Email security suite from Germany
Complete email security.In one platform.
One provider for complete email security. Hosted in Germany.
- ISO 27001
- GDPR & DPA
- Hosted in Germany
What our customers say
The Conbool Suite won us over because it's the best turnkey email solution, one that flexibly adapts to our requirements.
Ten modules. One platform.
Spam protection, encryption, file transfer, signatures, DMARC, archiving, continuity, Microsoft 365 backup, staff training and governance for Microsoft 365. All in one console, with one audit log and one point of contact.
Threat Protection
Secure Communication
Business Continuity
Governance & Compliance
Phishing, CEO fraud, malicious attachments: blocked before they land.
Multi-layer AI detection against the most common attacks. No extra hardware, no employee training required.
- Real-time phishing and spear-phishing detection
- CEO fraud protection with behavioural analysis
- Attachment filter that neutralises active content in PDF and Office files
- Data loss prevention: stops accidental data leaks
- SIEM export to Splunk, Sentinel, QRadar and Elastic
Filter path
Make DMARC visible and enforce it safely.
DMARC Reports shows who sends in your name. DMARC Manager takes your domains to p=reject in stages and keeps the records correct over time.
- Reports as analysis instead of XML
- Setup directly at the DNS provider
- In stages from p=none to p=reject
- Delegation and daily reconciliation
Enforcement
The policy is raised only when every single day is clean.
People are the last line. Prepare them.
Realistic phishing simulations spread across the year, short training right after the reaction and reports that carry the evidence for the training obligation.
- Simulations staggered instead of an obvious campaign
- Training on exactly the technique someone reacted to
- Report button for Outlook and Thunderbird, evaluation without rankings
- Reports per department and period, exportable for audits
Simulation
Your mailbox has reached its storage limit
it-service@mailbox-administration.net
Encrypt emails, no training, no plug-in pain.
Send and receive confidential emails encrypted. Recipients need neither software nor certificate. They read the message in the secure portal.
- Automatic encryption by your rules
- Message portal for recipients without keys
- Add-in for Outlook and Thunderbird: one click to encrypt
- GDPR- and NIS2-compliant audit log
Encrypted delivery
Centralised email signatures: always current, consistent everywhere.
One template, all employees. Change marketing banners, legal disclaimers and layout centrally. Outlook and mobile sync instantly.
- Server-side signatures: no more outdated layouts
- Marketing banners with expiry date and audience
- Outlook add-in with live preview, optionally with no MX change at all
- Entra ID, Active Directory and LDAP integration
Signature in the mail flow
Conbool GmbH, Hamburg
Commercial register and management
Mandatory details under German company law
Maintained centrally, identical on every device.
Send, receive and share large files securely, no FTP server.
Send multi-GB files with one Outlook click. Recipients download without an account. In a pool you work on shared files with colleagues and guests. You see who accessed what and when.
- Multiple GB per file, straight from Outlook and Thunderbird
- Secure inbox: external parties upload files to you
- Pool as a data room with guests without an account, versions and PDF annotations
- Encrypted storage, hosting in Germany
Large file delivery
proposal_final.zip
2.4 GB
Microsoft protects the platform. We protect your data.
Mailboxes and online archives, OneDrive, SharePoint, Teams channels, Teams chats, Planner and Entra ID run on one schedule. When something is missing, that one item comes back, not the whole mailbox.
- Eight sources in one control surface instead of eight tools
- A single message, file or folder from a chosen state
- Operated outside Azure so one incident cannot hit both
- You set the retention period, not the vendor
Scheduled backup
Microsoft stops. Your mail keeps moving.
Every incoming message is stored as it passes the gateway. When the target system fails, your team carries on in the browser.
- Nothing to switch over, the store runs continuously
- Read and reply from the usual sender address
- Automatic delivery into the mailbox after the outage
- Alerting through a channel that is not affected itself
Service status
Legally compliant archiving, right in the mail flow
Archive captures every inbound and outbound message immutably and completely, archives encrypted mail in cleartext and deletes automatically after retention expiry.
- Capture without a connector, Exchange via journaling
- Cleartext archive with full-text search, also in the add-in for Outlook and Thunderbird
- Retention of 6, 8 and 10 years with automated deletion
- EU sovereignty, cloud or on-premises
Search the archive
Deletion after the period, logged
Who can access what in Microsoft 365?
A scan records every permission in SharePoint, OneDrive, Teams and groups. 13 fixed rules turn them into findings with a severity and a score from 0 to 100.
- Anonymous links, grants to Everyone and guests through groups as findings
- Ten tenant setting controls, expected against actual
- Remediation with a dry run and approval by a second person
- File contents are never read
Permissions in view
Threat Protection
Secure Communication
Business Continuity
Governance & Compliance
Phishing, CEO fraud, malicious attachments: blocked before they land.
Multi-layer AI detection against the most common attacks. No extra hardware, no employee training required.
- Real-time phishing and spear-phishing detection
- CEO fraud protection with behavioural analysis
- Attachment filter that neutralises active content in PDF and Office files
- Data loss prevention: stops accidental data leaks
- SIEM export to Splunk, Sentinel, QRadar and Elastic
Filter path
Make DMARC visible and enforce it safely.
DMARC Reports shows who sends in your name. DMARC Manager takes your domains to p=reject in stages and keeps the records correct over time.
- Reports as analysis instead of XML
- Setup directly at the DNS provider
- In stages from p=none to p=reject
- Delegation and daily reconciliation
Enforcement
The policy is raised only when every single day is clean.
People are the last line. Prepare them.
Realistic phishing simulations spread across the year, short training right after the reaction and reports that carry the evidence for the training obligation.
- Simulations staggered instead of an obvious campaign
- Training on exactly the technique someone reacted to
- Report button for Outlook and Thunderbird, evaluation without rankings
- Reports per department and period, exportable for audits
Simulation
Your mailbox has reached its storage limit
it-service@mailbox-administration.net
Encrypt emails, no training, no plug-in pain.
Send and receive confidential emails encrypted. Recipients need neither software nor certificate. They read the message in the secure portal.
- Automatic encryption by your rules
- Message portal for recipients without keys
- Add-in for Outlook and Thunderbird: one click to encrypt
- GDPR- and NIS2-compliant audit log
Encrypted delivery
Centralised email signatures: always current, consistent everywhere.
One template, all employees. Change marketing banners, legal disclaimers and layout centrally. Outlook and mobile sync instantly.
- Server-side signatures: no more outdated layouts
- Marketing banners with expiry date and audience
- Outlook add-in with live preview, optionally with no MX change at all
- Entra ID, Active Directory and LDAP integration
Signature in the mail flow
Conbool GmbH, Hamburg
Commercial register and management
Mandatory details under German company law
Maintained centrally, identical on every device.
Send, receive and share large files securely, no FTP server.
Send multi-GB files with one Outlook click. Recipients download without an account. In a pool you work on shared files with colleagues and guests. You see who accessed what and when.
- Multiple GB per file, straight from Outlook and Thunderbird
- Secure inbox: external parties upload files to you
- Pool as a data room with guests without an account, versions and PDF annotations
- Encrypted storage, hosting in Germany
Large file delivery
proposal_final.zip
2.4 GB
Microsoft protects the platform. We protect your data.
Mailboxes and online archives, OneDrive, SharePoint, Teams channels, Teams chats, Planner and Entra ID run on one schedule. When something is missing, that one item comes back, not the whole mailbox.
- Eight sources in one control surface instead of eight tools
- A single message, file or folder from a chosen state
- Operated outside Azure so one incident cannot hit both
- You set the retention period, not the vendor
Scheduled backup
Microsoft stops. Your mail keeps moving.
Every incoming message is stored as it passes the gateway. When the target system fails, your team carries on in the browser.
- Nothing to switch over, the store runs continuously
- Read and reply from the usual sender address
- Automatic delivery into the mailbox after the outage
- Alerting through a channel that is not affected itself
Service status
Legally compliant archiving, right in the mail flow
Archive captures every inbound and outbound message immutably and completely, archives encrypted mail in cleartext and deletes automatically after retention expiry.
- Capture without a connector, Exchange via journaling
- Cleartext archive with full-text search, also in the add-in for Outlook and Thunderbird
- Retention of 6, 8 and 10 years with automated deletion
- EU sovereignty, cloud or on-premises
Search the archive
Deletion after the period, logged
Who can access what in Microsoft 365?
A scan records every permission in SharePoint, OneDrive, Teams and groups. 13 fixed rules turn them into findings with a severity and a score from 0 to 100.
- Anonymous links, grants to Everyone and guests through groups as findings
- Ten tenant setting controls, expected against actual
- Remediation with a dry run and approval by a second person
- File contents are never read
Permissions in view
Secure email communication in minutes instead of days.
Conbool is optimized for speed. Minimal manual effort and no complex setup. Connect your domain and start secure communication immediately.
The mailbox to go with it
Conbool Mail. The mailbox comes from Conbool too.
Email, calendar and contacts on your own domain, operated in Germany and managed in the same portal as your security modules.
At a glance
- Webmail, mail clients and smartphones via Exchange ActiveSync
- Three plans: Go, One and Two
- Security modules can be added per mailbox
From €1.29 per mailbox per month, excluding VAT
Security & compliance
Proven security. Complete compliance
One complete audit log across all modules. GDPR-compliant, ISO 27001 certified and verifiable at any time.
Permissions & access
Intuitive management and maximum control for teams of any size
- Multi-provider access (Azure & Google)
- Role based access control (RBAC)
- LDAP, Active Directory, and Entra ID integration
- Multi tenant capable for customers and sites
End-to-end transparency
Control security standards and mail flow anytime with minimal effort
- Traceable mail flows and processing
- Extensive audit log and reporting
Compliance out of the box
Communicate in a privacy compliant and legally secure way. 100% made in Germany
- EDIFACT compliant for the energy sector
- Compliance with GDPR and critical infrastructure requirements
- NIS2 ready and aligned with BSI (made in Germany)
More than software
There's a conviction behind Conbool.
No company should have to give up control over its most confidential communication just to be secure. That's the reason we exist.
See for yourself
Experience secure email communication in a practice now
No credit card required - 30 days free - Cancel anytime
How Conbool works
Ten modules. One platform.
Spam protection, encryption, file transfer, signatures, DMARC, archiving, continuity, Microsoft 365 backup, staff training and governance for Microsoft 365. All in one console, with one audit log and one point of contact.
Secure Communication
Finally easy email encryption.
SecureMail: Encryption that doesn't get in the way.
Enterprise-grade email encryption with S/MIME & PGP. Protect your communication with automated certificate management and seamless gateway integration.
Automated Encryption
Internal and external communication is encrypted fully automatically via S/MIME or PGP.
No complicated key exchange: Conbool handles the finding and assignment of certificates.
Central Key Management
Automated request and renewal of certificates (S/MIME) directly at the CA.
Central dashboard for managing all PGP keys and S/MIME certificates, with PGP keys created and renewed automatically per group.
Maximum Compatibility
Seamless integration into your existing mail flow (M365, Exchange, Google).
No local installations: The encryption happens centrally at the gateway.
Secure Message Portal
Encrypted communication even with partners who do not have their own keys.
Recipients receive messages securely in the browser in your CI.
Advanced Gateway Features
Content based encryption policies.
Attachment sanitizing and malware protection.
DLP rules to prevent data loss.
Full audit log for compliance requirements.
Detailed analysis and reporting of mail flow security.
Threat Protection
No spam. No malware. No worries.
MailGuard: Intelligent email spam filter
Protect your infrastructure with phishing protection, malware defense, and central security policies. MailGuard blocks threats before they reach the inbox and strengthens your email security in real time.
Multi stage threat detection
Detect spam, malware, and phishing
SPF, DKIM, DMARC, RBL, and heuristic analysis
Flexible rule and filter management
Score based filtering with configurable thresholds
Rules by domain, content, header, or user
Ready immediately
Ready in minutes
Integrates into existing mail servers without rebuilds
Comprehensive features
White and blacklisting
Real time tracking and history
Why Conbool MailGuard?
Detect spam, malware, and phishing
SPF, DKIM, DMARC, RBL, and heuristic analysis
Score based filtering with configurable thresholds
Rules by domain, content, header, or user
Ready in minutes
Legal compliance for your email footers.
Disclaimer: Email signatures centrally under control.
Centralized email signatures, disclaimers and marketing banners directly at the gateway for all devices.
Designer signatures without code
Create CI compliant templates in the intuitive drag and drop editor with no HTML knowledge required.
Add logos and banners in seconds thanks to cloud hosting directly in the gateway.
Dynamic personalization
Automatic population with user data from Microsoft Entra ID (Azure AD) or LDAP.
Our smart logic hides empty lines automatically when data is missing.
Intelligent rules
Control by department, language, or recipient.
Time based campaigns per block, the banner ends without touching the signature.
Compliance and brand protection
Central management of mandatory company info.
Consistent branding on all devices.
Central management at enterprise level
Banner, signature and legal text as separate blocks in one message.
Multi language support with automatic language selection.
Full service hosting without your own web servers.
Device independent for perfect rendering everywhere.
Full transparency while composing thanks to Outlook add-in and native enrichment.
Secure file transfer.
SecureFiles: Send and receive files of any size straight from Outlook, encrypted, hosted in the EU.
Secure file transfer straight from Outlook, with a Secure Inbox for external uploads. Encrypted, GDPR-compliant, no US cloud.
Any file size
Send files of any size straight from Outlook, no portal detour.
Multipart upload, retry-capable, performant even at multi-gigabyte attachments.
Secure Inbox
Pools as shared upload folders, externals are granted access by invitation.
Clients, patients, applicants and suppliers send files encrypted, no account required.
Storage sovereignty
Files optionally in your own S3 bucket in Germany.
Even we only see ciphertext, no plaintext.
Compliance
GDPR Art. 32, NIS-2 ready, audit log per Art. 30.
European hosting in EU jurisdiction, no CLOUD-Act exposure.
Right inside your workflow
Native in Outlook: Classic, New Outlook and Outlook on the Web.
Passwordless retrieval for returning recipients, 12-month device trust.
Mail in your own tone: sender name, wording, and layout of notification emails are fully customizable.
Malware scan before every release, infected files are rejected before they reach the recipient.
Multi-tenant, native Entra ID integration, SSO from one product.
Who sends mail in your name? See, decide, enforce.
DMARC Reports: Analyse reports. DMARC Manager enforces the policy.
Aggregate and forensic reports arrive at a fixed report address, are analysed and condensed into recommendations. DMARC Reports is included in every suite. DMARC Manager takes the domain to p=reject in stages and is available as an add-on to every suite.
Setup
The DNS provider is detected; the records are set via Domain Connect or shown for copying.
Existing report addresses are kept.
Pass rate at a glance
Trend, top source IPs, SPF/DKIM alignment matrix and domain drilldown.
Analysis over 24 hours, 7 days, 30 days or 3 months.
Staged enforcement
From p=none via p=quarantine to p=reject, judged by the weakest day.
With automation: rollback as soon as delivery drops.
Maintenance and monitoring
Delegation: enter once, we maintain DMARC and SPF.
Daily reconciliation of target and actual state, deviations shown at the domain.
Built into the workflow
Results appear immediately in the Conbool dashboard.
Overview, domains, sources, authentication and forensics in one hub.
Alerts and forensic reports to the configured recipients.
Data processing in the EU, original mails remain in the mailbox.
Multi-tenant, with roles and audit log.
Business Continuity
Governance & Compliance
Archive with legal certainty? Archive handles it in the mail flow.
Archive: Capture, search and delete email audit-proof and on time.
Every inbound and outbound message is archived immutably in cleartext, made findable through full-text search and deleted automatically after the legal retention period. Right in the existing mail flow, without a second vendor and without an additional subprocessor.
Capture without a connector
Conbool is already the MX. One journal rule is enough for Exchange Online and Exchange on-premises.
Inbound, outbound and internal messages are captured directly in the mail flow.
Search in seconds
Full text across subject, content and attachments, plus filters by sender, date and attachment.
S/MIME and PGP messages are archived searchably in cleartext.
Retention and deletion concept
Retention classes of 6, 8 and 10 years under German commercial and tax law, periods starting at year end.
Automated, logged deletion after expiry, including legal hold.
Sovereignty and proof
Software-enforced immutability and a tamper-evident audit trail with a hash chain.
Operated exclusively in the EU, no access under the US CLOUD Act.
Right in the workflow
Software-enforced immutable storage with a complete chain of custody.
Search, restore, eDiscovery and audit in one hub.
Pre-filled GoBD process documentation included.
Data processing in the EU, cloud or on-premises.
Multi-tenant, integrated RBAC permissions, ready to use.
Microsoft 365 down? Continuity keeps running.
Continuity: Accept, read and answer mail while the mailbox system does not respond.
Every incoming message is stored as it passes the gateway. If Microsoft 365 or your own server fails, your team carries on through a separate web interface. Once the outage ends, everything flows into the mailbox automatically.
A store alongside
Every incoming message is stored as it passes the gateway.
No manual step in an emergency, the store runs continuously.
Access in the browser
Sign in to the Conbool interface, nothing to install on the device.
Reply from the usual sender address, checked before it leaves.
Delivery afterwards
As soon as the target system accepts again, delivery starts automatically.
Nothing is left in a side channel, not even in the archive.
Alerting and retention
The outage is reported through a channel that is not affected itself.
The fallback copy is removed on its own once the period ends.
At a glance
Independent of the mailbox system, on premises Exchange included.
Reading and replying, not merely being reachable.
Readiness verifiable before it matters.
History from the archive available on request.
Operated in Germany or in your own data centre.
Microsoft protects the platform. 365 Backup protects your data.
365 Backup: Back up mailboxes, online archives, OneDrive, SharePoint, Teams channels, Teams chats, Planner and Entra ID on a schedule and restore them item by item.
Microsoft 365 includes no backup. Anything deleted, overwritten or encrypted is gone for good once the retention window closes. Conbool keeps older states outside the Microsoft environment and brings individual items back instead of overwriting whole mailboxes.
Exchange Online
Mailboxes including folder structure and attachments.
The online archive as a source of its own, with its own structure.
OneDrive and SharePoint
Personal storage and the document libraries of your team sites.
Plus the lists on a site, independent of the recycle bin.
Microsoft Teams
Channels and the files that belong to them.
Private and group chats per user.
Planner and Entra ID
Plans with buckets, tasks and checklists.
Users, groups, roles and conditional access policies.
At a glance
Restore individual messages, files and folders.
Every run is kept as its own state.
You set the retention period, not the vendor.
Roles decide who may restore, every operation is logged.
Operated outside Azure, stored in Germany.
Filters catch most of it. Awareness rehearses the rest.
Awareness: Phishing simulation and training spread across the year, with evidence at the end.
What gets through technical defences is well made and lands with a person under time pressure. Awareness rehearses that moment, explains immediately after the reaction and produces reports that hold up against the statutory training obligation. Evaluation happens at group level.
Phishing simulation
Templates follow techniques that are actually in circulation.
Sending staggered so it does not stand out as a campaign.
Training
A short unit right after the reaction, not weeks later.
Specific to the technique that was fallen for.
Programmes
A plan across several months instead of a one off campaign.
Set it up once and it keeps running without chasing.
Reports
Progress per department and period.
Exportable for audit, internal review and management.
At a glance
Group level evaluation, no ranking of individuals.
Separate records for employees and management.
Repetition across the year, because that is where the effect comes from.
Explanation instead of a report to managers, so incidents get reported.
Operated in Germany or entirely on your own premises.
Sharing happens every day. 365 Permissions shows the total.
365 Permissions: Capture permissions and sharing in SharePoint, OneDrive, Teams and Microsoft 365 groups, assess them against 13 fixed rules and clean up in a controlled way.
Anonymous links, grants to Everyone, forgotten guests and teams without an owner go unnoticed for years. Conbool records every permission, turns the result into a score from 0 to 100 and fixes findings on request with a dry run and approval by a second person. File contents are never read.
SharePoint and OneDrive
Sites, libraries and OneDrives down to the single item.
Links and direct grants with recipient, role and expiry.
Teams and groups
Owners, visibility and guests per team.
Group members including nested groups.
Guests
Guests in teams and through groups, nested ones included.
External domains and addresses with the most grants.
Tenant settings
Ten controls compared with the Conbool Basis baseline.
Expected and actual value per control, nothing is changed.
At a glance
Score from 0 to 100 with trend.
Three templates: Standard, Strict, Confidential.
Report as PDF, permissions as CSV.
Scheduled scan reports new critical and high findings.
Partner view across all tenants, operated in Germany.
Encryption, threat protection and signatures: GDPR-compliant, made in Germany
Sensitive content, confidential communication, critical data: With Conbool your email stays private, secure, and GDPR compliant. As a Cloud Email Security platform. With zero effort.
Ready for secure email communication that just works?
No credit card required - 30 days free - Cancel anytime