Teams quoted six figures for GCC High.
A Microsoft 365 GCC High tenant rebuild can take three to six months. MAIL stands up a dedicated environment without rebuilding your tenant.
Product 01 · IRONKEEP MAIL
Encrypted email for teams that handle CUI.
MAIL is the email layer of the IRONKEEP suite: mail, calendar, and contacts inside one authorization boundary, screened before delivery and logged for assessor review.
Private beta · Q2 2026
Start with secure email.
Receive product updates and the CMMC Level 2 readiness checklist.
What's inside
Email, calendar, and contacts for regulated teams.
Secure work email
Send and receive protected email for CUI, FCI, and internal team communication.
Threat checks before delivery
Messages, links, and attachments are screened before they reach an inbox.
Bring your domain
Move over with guided domain setup, mailbox import, and familiar email workflows.
More MAIL features
Calendar and contacts
Schedule meetings, manage contacts, and keep collaboration inside the same boundary.
Compliance labels
CUI, FCI, and internal markings stay visible to users and assessors.
Team mailbox controls
Route, filter, and manage shared mail without sending work outside IRONKEEP.
Six-layer inbound security
Virus scanning, email authentication, URL rewriting, attachment sandboxing, domain reputation scoring, and spoofing warnings screen every message before delivery.
DLP and outbound rules
Block, quarantine, or flag sensitive content by domain, attachment type, keyword, or regex pattern. Automated threat feeds keep blocklists current.
Rules and automation
Filter by sender, recipient, subject, attachment, or size. Move, flag, forward, or auto-reply. Vacation responder with per-sender deduplication.
Web and mobile
Web app with split-pane layout, three density modes, and keyboard shortcuts. Mobile apps are coming soon.
Implementation path
From your current inbox to one boundary.
- 01
Connect your domain.
Guided SPF, DKIM, and DMARC setup brings your existing addresses over.
- 02
Import mailboxes.
Bring mail, calendars, and contacts in via EML, MBOX, or ZIP exports.
- 03
Label and prove.
Apply CUI, FCI, and internal markings, then pull audit logs and exports when your assessor asks.
Who it's for
Built for contractors choosing an email boundary.
Teams consolidating overlay tools.
Encryption overlays preserve your existing email but leave two compliance boundaries to document. MAIL keeps email, calendar, and contacts inside one authorization boundary.
Teams unsure their add-ons will pass assessment.
Commercial platforms with compliance add-ons can leave gaps a C3PAO will flag. MAIL keeps the email workflow and the evidence in the same place.
See also
Comparisons and guides.
vs Microsoft GCC High What a GCC High migration costs, and how MAIL provides a dedicated boundary without the tenant rebuild. vs PreVeil Overlay encryption keeps two compliance boundaries in scope. MAIL keeps email in one. vs Google Workspace The add-ons and configuration CUI requires on Workspace, and what MAIL includes by default. vs Proton Mail Encryption alone does not cover CMMC. US data residency, audit logging, and evidence support compared. CMMC email pricing in 2026 Real costs for GCC High, PreVeil, and Google Workspace, compared in one guide. Email controls your C3PAO will ask about The CMMC Level 2 email controls assessors check, and how to prepare evidence.
FAQ
Common MAIL questions.
Does MAIL replace my CMMC assessment?
No. Your organization still owns its CMMC assessment. MAIL is designed to provide compliant email tooling, control mapping, and evidence to support that assessment.
Where is my data stored?
United States only, on FedRAMP Moderate authorized cloud infrastructure, administered by US citizens. Tenant-scoped encryption keys and tenant isolation keep other tenants and IRONKEEP staff from reading tenant content.
Can IRONKEEP staff read my email?
No. Zero operator access to tenant content is enforced by explicit deny rules on decrypt operations. IRONKEEP staff cannot read decrypted tenant content, run tenant decrypt operations, create product users, or generate tenant search tokens.
How fast is migration?
Hours, not months. MAIL imports standard mailbox exports and supports guided migration for domains, mailboxes, calendars, and contacts.
Does MAIL include calendar and contacts?
Yes. Shared calendars, meeting invitations with RSVP, free/busy lookup, and contacts with encrypted search ship with MAIL.
Private beta
Get MAIL early.
Join the beta list and receive the CMMC Level 2 readiness checklist.
No sales call required.