CMMC-compliant email and storage. Pick your plan.
Every plan bundles IRONMAIL + IRONDRIVE. Early access subscribers get founding member pricing that goes away at launch.
Free
ironmail.usTry it out, no commitment
- 1 GB email + 500 MB file storage
- 25 emails per day
- @ironmail.us address
- Calendar & contacts
- Folder organization & file preview
- Virus scanning on email & files
- MFA
Starter
Min 5 seatsFor teams getting started with CMMC
Everything in Free, plus:
- 25 GB email + 10 GB file storage per user
- Custom domain
- SPF, DKIM, DMARC
- Audit logs (1 year)
- Admin console
- Email support
Business Recommended
Min 5 seatsFor contractors handling CUI
Everything in Starter, plus:
- 100 GB email + 50 GB file storage per user
- Email rules & DLP policies
- URL rewriting with domain threat feeds
- Sender domain reputation
- Comments and file discussions
- SCIM 2.0 & SAML/OIDC SSO
- NIST 800-171 control mapping
- Geo-fencing & IP policies
- Audit logs (7 years)
- Phone + email support
Enterprise
Min 10 seatsFor primes and large subcontractors
Everything in Business, plus:
- Custom email & storage
- S/MIME ITAR encryption
- Legal hold & e-discovery
- Custom retention policies
- Log streaming & SIEM integration
- Dedicated CSM
- 99.9% SLA
- Priority support (4-hour response)
Founding member pricing locks in at sign-up and stays when we launch. This pricing goes away once we open to the public.
Feature comparison
| Free | Starter | Business | Enterprise | |
|---|---|---|---|---|
| Zero-knowledge encryption | ✓ | ✓ | ✓ | ✓ |
| MFA | ✓ | ✓ | ✓ | ✓ |
| Admin console | — | ✓ | ✓ | ✓ |
| Audit logs | — | 1 year | 7 years | 7 years |
| SCIM 2.0 provisioning | — | — | ✓ | ✓ |
| SAML/OIDC SSO | — | — | ✓ | ✓ |
| NIST 800-171 mapping | — | — | ✓ | ✓ |
| Geo-fencing | — | — | ✓ | ✓ |
| Log streaming & SIEM | — | — | — | ✓ |
| Legal hold & e-discovery | — | — | — | ✓ |
| Custom retention policies | — | — | — | ✓ |
| SLA | — | — | — | 99.9% |
| Support | — | Phone | Priority + CSM | |
| Email storage | 1 GB | 25 GB | 100 GB | Custom |
| Custom domain | — | ✓ | ✓ | ✓ |
| Calendar & contacts | ✓ | ✓ | ✓ | ✓ |
| Email rules | — | — | ✓ | ✓ |
| DLP policies | — | — | ✓ | ✓ |
| S/MIME ITAR encryption | — | — | — | ✓ |
| Virus scanning | ✓ | ✓ | ✓ | ✓ |
| URL rewriting with domain threat feeds | — | — | ✓ | ✓ |
| Sender domain reputation | — | — | ✓ | ✓ |
| Folder organization & file preview | ✓ | ✓ | ✓ | ✓ |
| File storage | 500 MB | 10 GB | 50 GB | Custom |
| User-to-user sharing | — | ✓ | ✓ | ✓ |
| Public link sharing | — | — | ✓ | ✓ |
| Comments and file discussions | — | — | ✓ | ✓ |
| Virus scanning | ✓ | ✓ | ✓ | ✓ |
Frequently asked questions
Does every plan include both IRONMAIL and IRONDRIVE?
Yes. Every paid plan includes both products. You pay one price per user, not separate prices for email and storage. One authorization boundary, one audit trail, one compliance scope. Simpler to secure and simpler to audit.
What's the difference between IRONKEEP and Microsoft GCC High?
Microsoft does not sell GCC High to small businesses directly. You must go through an authorized reseller, which adds cost and procurement complexity. The prices quoted online ($22/user/month) are for Microsoft's commercial cloud, not GCC High. Actual GCC High pricing starts at $36/user/month for a base license and $60 to $93/user/month once you add the components required for CMMC Level 2 compliance. Migrating to GCC High requires rebuilding your entire Microsoft tenant from scratch. That migration typically costs $20K to $50K and takes 3 to 6 months. IRONKEEP deploys in days and bundles email and file storage under one authorization boundary.
Is IRONKEEP FedRAMP authorized?
IRONKEEP is pursuing FedRAMP Moderate authorization under the FedRAMP 20x program, targeting authorization by mid-2026. We are in the final phases of 3PAO assessment.
Can IRONKEEP replace Microsoft GCC High entirely?
For email and file storage, yes. IRONKEEP covers IRONMAIL (email, calendar, contacts) and IRONDRIVE (file storage, versioning, sharing). IRONKEEP is building compliant alternatives to Word, Excel, and PowerPoint as well. In the meantime, you can use Office on CMMC-compliant hardware or a virtual desktop and back up your files to IRONDRIVE for compliant storage. This approach is recognized by CMMC assessors.
What counts as a "user" for billing?
A user is any person provisioned an IRONKEEP account in your organization. Deprovisioned (suspended or deleted) users are not billed. Distribution groups and aliases do not count as users.
What happens to my data if I cancel?
You own your data. Upon cancellation, you have 30 days to export all email (MBOX/EML), calendar (iCal), contacts (vCard), and files (ZIP). After 30 days, data is deleted from IRONKEEP servers. Zero-knowledge encryption means we cannot recover it after deletion.
Can I import email from my current provider?
Yes. IRONKEEP's mailbox import pipeline supports MBOX and PST formats. Contact support for assisted migrations from GCC High, Office 365, or Google Workspace.
Get early access
Be first in line when we launch. Early access subscribers get founding member pricing and a free CMMC Level 2 readiness checklist.
We will never share your email.