Endpoint Productivity
Secure mail, messaging, calls and files for mobile work
At ISEC7, endpoint productivity means four building blocks for secure mobile collaboration: email, messaging, encrypted calls and file sharing. For email, ISEC7 uses its own client, ISEC7 MAIL, for Exchange and Microsoft 365; for tap-proof calls, the managed service ISEC7 MANAGED SECURE VOICE, based on the SecuVOICE app from Secusmart. Messaging and file sharing come from partner products. The building blocks are aimed at government agencies, law enforcement, healthcare and regulated enterprises; ISEC7 advises on the choice, rolls the apps out through your UEM and supports them in operation.
ISEC7 supports you in defining your digital workplace strategy and selecting the right apps and solutions to empower your business processes. ISEC7 draws on experience from many projects or researches the market for the right solution.
Numerous partnerships complete our solution portfolio in the areas of Messaging and Collaboration, EFSS - Enterprise File Sync & Share, and crisis communication using voice, chat, mail and data.
SECURE MAIL · ISEC7 MAIL
ISEC7 MAIL is ISEC7's mobile client for mail, calendar, contacts, tasks and notes from Microsoft Exchange and Microsoft 365, including hybrid deployments. It puts delegate, functional and shared mailboxes and public folders on the work phone, signs and encrypts with S/MIME, and runs unmanaged from the store or inside BlackBerry Dynamics, Ivanti AppConnect, Omnissa Workspace ONE, Microsoft Intune and Citrix containers.
Portfolio:
- S/MIME signing and encryption, including certificates on a YubiKey or smart card
- Collaboration in public folders
- Delegate access without password sharing
- Classification on the road, optionally with ISEC7 CLASSIFY
SECURE MESSENGER
Following the success of private messengers, enterprises start to implement business messengers as well. Performance, scalability, privacy and compliance should always be considered, when selecting a messenger.
ISEC7 provides and manages messenger environments.
ISEC7 provides customers with messenger solutions for different use case scenarios
- Secure messenger for Public Sector & Law Enforcement
- Secure Messenger for Healthcare
- Secure Messenger for Enterprises
SECURE VOICE · ISEC7 MANAGED SECURE VOICE
ISEC7 MANAGED SECURE VOICE is ISEC7's managed service for tap-proof mobile calls based on the SecuVOICE app from Secusmart, with end-to-end encryption under the BSI's SNS standard for secure cross-network voice communication.
The SecuVOICE app holds a BSI operating permission (Einsatzerlaubnis) up to VS-NfD, the German classification for information for official use only, reference BSI-VSA-11057, valid until 31 August 2027. The permission covers the app; ISEC7 operates the service on top of it and does not hold the permission itself. Because the service uses German federal key material, ISEC7 offers it only to companies and public authorities in Germany.
Features
- End-to-end encrypted calls under the SNS standard
- Secure communication within your own tenant
- Rollout through your UEM, from 25 users
SECURE FILE
Store, share and manage your files securely, with end-to-end encryption, on all your devices at any time.
Sharing files, whether with other corporate users or with external users, is just a click away. You retain full control over how long and how often files should be available.
Effective file transfer is only possible if your files are available on all devices at any time
Scenarios
- Share, move, delete, comment and organize files on smartphone is easy
- Integrates with Microsoft Teams
Frequently asked questions about endpoint productivity
How can I protect calls on a work phone from eavesdropping?
Protection against eavesdropping relies on end-to-end encryption: the call is encrypted on one device and only decrypted again on the other party's device. ISEC7 MANAGED SECURE VOICE is ISEC7's managed service for this, based on the SecuVOICE app from Secusmart, with end-to-end encryption under the BSI's SNS standard for secure cross-network voice communication. Because the service uses German federal key material, ISEC7 offers it only to companies and public authorities in Germany. Details on the ISEC7 MANAGED SECURE VOICE page.
Where can I check which mobile apps the BSI has cleared up to VS-NfD?
The BSI, Germany's Federal Office for Information Security, lists approved products and granted operating permissions with number, version and validity in BSI publication 7164; approval (Zulassung) and operating permission (Einsatzerlaubnis) are different instruments. Of the four building blocks on this page, the SecuVOICE app from Secusmart, which ISEC7 MANAGED SECURE VOICE runs on, holds an operating permission up to VS-NfD: BSI-VSA-11057 for SecuVOICE for iOS and Android, version 6.x, valid until 31 August 2027. ISEC7 operates the service on top of it and does not hold the permission itself. No BSI instrument for VS-NfD is listed for ISEC7 MAIL, the messenger or Secure File.
How can I label classified email on a work phone?
That depends on the mail client on the device: it has to read and set classification labels and keep them on reply or forward. ISEC7 MAIL reads and sets classifications, administrators can enforce them via AppConfig, and Microsoft Purview sensitivity labels cannot be downgraded on reply or forward. Custom schemes, recipient checks before sending and auditing come with ISEC7 CLASSIFY, licensed separately.
What does the EWS retirement in Exchange Online mean for mobile mail apps?
Microsoft disables Exchange Web Services (EWS) in Exchange Online by default on 1 October 2026 and shuts it down for good on 1 April 2027; apps that connect to Exchange Online over EWS have to move to the Microsoft Graph API. ISEC7 MAIL is moving to the Graph API there, with the release planned for early Q1 2027. Until then, an AppID allow list and the EwsEnabled setting keep it connected; the steps are on the EWS retirement page.
How do I use shared and functional mailboxes on a work phone?
Functional, shared and delegate mailboxes live in Exchange or Microsoft 365 and need a mail client on the phone that adds them alongside the personal mailbox. ISEC7 MAIL puts delegate, functional and shared mailboxes and public folders on the work phone, with delegate access that needs no password sharing.
How do I sign and encrypt email with S/MIME on a smartphone?
For S/MIME, the phone needs access to your certificate and its private key, plus a mail client that signs and encrypts with it. ISEC7 MAIL signs and encrypts with S/MIME, including certificates on a YubiKey or smart card.
How do I provide a secure messenger for work communication?
For work chats there are business messengers where the organization itself manages accounts and participants. ISEC7 provides a business messenger as a partner product and manages the environment; it is used in the public sector and law enforcement, in healthcare and in enterprises. Its features include group chats of up to 2,500 participants, federation with other organizations, chatbots and push-to-talk.
How do I share files securely that are too large for an email attachment?
Large files usually hit the attachment size limit in email; file sharing services store files encrypted and make them available by link or share instead. With Secure File, ISEC7's file sharing building block, single files can be up to 60 GB. Files are stored with end-to-end encryption, access is protected with multi-factor authentication, and besides web access there is an Outlook plug-in and integration with Microsoft Teams.
Which mail environments and UEM containers does ISEC7 MAIL work with?
ISEC7 MAIL works with Exchange Server on premises, Exchange Online in Microsoft 365 and hybrid deployments, connected over Exchange Web Services (EWS) and the Microsoft Graph API. The app runs unmanaged from the store or inside BlackBerry Dynamics, Ivanti AppConnect, Omnissa Workspace ONE, Microsoft Intune and Citrix containers.
How is ISEC7 MANAGED SECURE VOICE delivered, and from how many users?
As a cloud-based service on an annual subscription, from 25 users. The SecuVOICE app is rolled out to devices through your own MDM or UEM, the German federal key material is requested from the BSI, and staff of ISEC7 GmbH in Germany run the service.
Last reviewed: 28 September 2026 · SecuVOICE operating permission according to the BSI register · ISEC7 MAIL feature information based on the product comparison, August 2026