In short: IRONSCALES Email Encryption encrypts outbound Microsoft 365 email, either when the sender chooses to from an Outlook add-in or subject keyword, or automatically when policies find sensitive data. Recipients read and reply in a secure web portal using a one-time passcode. It is licensed per user, with a DLP licence for policy-based encryption.
What IRONSCALES Email Encryption is
IRONSCALES Email Encryption protects sensitive outbound email from Microsoft 365. It is applied through Microsoft 365 transport rules rather than an inline gateway, so there is no MX change and turning the rule off returns mail flow to normal immediately.
There are two ways to encrypt:
- Sender-initiated: the user clicks the encrypt option in the Outlook add-in or adds a keyword such as [secure] to the subject line
- Policy-based: rules inspect recipients, message text and attachments for sensitive data and encrypt the message automatically, so protection does not depend on the sender remembering
When a policy matches, the message is encrypted rather than blocked, so business carries on.
Options we supply
| Option | What it includes | Licensed |
|---|---|---|
| IRONSCALES Email Encryption | Sender-initiated encryption from Outlook or subject keyword, secure recipient portal | Per user |
| IRONSCALES Email Encryption Data Loss Prevention (DLP) | Adds policy-based encryption that detects sensitive data and encrypts automatically | Per user |
We confirm exactly what each licence includes when we quote.
Encryption and DLP are also included in Email Protect Pro, which may be better value if you need email security as well.
The recipient experience
Recipients receive a notification with a protected link. They verify themselves with a one-time passcode sent to their email address, so they need no account, password or software, which matters when you are writing to customers or patients who would give up at a registration page. They read the message and attachments in a secure web portal and can reply or reply-all securely from there. IRONSCALES states that encrypted messages use AES-256 in transit and at rest.
How it is licensed
Email Encryption is licensed per user: each sender who needs to encrypt mail. If you use policy-based DLP to protect all outbound email, license everyone who sends from Microsoft 365. Recipients never need a licence, whether they are customers, suppliers or members of the public. We bill monthly on your Forever Systems account and adjust user counts as needed. Ask us for a quote.
Who it suits
IRONSCALES Email Encryption suits organisations that regularly send personal, financial or health information to people outside the business: accountants, solicitors, recruiters, healthcare providers, schools and the public sector. The sender-initiated option is easy to adopt because it needs no training beyond a button and a keyword, while the DLP option suits organisations that cannot rely on people remembering to encrypt.
It is also a good fit if you already use IRONSCALES for inbound protection, because outbound encryption is then managed from the same console and the same supplier. If you use Google Workspace, ask us about alternatives in the meantime.
Requirements, compliance and how we help
Email Encryption currently supports Microsoft 365 only; IRONSCALES says further platforms are planned. Policies look at recipients, message text and attachments, so you can build them around the personal, financial or health data you actually handle. Encryption is one of the technical measures UK GDPR Article 32 names for securing personal data.
We deploy the transport rule and Outlook add-in, build DLP policies around the data you handle and test the recipient journey with you. Compare other options in email encryption.
How Forever Systems supplies your software licences
Forever Systems Ltd supplies business software subscriptions to UK organisations from one account, with one monthly invoice and a UK team who know the products.
- The right edition first time: we check what you need before you buy, so you are not paying for features you will never use
- Monthly or annual terms where the vendor offers them, and help timing renewals and commitments
- Licence changes handled for you: add or remove users, upgrade editions and true-up without starting a new contract
- Deployment and support from engineers who run these products every day, not just a reseller account
- Consolidated billing and renewal reminders so nothing lapses unexpectedly
We work with businesses, schools, charities and public sector organisations of all sizes.
Need a licence quote or a second opinion on your renewal?
Tell Forever Systems what you need and we will come back to you by email with options, not a hard sell.
Contact usFrequently asked questions
Does IRONSCALES Email Encryption work with Google Workspace?
Not currently. It supports Microsoft 365, and IRONSCALES has said other platforms are planned.
Do recipients need an account to read encrypted email?
No. Recipients verify themselves with a one-time passcode sent to their email and read the message in a secure web portal.
What is the difference between Email Encryption and Email Encryption DLP?
Email Encryption lets senders choose to encrypt. The DLP version adds policies that detect sensitive data and encrypt messages automatically.
Does encryption change our mail flow?
No MX change is needed. It works through Microsoft 365 transport rules, which can be switched off to revert immediately.