS2 requirements.
Zivver states that it is certified to ISO 27001:2022 and NEN 7510:2024, plus SOC 2 Type 2 and Cyber Essentials Plus.
zivver.com/security, Retrieved from zivver.com on 6 September 2026.
Migration
The path is the same as for any change in the mail flow and needs no cut-off date with downtime.
Which domains, which mailboxes, which groups of recipients are affected? That produces the rule list.
Conbool is added as a second path while the existing service keeps running. Two test mailboxes are enough for the first pass.
Rules, exceptions and recipient lists are carried over and checked one by one.
The mail flow is switched over; message tracing shows every delivery. The previous service stays reachable until the observation period ends.
The old path is cancelled only once nothing runs through it any more.
Access to older messages in your current service is governed by that vendor's terms. Please clarify retention and export with them before cancelling.
Decision aid
Industries
Richtlinie, Umsetzungsgesetz und BSIG: wer betroffen ist und was gilt.
Learn moreSaaS-SecureMail aus der EU, ohne Appliance-Pflege.
Learn moreS/MIME, PGP und Domain-Verschlüsselung nach NIS-2 angemessen.
Learn moreNIS-2-konforme E-Mail-Sicherheit mit Audit-Trail.
Learn moreSensible PDFs verschlüsselt versenden, ohne Empfänger-Konto.
Learn moreEmpfänger-Web-Reader für Schlüssel-lose Empfänger.
Learn moreOhne Add-on und ohne Zertifikate auf den Endgeräten.
Learn moreAlso compared
Comparisons with adjacent solutions.
We set up a test environment and carry over your rules without touching live operations.
Statements about Zivver come exclusively from publicly available sources: the home page zivver.com and the security page zivver.com/security. Claims about internal processes, pricing or architecture that are not documented there are avoided. Statements about Conbool come from our own product documentation and contractual commitments.
As of 6 September 2026. Vendor information changes. Before deciding, we recommend asking both vendors about the points that matter to you and having the answers confirmed in writing.
Zivver and Kiteworks are trademarks of their respective owners. Conbool is a trademark of Conbool GmbH. This page is an editorial comparison and not official material from Zivver or Kiteworks.