FlowCrypt vs Proofpoint Email DLP and Encryption

FlowCrypt is an email encryption service that lets users send encrypted messages to OpenPGP users and password-protected messages to other recipients. Recipients can reply securely without installing a plugin. It is offered as a Chrome extension, with other platforms and a mobile application also listed. Gmail and Outlook integration are listed, along with message expiry and password-based recipient verification. The free plan is for fewer than 100 users and lists a 5 MB attachment threshold, while product details say free users can add attachments up to 25 MB. Enterprise supports domains with more than 100 users, and administrators can set domain-wide controls and enforce rules for passphrases, keys, and signing. Enterprise also supports SSO through Google, OIDC providers, and delegated identity providers, and can connect with public key servers, HSMs, and internal systems. Enterprise commercial-use pricing requires contacting FlowCrypt. Its enterprise data processing agreement is described as GDPR-compliant, and enterprise support includes an SLA for availability and response times for fixes and patches.

Proofpoint Email DLP and Encryption detects sensitive information in email and attachments to help prevent data loss and automate compliance. Administrators can apply encryption policies at global, group, and user levels through LDAP and Active Directory integrations. Detection includes hundreds of built-in identifiers and dictionaries, with custom entries supported, and scans more than 300 file types by default. Policies can trigger encryption based on destination, sender, or message attributes; encryption can also act as a TLS fallback. Recipients can access protected messages through a web portal, mobile browser, or Outlook client. A centralized dashboard provides real-time statistics and trends, incident review, and actions on non-compliant messages. Proofpoint says Email DLP integrates with Unified DLP for shared configuration, detection, and remediation across email, cloud, applications, and endpoints. Listed compliance areas include PCI, SOX, GDPR, PII, and HIPAA. The service is available on Android, iOS, web, and Windows, with cloud and hybrid deployment options. Proofpoint states that it uses HTTPS/TLS in transit and AES 256 encryption at rest, and undergoes an annual SOC 2 Type II audit. Pricing is on request; the product page offers a demo request, with no trial terms stated.