secure

Secure & Automated Email Communication

Challenge-Digital Communication between Compliance and Customer Value

Business Challenges

Regardless of industry or company size: As soon as personal data is transmitted by email – such as customer data, health data, personnel files or supplier data – encrypted transmission according to GDPR is mandatory.

In addition to GDPR, many companies in research and development want to protect their know-how from access by third parties.

Furthermore, KRITIS requirements, the NIS2 directive and industry-specific compliance requirements (e.g., in insurance, healthcare or automotive) place additional demands on confidentiality, traceability and IT security.

Encryption is essential for both B2B and B2C communication. However, many mail servers or M365 environments do not offer end-to-end encryption or intelligent automation. This is exactly where mail:u Secure comes in.

Many conventional mail servers or standard mail solutions do not offer comprehensive control over email communication security.

Whether a message is actually transmitted encrypted depends in normal cases on the recipient server and the configuration in between – the sender usually has no influence on this.

With the widely used transport encryption (e.g., via TLS), the email is only protected until the next node in the transmission path. What happens after that is beyond the control and influence of the sender.

End-to-end encryption – i.e., one where the content cannot be viewed by anyone on the transmission path – requires additional measures. mail:u Secure provides this security: automated, rule-based and traceable.

mail:u Secure - The Solution

mail:u Secure acts as an upstream crypto gateway and takes over the protection of your email communication – via SMTP or Microsoft Graph API:

• S/MIME or PGP encryption as soon as a valid key is available
• Portal-based storage or sending as PDF container when recipients have no keys
• FileLink for large or sensitive attachments
• SECFLOW preview directly in Outlook – prevent misdelivery
• Audit log and archive export for GDPR, IDW PS 330, ISO 27001 and NIS2

Provision as SaaS in ISO-27001 data center or containerized in your private cloud or on-premises.

Contact us today

Modules Overview

Workflow Engine

Automated workflows for email processes with intelligent rule processing.

Learn More →

Portal

User-friendly web portal for secure access to sent information.

Learn More →

FileLink

Secure transfer and management of large files.

Learn More →

SECFLOW

Users in your company get the opportunity to intervene and receive information about the secure transmission of email and attachments.

Learn More →

PDF Encryption

As an alternative to the portal application, emails and any attachments can also be transmitted in a PDF container.

Learn More →

PKI Automation

Automated Public Key Infrastructure for managing your S/MIME and PGP keys.

Learn More →

Operations & Integration

Flexible operating models and seamless integration into existing IT infrastructures.

Learn More →

Compliance & Audit

Comprehensive compliance solutions and audit tools for regulatory requirements.

Learn More →

Intelligent Email Processing

Workflow Engine – Heart of the Gateway

The rule-based email workflow engine usually replaces static rule sets that are based on sender and recipient with flexible policies. Each message is automatically processed according to recipient, sender, content or attachment classification – In addition to sender, recipient, content and attachments, the individual control commands of the user are also evaluated and integrated into the processing. (Outlook Add-in and Client Control). In addition to direct encryption and processing of emails, the Workflow Engine can become the central hub around email. Any third-party systems can be integrated into the routing. For example spam protection, archiving, sandbox, file processing, ERP processes etc.

Example rule (simplified):

IF Recipient-Domain = [AT]insurancepartner.de AND Attachment.Size > 25 MB THEN Attachment → FileLink (Expiry: 14 days) AND Mail → S/MIME encrypted & signed ELSE IF Key missing → Mail → PDF container with portal return channel
Workflow Engine - Heart of the Gateway - Intelligente E-Mail-Verarbeitung
SECFLOW Outlook Pre-Send Check interface - Outlook-Integration

Outlook Integration

SECFLOW – Outlook Pre-Send Check

The Outlook add-in shows a summarized result of the following sending before sending. Through a simple overview, the user learns whether the email can be sent according to the specifications:

• Key found, secure encryption
• Portal or PDF container when key material is missing
• Policy violation, e.g., private address or missing classification

This allows the user to very easily evaluate before sending whether the sensitive information can/may be sent in this way. In addition to viewing the processing, the user can specifically force or adjust encryption. These functions represent an optional way to involve the user in the decision with minimal effort, even without knowledge of encryption or leaving the familiar tools.

Industry-Specific Solutions

Industry Benefits

• Digital damage file: Images & videos via FileLink, automatic deletion after retrieval
• Broker communication: Central signature verification, audit-proof archive copy
• Communication with end customers (insurance/finance): Secure simple portal-based communication
• NIS2 audit: TLS 1.3, AES-256-GCM, audit log for SIEM integration
• Supply chain: PDF container or portal access for partners without key infrastructure
Industry Benefits - Branchen-Mehrwerte - Branchenspezifische Lösungen
Your Competitive Advantages - Ihre Wettbewerbs-vorteile - Unsere Alleinstellungsmerkmale

Our Unique Features

Your Competitive Advantages

• Rule-based workflow engine – automated central encryption
• SECFLOW Outlook add-in – visualization before sending
• FileLink – secure, GDPR-compliant alternative to WeTransfer
• PDF encryption – possible even without key material
• Flexible operating models – SaaS, private cloud or on-premises
• Fully automated PKI – no admin effort anymore
• Made in Germany – development, hosting & support
• Portal: with two FA for sending to recipients without key material

Operating Models – Flexible and Future-Proof

SaaS

Multi-tenant operation in our ISO-27001-certified data centers from Germany

Private Cloud

Helm charts for OpenShift, AKS, Rancher

On-Prem Appliance

Air-gapped for reinsurers & authorities

mail:u Secure - Industry Use Cases - Branchen-Use-Cases

Practical Use Cases

Industry Use Cases

• Digital damage file: Upload via portal → FileLink → handover to DMS
• KRITIS / NIS2: Automatic certificate renewal, log streaming via OpenTelemetry, incident hooks for SIEM
Decorative gradient background

Ready for Secure Email Communication?

Contact us for individual consultation and learn how mail:u Secure can protect your company.

mail:u Secure whitepaper mockup

Our Whitepaper to mail:u secure

Our white paper offers you a comprehensive insight into the latest technologies and best practices for secure communication. Discover how our customized solution mail:u secure efficiently secures your business processes.

By downloading the white paper, you agree to subscribe to our newsletter. This will be sent regularly to the e-mail address you have provided. You can revoke your consent at any time with effect for the future at UPONU GmbH or by using the unsubscribe link contained in the newsletter.

UPONU Logo

UPONU GmbH
Spandauer Str. 32
57072 Siegen
Germany

We develop and operate cloud solutions to meet your IT requirements of the future.

© 2025 UPONU GmbH