SecureFiles · comparison

FTAPI and Conbool — side by side.

FTAPI from Munich and Conbool from Germany both address secure data exchange in the German-speaking market. This page compares publicly verifiable differences — as of May 2026.

In three sentences

What matters.

FTAPI is an established German MFT vendor headquartered in Munich, positioned primarily around its SecuPass technology and zero-knowledge architecture. Conbool SecureFiles is a German alternative with EU hosting, an Outlook add-in, modular licensing and a broader email-security suite behind it. Which fits best depends on architecture requirements, licensing flexibility, and whether classic email security (Mailguard, DMARC) is part of the project.

The five most common questions, side by side.

Every statement about FTAPI links to a public source. Every Conbool claim is verifiable in a demo.

Where is my data hosted?

Conbool SecureFiles

Exclusively in EU data centres on ISO 27001-certified infrastructure. Contract party and data processor is Conbool GmbH in Germany. Sub-processors are EU-only, the data location is named in the DPA.

FTAPIFTAPI

FTAPI is a German vendor headquartered in Munich and offers hosting in Germany both as SaaS and as an on-premise installation. That means German hosting is given with both vendors — no clear differentiator.

Source: ftapi.com — company and product pages. Please confirm concrete data-centre locations for your setup with the vendor.

Why it matters: when German hosting is a tender criterion, both vendors meet it. The decisive points are then usually the contract structure and the sub-processor list.

How is the architecture set up?

Conbool SecureFiles

Pipeline approach with passwordless one-time links and optional second factor (SMS code). Encryption in transit and at rest, key management server-side in the EU. No Conbool account needed for recipients.

FTAPIFTAPI

FTAPI positions its SecuPass technology as a zero-knowledge architecture: the password is not transmitted to the server in plain text, and the vendor states it cannot technically decrypt the contents. Recipients receive a SecuPass password via a separate channel.

Source: ftapi.com — product documentation on SecuPass and zero-knowledge. Please confirm technical details directly with FTAPI for your setup.

Why it matters: zero-knowledge is a strong compliance argument but requires disciplined password hygiene. Passwordless links are more user-friendly but must be properly secured. Both approaches are defensible in audits.

How is licensing structured?

Conbool SecureFiles

Modular per feature. Term monthly or yearly with cancellation, no multi-year minimum commitment. Modules like the Outlook add-in, secure inbox or DLP can be activated independently.

FTAPIFTAPI

FTAPI is billed as an annual license per tier, with multi-year contracts (often 2–3 years) being common in practice. Exact conditions are negotiated by the vendor directly.

Source: ftapi.com — pricing and license inquiry page. Current contract conditions via the vendor.

Why it matters: long contract commitments provide planning certainty but cost flexibility. Modular, monthly-cancellable licenses reduce risk for pilot projects.

How does the Outlook integration work?

Conbool SecureFiles

The Outlook add-in is distributed centrally via the M365 Admin Center or GPO. For attachments above the configured size, the add-in automatically switches to a secure download link — no additional click required.

FTAPIFTAPI

FTAPI also offers an Outlook add-in for Microsoft 365 and Outlook Desktop. Attachments are sent as secure transfers via the add-in; the trigger is generally the deliberate use of the FTAPI button.

Source: ftapi.com — documentation on the Outlook add-in. Please confirm current version and configuration details with the vendor.

Why it matters: when employees should continue sending from Outlook without relearning workflows, automatic auto-switch for large files is a comfort difference — otherwise success depends on training and user discipline.

What scope is offered beyond file transfer?

Conbool SecureFiles

SecureFiles is part of a 4-module suite: Mailguard (spam/malware/phishing), SecureMail (encryption), Disclaimer (signatures/footers) and DMARC reports. Modules can be booked individually but share identity, reporting and contract basis.

FTAPIFTAPI

FTAPI is primarily focused on Managed File Transfer (MFT): secure data transfer, inbox and workflows. Classic email-security topics such as spam filtering, DMARC monitoring or central signature management are not core to the product.

Source: ftapi.com — product overview. If you want to cover additional email-security topics, ask FTAPI about partners or integrations.

Why it matters: if you only need file transfer, a pure MFT specialist is enough. If you want Mailguard, DMARC and file transfer in one contract, a suite approach pays off.

Migration checklist

What to watch for when migrating away from FTAPI.

Replacing FTAPI typically runs in five steps — regardless of whether you operate the SaaS variant or an on-premise installation.

  1. 1. Document the FTAPI contract and SecuPass configuration

    Capture contract end date, tier size, license count and the currently active SecuPass configuration (policy, password requirements, recipient workflows). This inventory is the prerequisite for a clean cutover and timely cancellation.

  2. 2. Export recipient lists from FTAPI

    Export regularly used recipients and workflow profiles from FTAPI. This keeps the address pool available for end users during the switch and nobody loses contact data at cutover.

  3. 3. Roll out the Conbool Outlook add-in in parallel

    The Conbool Outlook add-in is distributed centrally (M365 Admin Center or GPO). Users then see both buttons — FTAPI and Conbool — and can switch without pressure. A pilot group goes first; the auto-switch for large attachments reduces training effort.

  4. 4. Let active FTAPI transfers expire normally

    Existing SecuPass transfers are not force-migrated. They run to the configured expiry date and are deleted afterwards. New sends go via Conbool — a clean cut without data loss.

  5. 5. Terminate the FTAPI tenant or decommission on-premise

    Once all transfers have expired, recipient lists are archived and the audit log is preserved, the FTAPI SaaS tenant can be cancelled at the end of the contract term, or the on-premise installation deactivated. Archive the audit log for GDPR Art. 30.

These steps apply to FTAPI SaaS and on-premise. For FTAPI connectors to DMS or ERP systems we review the integration in the consult.

Decision aid

When Conbool, when FTAPI.

Conbool SecureFiles fits when …

  • You want modular licensing with a monthly or yearly cancellable contract.
  • You need a broader email-security platform (Mailguard, DMARC, signatures).
  • An Outlook add-in with automatic auto-switch for large files matters.
  • Simple setup without on-premise operation is wanted, on German hosting.

FTAPI fits when …

  • The SecuPass / zero-knowledge concept is explicitly required (e.g. compliance mandate).
  • Existing FTAPI workflows or connectors into DMS/ERP are in use.
  • A pure MFT specialisation without further email-security topics is sufficient.
  • Multi-year contracts with an on-premise option are strategically desired.

Frequently asked

See Conbool SecureFiles in your own setup.

30-minute demo. Cloud service hosted in the EU.

Sources and fairness note

Statements about FTAPI rely exclusively on publicly accessible sources: ftapi.com — product and company pages, documentation on SecuPass and the Outlook add-in. Claims about internal processes or architecture details not publicly substantiated are avoided. Statements about Conbool rely on our product documentation and contractual commitments.

As of May 2026. For your final decision we recommend you ask both vendors directly about the points relevant to you and get statements confirmed in writing.

FTAPI and SecuPass are trademarks of FTAPI Software GmbH. Conbool is a trademark of Conbool GmbH. This page is an editorial comparison — not official FTAPI material.