Echoworx Email Encryption is a cloud-native, managed SaaS platform that functions as a boundary encryption gateway for inbound and outbound email traffic. It integrates with existing email infrastructure via SMTP routing, using a central policy engine to automatically apply encryption based on Data Loss Prevention (DLP) rules or user-initiated triggers. The system utilizes AES-256 encryption and supports standards including S/MIME, PGP, and TLS, with cryptographic keys protected by FIPS 140-3 Level 3 hardware security modules (HSMs). It centralizes the lifecycle management of keys and certificates, offering automated generation and support for Bring Your Own Key (BYOK) configurations, and is being architected to support post-quantum cryptography (PQC).
The platform offers multiple secure delivery methods, including certificate-based encryption, a secure web portal, and encrypted PDF or ZIP attachments. For recipient access, it provides a range of authentication controls such as single sign-on (SSO via SAML, OAuth, OpenID), biometrics, passkeys, and multifactor authentication. Inbound encrypted messages are decrypted at the gateway to enable internal security scanning and archiving. The system integrates with enterprise security tools like SIEM, IAM, and DLP systems, providing comprehensive audit logs, message tracking, and reporting through a web-based administration console. Additional capabilities include multi-language support and customizable branding.
