Conbool Encryption for Outlook

Conbool SecureMail brings real end-to-end email encryption into the Outlook your teams already use. The add-in signs and encrypts every message with S/MIME, without asking your people to request, install or renew certificates by hand.

What it does

• Automatic issuance of personal S/MIME certificates for every mailbox in your organisation.
• Silent key rotation and auto-renewal in the background, with advance notifications to administrators.
• One-click sign and encrypt from the Outlook ribbon, with default policies configurable per account and mailbox.
• Send-time prompt: Outlook warns you before sending to external recipients without a public key and suggests safer alternatives.
• Central configuration and audit trail in the Conbool tenant portal.

Who it is built for

Conbool SecureMail is made for mid-market and enterprise teams that must protect confidential email, including legal, tax, healthcare, financial services, public sector and industrial customers. Organisations running self-managed PKI or third-party gateways replace heavy key distribution with a managed cloud workflow.

Why teams pick it

• Ready for confidential exchange with clients, patients, regulators and suppliers from day one.
• No more certificate helpdesk. Onboarding, renewal and revocation run automatically.
• Native Outlook integration on Windows, macOS and the Web, no separate client install.
• Predictable per-mailbox pricing with no hidden key or HSM fees.

Activate the add-in from your Microsoft 365 admin centre, sign in once to your Conbool tenant and write your next mail encrypted.

Pricing & licensing

Use of this add-in requires an active Conbool SecureMail subscription, billed per mailbox monthly or annually. A free 30-day trial is available without a credit card. The add-in interoperates with the Conbool gateway services that perform the actual encryption (S/MIME, PGP, PDF, Message Portal). Pricing details and trial signup: https://conbool.com/products/securemail.

Event-based activation

This add-in uses Office event-based activation (LaunchEvents). It is automatically triggered in three situations:

1. when you start composing a new message,
2. when you change the recipients, and
3. when you press Send.

On send, SecureMail checks the recipient certificates against your routing rules and prompts you before delivery if encryption cannot be applied (SendMode: PromptUser). The add-in does not transmit message content to external systems beyond the cryptographic services configured in your tenant (S/MIME, PGP, PDF encryption, Conbool Message Portal).