IRONKEEP vs PreVeil

PreVeil takes a different approach to compliance: an encrypted layer on top of your existing email provider. This keeps your current setup in place, but it means managing two systems. Here is how that compares to a unified platform.

PreVeil IRONKEEP
Architecture Overlay on existing email Complete platform
Calendar and contacts Not included
External recipients Need PreVeil account Standard email
Underlying system compliant No Yes
Systems to manage Two One

It is an overlay, not a platform

PreVeil is not a replacement for your email provider. It sits on top of Gmail, Outlook, or Exchange as an encrypted enclave. Your organization still needs a separate email system underneath. That means two systems to manage, two sets of credentials, and two places where email lives.

CUI goes through PreVeil. Everything else goes through your regular email. Your team has to decide, for every message, which system to use. That decision is where compliance breaks down.

External recipients need PreVeil too

When you send a PreVeil-encrypted email to someone outside your organization, they receive an invitation to create a free PreVeil account. Recipients can use PreVeil Express in a browser without installing software, but they still need to create an account and authenticate through PreVeil's system. For organizations that communicate with dozens of subcontractors, vendors, and government contacts, this creates friction in every exchange.

PreVeil offers an Email Gateway for external parties, but it requires a separate license and hosting agreement. The gateway handles address translation and routing, adding another moving part to an already fragmented system.

No calendar, no contacts

PreVeil provides encrypted email and encrypted file sharing. It does not include a calendar. It does not include contacts management. For those, you still depend on your underlying email platform, which, if it is standard Gmail or Outlook, is not compliant for CUI. You end up with a compliant inbox but a non-compliant calendar.

The underlying email is still non-compliant

PreVeil has achieved DoD FedRAMP Moderate equivalency for its encrypted enclave. But PreVeil's enclave model assumes you can cleanly separate CUI from non-CUI communications. In practice, this is difficult. Metadata, subject lines, and reply chains often cross the boundary.

The equivalency applies to PreVeil's encrypted layer, not to the Gmail or commercial Outlook underneath. Your base email system still does not meet FedRAMP Moderate requirements on its own. You are relying on a clean separation between two systems that share the same inbox.

Our approach

How IRONKEEP is different

IRONKEEP is not an overlay. It is a complete platform. Email, calendar, contacts, and file storage in a single compliant environment. No second system. No split inbox. No asking your subcontractors to install software. Migrate your email, files, and contacts and get compliant in hours.

  • Complete email platform with calendar and contacts
  • Standard email protocols: recipients do not need special software
  • FedRAMP Moderate (or higher) authorized infrastructure: no non-compliant system underneath
  • Designed for CMMC Level 2, NIST 800-171, DFARS, and ITAR

Simplify your compliance with a single platform.