A mailbox the host can't read once your mail has arrived.
Prismara Mail hosts your organisation's email, calendars and contacts. Each message is filtered for spam and threats on arrival, then sealed with a key generated in the user's browser, so stored mail can only be opened by its owner. Users and groups come straight from Prismara Identity.
What Prismara Mail does
Mail, calendar and contacts
Email, shared calendars with free/busy and room booking, and address books in one web app or any standards-based client.
Filtering on arrival
Sender authentication, reputation lists, Bayesian spam scoring, lookalike and impersonation checks, attachment and malware checks, and removal of threats after delivery.
Secure delivery
Outbound mail prefers DANE, then MTA-STS, then STARTTLS, with TLS reporting. SPF, DKIM, DMARC and ARC are handled for every domain.
Admin centre
Transport rules, connectors, quarantine, message trace, retention and legal holds.
Central signatures
Signature administrators design company signatures in a visual editor with six ready-made layouts, stamped on every message.
Verified domains
A domain must prove ownership with a DNS record before anyone can send from it.
How it's secured
Prismara Mail follows the engineering rules shared across the suite, plus these product-specific measures.
Sealed after filtering
Each item gets its own AES-256-GCM key, sealed with ML-KEM-768 and X25519 to the mailbox key.
Two-person recovery
Mailbox key recovery needs two of three named custodians, and their first registration needs two administrators.
Post-quantum transport and tokens
TLS 1.3 with X25519MLKEM768 and hybrid ML-DSA-65 sign-in tokens from Prismara Identity.
Independently reviewed
All critical, high and medium findings from the v0.1 review are fixed, each with a regression test.
Connects to the rest of the suite
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.