ISEC7 software: ISEC7 SPHERE, ISEC7 MAIL and ISEC7 CLASSIFY

The three products work together. ISEC7 CLASSIFY does its marking on smartphones inside ISEC7 MAIL. Schemes, auditing and the archive of classified communication live in ISEC7 SPHERE, which also monitors both products alongside the rest of your systems.

Frequently asked questions about ISEC7 software

How do I monitor UEM and mail systems from different vendors centrally without replacing them?

You need a layer above the existing systems that reads their data through APIs and agents while BlackBerry UEM, Ivanti, Omnissa Workspace ONE UEM or Microsoft Intune stay in place. At ISEC7 that layer is ISEC7 SPHERE, one console for UEM, mail and infrastructure systems. Each connection needs a service account in that system and a firewall rule.

Which email app brings Exchange mailboxes with S/MIME and delegation to iPhone and Android?

The app has to connect to Exchange Server and Microsoft 365, handle S/MIME on the device and add the extra mailboxes that Exchange permissions grant. That is what ISEC7 MAIL does: mail, calendar, contacts, tasks and notes, hybrid deployments included, with delegate, functional and shared mailboxes. It runs unmanaged from the store or inside BlackBerry Dynamics, Ivanti AppConnect, Omnissa Workspace ONE, Microsoft Intune and Citrix containers.

How do I enforce classification markings on email and Office documents?

Enforcing means the marking is applied while composing and a rule set stops email from going out unmarked and can block untrusted recipients. ISEC7 CLASSIFY does this in Outlook, Word, Excel, PowerPoint and SharePoint Pages, and on smartphones as an add-on to ISEC7 MAIL. Standard schemes exist for BUND, NATO and Traffic Light, among others, and custom schemes are built in the Schema Editor.

How do I check that work phones have the required apps and patch levels?

The data sits in the UEM; if you run several UEMs or want to report per user rather than per device, you need a tool that brings it together. ISEC7 SPHERE monitors app versions, OS and patch level and VPN connectivity, and since version 20.9.0 also mandatory, optional and prohibited apps per user across all of their devices. For servers it adds patch level, CVEs and certificates.

How do I prove in an audit where classified email went?

You need a record for each message with sender, recipient, timestamp and classification, in one place and across all clients. ISEC7 CLASSIFY applies the marking in Outlook, Office and ISEC7 MAIL, while auditing and the archive of classified communication live in ISEC7 SPHERE.

How do ISEC7 SPHERE, ISEC7 MAIL and ISEC7 CLASSIFY work together?

Through shared data and shared configuration. On smartphones, ISEC7 CLASSIFY does its marking inside ISEC7 MAIL and is licensed separately as an add-on for that. Configuration and the Schema Editor live in ISEC7 SPHERE, which also monitors both products alongside the rest of your systems.

Do the ISEC7 products run on premises or in the cloud?

It differs by product: ISEC7 SPHERE runs on premises on 64-bit Windows Server 2016 to 2025, or as a cloud instance. ISEC7 MAIL is an app on the device and connects directly to your Exchange or Microsoft 365, with no ISEC7 server or relay in between. In the SDK variants the connection runs through your UEM vendor's infrastructure. The desktop component of ISEC7 CLASSIFY is a Microsoft Office add-in hosted as Azure Platform as a Service.

Which certifications apply to ISEC7 and its products?

ISEC7 is certified to DIN EN ISO 27001:2022, DIN EN ISO 9001:2015 and DIN EN ISO 14001:2015, covering ISEC7 Group AG, ISEC7 GmbH, ISEC7 Software GmbH and ISEC7 Inc., valid until 2 September 2027. We name approvals and certifications for individual products only once their number and validity date have been cleared for publication.

Last reviewed: 28 September 2026 · Product information based on ISEC7 product pages and documentation, August 2026