DataMotion Secure Email Exchange vs Secure Message

DataMotion Secure Email Exchange enables organizations to send and receive encrypted email and attachments to protect sensitive information in transit and at rest. Recipients can access secure attachments from their inbox through Clickless SafeTLS without a password, portal login, or decryption step. The service integrates with Microsoft Outlook, Microsoft Teams, Google Workspace, and Power Automate; RESTful APIs can connect its secure email functions to EHR, CRM, and ERP systems, applications, and portals. It tracks messages and attachments sent, received, and opened, with audit trails and delivery records. DataMotion says it uses AES encryption and FIPS 140-2 validated cryptography. Its product page lists support for regulations including HIPAA, GLBA, PCI-DSS, HITECH, GDPR, PIPEDA, FINRA, and CJIS, as well as certifications and credentials including HITRUST CSF, DirectTrust/EHNAC, ONC-Health IT Modular Certification, and SOC 2 for cloud services. The platform runs on Microsoft Azure public cloud infrastructure described by DataMotion as FedRAMP-certified. A free plan and free trial access to Secure Message Center are listed; enterprise pricing is on request, and no trial duration is stated.

Secure Message is a self-hosted inbound email gateway that filters mail before it reaches an existing mail server. Its Community features include Postfix content filtering, spam scoring, DNSBL, SPF, DKIM and DMARC checks, quarantine, mail logs and administrator MFA. Professional adds a recipient web portal: recipients open protected messages with a one-time code, without an account or app. Its rules can encrypt, redirect or block sensitive outbound messages, and recipient checks can use SMTP callout, LDAP or directory lookups. Stored messages, attachments and quarantine use Fernet encryption with AES-128-CBC and HMAC-SHA256; the key remains on the customer host. Access controls include TOTP administrator MFA, role-based access and audit logging, with logs exportable to CSV. Enterprise adds AI Autopilot tuning, eDiscovery and archive search, DLP and disclaimers; Autopilot and the classifier are off by default. The gateway can sit in front of Microsoft 365 or an existing mail server without mailbox migration. The single-node appliance runs on Debian 13, with 2 vCPU and 4 GB RAM recommended as a starting point.