Audit-proof. Searchable. Archive.
Every inbound and outbound message is archived automatically, immutably and completely. Archive supports GoBD-compliant archiving under German law, operated exclusively in EU data centers.
One module, every requirement
Archiving from capture to deletion
Every step of the archive lifecycle in one product, legally compliant and from Germany.
Complete capture in the mail flow
Inbound, outbound and internal messages are taken over during processing, without an additional connector. Exchange Online and Exchange on-premises connect via journaling.
- Native gateway tap without a connector
- Exchange Online and on-premises via journal rule
- Hybrid capture in parallel and deduplicated
- Completeness via sequence checks and delivery retry
Find in seconds
Full-text search across subject, content and attachments, with filters by sender, date and attachment type. Decrypted messages are searchable too.
- Full-text index over subject, body and attachments
- Searchable cleartext, including decrypted messages
- Self-service restore into the mailbox
- Export as EML or MBOX, preview directly in the portal
Periods under German law
Retention of 6, 8 and 10 years per document type, periods starting at year end and automated deletion after expiry under GDPR.
- Retention classes of 6, 8 and 10 years, rule-based
- Immutability within the retention period
- Automated, logged deletion after expiry
- Legal hold as a justified exception to the deletion concept
Evidence-grade and audit-proof
Cases, legal holds and approvals for sensitive access under dual control. Every access lands in a tamper-evident audit trail.
- eDiscovery cases with saved searches and export
- Dual control for access and bulk export
- Hash-chained audit log with SIEM export
- Roles from Entra ID and Active Directory
Data stays in Europe
Operated exclusively in EU data centers by a German vendor. No access under the US CLOUD Act, cloud or fully on-premises from a single product.
- Exclusively EU data centers, German vendor
- Customer-managed keys available
- Cloud or fully on-premises from one code base
- Prepared for BSI C5 and Section 393 SGB V
Capture and cleartext archive
What belongs in the archive lands complete, immutable and searchable in cleartext.
Capture in the mail flow
Messages are taken over during processing, not collected afterwards from mailboxes. No connector, no gap.
- Inbound and outbound as well as internal
- Exchange Online and on-premises via journaling
Cleartext instead of ciphertext
S/MIME and PGP messages that the gateway decrypts are additionally archived in searchable cleartext. The encrypted original stays unchanged in the mailbox. Classic archives store only the encrypted shell and find nothing in it.
- Searchable cleartext without a second crypto pipeline
- Gateway-decrypted mail searchable in cleartext
Immutable and provable
Every message is stored immutably in software and secured by a hash chain. Manipulation is detectable and provable at any time.
- Hard WORM with object lock in the Compliance tier
- Chain of custody and complete logging
Storage efficiency
- Deduplication and compression
- Mailbox offloading through tiering
Periods and deletion
Retention classes of 6, 8 and 10 years, periods starting at year end. After expiry, deletion runs automatically and is logged.
- Rule-based per department, group or mailbox
- Legal hold and data subject rights integrated
Full-text search, including decrypted messages
The full-text search works on the decrypted archive and covers subject, content and attachments. That is exactly what archives cannot do when they store only encrypted shells.
- Search across subject, content and file names
- Matches across subject, content and attachments
- Operation and indexing exclusively in the EU
Conbool Archive versus classic archives
Six points where legally compliant archiving is decided.
Classic archives
- EncryptionEncrypted mail lands as an unreadable shell in the archive
- SovereigntyUS vendor despite EU data center, access possible under the CLOUD Act
- OperationCloud and on-premises as separate products with a migration break
- MigrationPST import only with Outlook and scripts
- RetentionBlanket single period, outdated 10-year logic
- PricingPrice only on request through sales
Archive
- EncryptionDecrypted cleartext, searchable, original preserved
- SovereigntyGerman vendor, exclusively EU, no third-country access
- OperationOne code base, switchable between cloud and on-premises
- MigrationGuided import without Outlook, with deduplication and proof
- RetentionSeparate classes of 6, 8 and 10 years, periods starting at year end
- PricingOpen per-user price, plannable and transparent
Enterprise infrastructure and security
Certified protection, seamless integration, and full transparency.
Monitoring and audit logs
Integration and compatibility
Seamless integration into your existing system landscape.
Infrastructure, Performance & Deployment
Highly available architecture for maximum reliability.
Infrastructure and architecture
- ISO 27001 hostingGeo redundant servers in Germany (the EU and Berlin).
- Active active clusterFor maximum resilience and load distribution.
Performance and reliability
- SLA guarantee99.9% guaranteed system availability.
- High performance routingMinimal latency (< 50ms) for email processing.
Deployment & Multi-Tenancy
- ISO 27001 certified hostingHosting in ISO 27001 certified EU data centers (Germany)
- Flexible service packagesCustom service packages per tenant
Support and documentation
Benefit from a broad range of support services
24/7 ticketing
Guaranteed response times around the clock
Phone support
Personal contact through prioritized phone support
Documentation and FAQs
Comprehensive documentation, step by steps, and FAQs
Compliance without overhead
Designed for the requirements of businesses, critical infrastructure operators and social insurance carriers.
GoBD, German commercial and tax law
Supports GoBD-compliant archiving with immutability, completeness and traceability. A pre-filled process documentation is included.
GDPR and data subject rights
Data processing agreement, technical and organizational measures and workflows for access and erasure with dual-control approval.
Critical infrastructure and Section 393 SGB V
Prepared for Section 30 BSIG and the sector standard B3S-GKV/PV. BSI C5 Type 2 in preparation, transitional evidence via ISO 27001.
IDW PS 880
Software attestation by an audit firm in preparation. Version and auditor will be stated after issuance.
EU data sovereignty
Operated exclusively in EU data centers by a German vendor. No third-country access under the US CLOUD Act.
Exit without vendor lock-in
Complete export in open formats such as EML, MBOX, CSV and XML, each with hash-based integrity evidence.
Take over legacy data without friction
Guided migration from PST files and legacy archives, without Outlook installation and without scripts.
Provide
Hand over PST, EML and MBOX data via upload or network path. The import runs entirely server-side, without Outlook.
Deduplicate
Duplicates are detected automatically, mailboxes are mapped largely automatically. Migration runs throttled in phases.
Prove
Every batch completes with a migration report and SHA-256 integrity evidence.
Common questions about archiving
Is Archive GoBD certified?
How are encrypted emails archived?
Which retention periods are supported?
What happens after the retention period expires?
Does Archive run on-premises as well?
How does the Microsoft 365 connection work?
Archiving that withstands audits
Archive with legal certainty, find in seconds and delete cleanly after expiry. From Germany, for cloud and on-premises.
No credit card required - 30 days free - Cancel anytime
Related products
Archiving works best together with protection, encryption and domain security in the mail flow.