ISEC7 MANAGED
SECURE VOICE
Encrypted mobile calls
up to VS-NfD

SecuFOX for iOS

SecuFOX is a modern browser for secure access to the internet and intranet with many practical functions such as VDI compatibility, local password storage and integration with SecuOFFICE.

SecuWork for iOS

SecuWork is a powerful and Microsoft Exchange compatible PIM app. It includes business email, calendar and contacts.

SecuOFFICE for iOS

SecuOFFICE enables you to work securely on the move. The app contains tools with which you can create text and spreadsheet documents as well as presentations and view PDF documents.

Full Managed Secure Voice Smartphone

You receive a fully configured SecuVOICE smartphone. Management and support come from the Regulated Sovereign Cloud, operated by ISEC7 GmbH staff in Germany. You do not need a UEM of your own.

• Device, management and support in one service
• For organisations with a small number of devices
• Works without your own UEM or MDM
• Term of 24 or 36 months

In the tender documents this puts a named operator on the page, instead of a list of prerequisites you have to meet yourself.

SecuVOICE app

You keep using the smartphones you already have. The SecuVOICE app runs on iOS and Samsung Knox and is deployed through your own UEM, provided its configuration meets the requirements for handling VS-NfD key material.

• For iOS and Samsung Knox
• For your own devices in your own UEM
• Rollout and configuration via MDM or UEM
• Term of 24 months with an extension option

For pricing and documentation on the operating permission, contact sales@isec7.com.

Frequently asked questions about ISEC7 MANAGED SECURE VOICE

Can you make calls up to VS-NfD on an iPhone or a Samsung phone?

Yes, with Secusmart's SecuVOICE app: for SecuVOICE for iOS and Android, version 6.x, the BSI has issued an operating permission (Einsatzerlaubnis) up to VS-NfD, reference BSI-VSA-11057, valid until 31 August 2027. ISEC7 MANAGED SECURE VOICE brings the app to iOS and Samsung Knox devices, either as an app in your UEM or on a fully configured smartphone. The permission belongs to the app; ISEC7 runs the service and does not hold the permission. The conditions of use and operation that the BSI attaches to it apply to your organization as well.

Are calls to regular phone numbers protected up to VS-NfD?

No, not along the whole route: only connections where the other end is secured as well reach VS-NfD. SecuVOICE, the app behind ISEC7 MANAGED SECURE VOICE, has three calling routes: calls between two SecuVOICE users are end-to-end encrypted, and Secure Landing connects to extensions behind secured phone systems in public authorities, up to VS-NfD. Breakout reaches any number on the public telephone network, but only the section up to the federal infrastructure is encrypted. Classified content therefore does not belong in a Breakout call.

What is SNS secure voice, and what is it for?

SNS stands for "sichere netzübergreifende Sprachkommunikation", the BSI's standard for encrypted voice communication across networks. Secusmart's SecuVOICE app works to this standard. ISEC7 MANAGED SECURE VOICE is built on SecuVOICE: ISEC7 handles onboarding, applies to the BSI for the key material and runs the service day to day.

Does NIS2 require encrypted phone calls?

Germany implements NIS2 in the BSI Act (BSIG), and section 30(2), second sentence, no. 10 lists secured voice, video and text communication among the risk management measures. They apply to particularly important and important entities, subject to the proportionality clause in section 30(1). Which channels your organization secures on that basis is for you to assess. ISEC7 MANAGED SECURE VOICE is one way to put that measure in place for mobile calls.

What does an MDM or UEM need to deploy VS-NfD calling?

Its configuration has to meet the requirements for handling VS-NfD key material. ISEC7 checks that with you in the first onboarding workshop for ISEC7 MANAGED SECURE VOICE. If your UEM does not meet them, the Full Managed Secure Voice Smartphone is the alternative: ISEC7 handles management and support, and you do not need a UEM of your own.

Where does key material for VS-NfD calls come from, and who applies for it?

The key material is issued by the German federal government and requested from the BSI. With ISEC7 MANAGED SECURE VOICE, ISEC7 handles that application during onboarding, along with secure delivery and assigning the keys to individual users. ISEC7 does not generate keys of its own and does not run its own crypto stack.

How does the rollout work?

In three steps: the first workshop covers architecture, the security concept in the VS-NfD context, prerequisites and responsibilities. We then set up GnuPG VS-Desktop, apply to the BSI for the SecuVOICE key material and assign it to your users. In the second workshop the soft token is activated and the app is rolled out and configured through your MDM or UEM, followed by functional testing and go-live. Plan the BSI application as a step of its own in your project schedule.

Can organizations outside Germany use the service?

No. Because it uses German federal key material, ISEC7 supplies the service only to German companies and public bodies.

What contract term should we expect?

The app-only variant runs for 24 months with an extension option, the fully configured smartphone for 24 or 36 months. For pricing and documentation on the operating permission, contact sales@isec7.com.

Last reviewed: 28 September 2026 · Register details from BSI publication 7164, checked on 28 September 2026 · Calling routes as described by Secusmart