European alternative
Secure mobile email.
From Hamburg.
ISEC7 MAIL is a full-featured mail and PIM client for Microsoft Exchange and Microsoft 365. Developed in Germany, operable on every common UEM platform and Red Network capable. For everyone who is currently rethinking their dependencies.
Key facts
Manufacturer
ISEC7 Group, HamburgGerman contractual partner, German support, in the market since 2003
Approval
Red Network capableTOP SECRET networks via the Hypori integration
UEM containers
Five platforms nativelyBlackBerry Dynamics, Ivanti AppConnect, Omnissa Workspace ONE, Citrix Ready, Microsoft Intune
Rollout
Around 30 minutesAuto-Discover and auto-configuration, AppConfig via the UEM
The situation
Why European alternatives are in demand right now
Because procurement offices now check which law the provider is subject to, and no longer just where the data is stored.
The reason is how the US CLOUD Act is built: it applies to the provider, not to the storage location. Directories of European software alternatives have been seeing growing interest for months, and the inquiries come from organizations that did not ask this question for years.
With mobile email, this becomes concrete particularly quickly. The inbox of senior management, delegate access in a minister's office, the functional mailbox of an emergency control center: these are the systems that are put to the test first.
ISEC7 MAIL starts exactly there. A German manufacturer, a German contractual partner, German support. And an app that connects directly to your backend.
Independent sources
What the BSI finds on email and public authorities
Three findings from the official situation report, one of which runs counter to a convenient narrative. We include it anyway.
Public administration was the main target of cyber espionage
By far the largest number of the APT groups relevant to Germany targeted this sector, followed by foreign affairs, defense, the judiciary, and public safety and order. Exactly the organizations where delegate access and functional mailboxes are part of everyday work.
BSI, The State of IT Security in Germany 2025. bsi.bund.de/lageberichtThe mail channel is getting quieter, the web channel louder
In the German federal administration networks, an average of 684,000 active email addresses were registered during the reporting period. Daily malware attacks by email fell to 753 per day, compared with 772 in the previous period. At the same time, blocked access to malicious websites rose by 23 percent. Email remains critical, but it is no longer the only route.
BSI, The State of IT Security in Germany 2025. bsi.bund.de/lagebericht461 data leaks that became known, containing data of institutions and consumers
Affected data included dates of birth, postal and email addresses, health and financial data, and passwords. The BSI records a new all-time high in the number of leak victims from Germany. Anyone moving such data on mobile devices needs classification and recipient checks, not just transport encryption.
BSI, The State of IT Security in Germany 2025. bsi.bund.de/lageberichtFor small and mid-sized companies, the same report names a second figure: around 80 percent of the reported attacks were directed against small and medium-sized enterprises, which often lack the resources and know-how to protect themselves.
Why ISEC7 MAIL
Four reasons that count in the selection
Sovereignty, origin, independence and verifiability. Each point can be backed up.
Your data stays in your infrastructure
ISEC7 MAIL connects directly to your Exchange server or your Microsoft 365 tenant. There is no additional provider cloud between app and backend. If you want to raise the level of sovereignty further, combine ISEC7 MAIL with the Sovereign Cloud for BlackBerry UEM and run device management in Germany as well.
German software, German contact
Developed by the ISEC7 Group, headquartered at Schellerdamm 16 in Hamburg, in the market since 2003. Contractual partner, development and 24x7 support are German. Feature requests reach a team you can actually contact.
One client for every UEM platform
Native container integration for BlackBerry Dynamics, Ivanti AppConnect, Omnissa Workspace ONE, Citrix Ready and Microsoft Intune. Can also be operated without UEM. If you change platforms, you keep the mail client and save yourself the change management for it.
Approvals that are in place
Approved for Red Network access in highly regulated TOP SECRET networks via the Hypori integration. Ongoing Veracode verification of software development. GDPR compliant even on private devices. Optionally extendable with ISEC7 CLASSIFY for classification according to corporate, German federal and NATO schemes.
Supported UEM platforms and backends
- BlackBerry Dynamics
- Ivanti AppConnect
- Omnissa Workspace ONE
- Citrix Ready
- Microsoft Intune
- Microsoft 365
- Exchange Server 2016+
- AppConfig
Security
What comes out of the box
- S/MIME-secured communication across multiple mailboxes
- Modern Authentication and certificate-based authentication (CBA)
- AirID, YubiKey, CAC cards, Hypergate
- Support for external card readers
- Ongoing Veracode verification of software development
- GDPR-compliant contact handling for Apple CarKit
- Native UEM container integration
- Red Network access for TOP SECRET networks via Hypori
Productivity
What senior management needs every day
- Delegate access to email, calendar and contacts, without password sharing
- Functional mailboxes and shared mailboxes
- Public folders and group calendars
- Multiple email domains in one app
- Global address book sync and offline functions
- Smart Scheduler for appointments from delegated accounts
- Salesforce integration with caller ID resolution in the car
- Digital business card and LinkedIn profile at the push of a button
Frequent question
Why we recommend BlackBerry as the foundation
Because BlackBerry UEM is so far the only UEM solution that holds a BSI certification, and it therefore brings the evidence that sovereignty projects need in the end.
ISEC7 MAIL runs on all common UEM platforms. When approval capability is the priority, these points speak for BlackBerry.
| Criterion | Status |
|---|---|
| BSI certification | So far the only BSI-certified UEM solution, certificate BSI-DSZ-CC-1235-2025 of September 8, 2025 |
| Cryptographic standards | Common Criteria EAL 4+ and FIPS 140-2, FIPS 140-3 in progress |
| Network architecture | Single-port access with integrated VPN, including when connecting local resources |
| Headquarters | Canada, and therefore outside the scope of the US CLOUD Act |
| Operating models | One platform for cloud, on-premises, hybrid and Sovereign Cloud |
| Experience | Around 25 years in mobile device management, in use in government environments worldwide |
| Future readiness | Roadmap for post-quantum cryptography |
Two points of context. First, every provider is subject to some legal system; what matters is who operates the system and which law that operator is subject to. Second, the BSI certification belongs to the platform and not to us: the ISEC7 Group is the operator, not the manufacturer of the certified component. In an audit, the two are assessed separately.
What comes after
After a 30-minute rollout, operations begin
The fast introduction is the smaller part. What matters more is that two years from now the app still fits your UEM version, your Exchange version and your certificates.
Compatibility across version changes
Major iOS and Android versions are released every year, and UEM platforms and Exchange follow their own cycles. Keeping them aligned is ongoing work, not a one-off project.
Support in German, 24x7
Contractual partner and support are based in Hamburg. Escalation runs through named people, without switching time zones.
Proving the status continuously
In combination with ISEC7 SPHERE, distribution, version status and certificate lifetimes can be documented continuously. This is the basis for the audit report.
The other four
ISEC7 MAIL is not the only European alternative in the portfolio
Four further building blocks each cover a product category of their own, each with the same origin and the same operating model. All of them can be introduced individually.
ISEC7 CLASSIFY
In-house development of the ISEC7 Group. Classification directly while writing on mobile devices, several schemes in parallel (corporate, German federal government, NATO), automatic recipient check, DoD 5200 compliant.
Sovereign Cloud for BlackBerry UEM
Platform from BlackBerry, a Canadian company. Operated exclusively in German data centers by the ISEC7 Group, German jurisdiction, without manufacturer or third-party access.
ISEC7 SPHERE
In-house development of the ISEC7 Group, in use since 2005. Compliance monitoring across up to 250,000 endpoints and 1,000 parameters, INDIGO Compliance Monitoring for VS-NfD environments.
ISEC7 MANAGED SECURE VOICE
Managed service based on SecuVOICE by Secusmart. Secured telephony and short messages on the work device, according to the SNS standard, with a BSI approval recommendation for VS-NfD. Your employees dial as usual; operations and user support are handled by us.
Questions and answers
What procurement and IT security usually want to know
Is ISEC7 MAIL a European alternative to US mail apps?
Yes. ISEC7 MAIL is developed by the ISEC7 Group, a company headquartered in Hamburg. Development, support and contractual partner are German. The app connects directly to your Exchange or Microsoft 365 backend, with no provider cloud in between.
Does ISEC7 MAIL work independently of the UEM in use?
Yes. Native integration with BlackBerry Dynamics, Ivanti AppConnect, Omnissa Workspace ONE, Citrix Ready and Microsoft Intune. Operation without UEM is also possible.
What are the system requirements?
iOS from version 10.0, Android from version 5.0, and on the server side Microsoft 365 or Exchange Server from version 2016.
How long does the introduction take?
The enterprise rollout is possible in around 30 minutes via Auto-Discover and auto-configuration. Configuration is done via AppConfig through the UEM.
How far does ISEC7 MAIL go on the CLOUD Act issue?
Fully at the client level: the app comes from a German manufacturer and does not route any data through a provider cloud. For the backend, this only applies if a European operator is responsible there as well. The complete path across client, device management, classification and voice is described by the ISEC7 SOVEREIGN SUITE.
Next step
Request a demo
We will show you ISEC7 MAIL using your use case.
Delegate rules, functional mailbox, S/MIME or classification, depending on what is on your agenda. Around 30 minutes, with no preparation needed on your side.
Sources
What the information on this page is based on
- BSI, The State of IT Security in Germany 2025official
Reporting period July 1, 2024 to June 30, 2025. Source for the target group situation, the email figures of the federal administration and data leaks. bsi.bund.de/lagebericht - BSI, certification according to Common Criteriaofficial
Certificate BSI-DSZ-CC-1235-2025 for BlackBerry UEM, issued on September 8, 2025. BSI certificate list - US CLOUD Act, Clarifying Lawful Overseas Use of Data Act, 2018legal text
Legal basis for the disclosure obligation of US providers, regardless of the storage location. congress.gov - ISEC7 product documentationown information
Feature set, system requirements and approvals of ISEC7 MAIL. Marked as own information and not verified by an independent body. Product page ISEC7 MAIL
Third-party figures are always given with year and source. Information on ISEC7 products is identified as own information.
Contact
Prefer to talk directly?
ISEC7 GmbH, Schellerdamm 16, 21079 Hamburg
As of: August 2026. This page is reviewed and updated every six months.