Your Microsoft 365 Data. Backed Up. Recoverable. Protected.

Email archiving is the long-term storage of every email your organisation sends and receives, in a tamper-proof, searchable archive. Unlike a backup (which is a copy of your mailbox), an archive is a separate, WORM (write-once-read-many) storage system — once an email is archived, it cannot be modified or deleted, even by an administrator. This is essential for compliance and legal purposes. Many regulations require email to be retained for specific periods (GDPR, HIPAA, PCI DSS, FINRA). If your organisation is involved in litigation, you may need to produce email evidence — eDiscovery allows you to search the archive for relevant emails and export them for legal proceedings. Legal hold ensures that emails related to an active case are preserved even if the retention period would normally expire.

Data loss prevention for email detects and blocks the outgoing transmission of sensitive data through email. DLP policies scan outbound email content for patterns that indicate sensitive data — credit card numbers (using Luhn algorithm validation), National Insurance numbers, email addresses, phone numbers, and custom keywords or regular expressions. If a policy is triggered, the email can be blocked, quarantined for approval, or delivered with a warning. DLP prevents accidental data leaks (an employee emailing a spreadsheet of customer data to a personal account) and malicious data exfiltration (an insider sending intellectual property to a competitor). It is a critical control for GDPR, HIPAA, and PCI DSS compliance.

Business email compromise is a social engineering attack where an attacker impersonates a trusted figure — a CEO, a supplier, a colleague — to manipulate the recipient into transferring money, sharing sensitive data, or changing payment details. BEC emails do not contain malware or malicious links — they are text-based social engineering, which is why traditional email filters miss them. Our BEC protection uses behavioural analysis to detect the patterns of BEC: sender impersonation (the email appears to come from a CEO but the domain is slightly different), unusual request patterns (a request for a wire transfer that does not match normal communication patterns), reply chain hijacking (an attacker inserts themselves into an existing email conversation), and language analysis (urgency, secrecy, and authority cues that indicate social engineering). BEC is the most financially damaging email threat, costing organisations billions annually.

The cloud email security gateway is deployed by changing your domain's MX (mail exchange) records to point to the gateway. When someone sends you an email, their mail server looks up your MX records and delivers the email to our gateway. The gateway inspects the email, filters out threats, and forwards the clean email to your mail server. This takes effect within minutes of the MX record change (though DNS propagation can take up to 24 hours globally). No on-premises hardware is required — the gateway is a cloud service. For organisations with an existing on-premises email infrastructure, the gateway can also be deployed as a virtual appliance or configured as a mail relay. The entire deployment typically takes under 1 hour.

Yes. Kaseya Advanced Email Security supports several compliance frameworks. GDPR: email archiving with defined retention periods, DLP for personal data, and breach notification support. HIPAA: email encryption for PHI transmission, DLP for protected health information, and archiving for audit evidence. PCI DSS: DLP for credit card data detection, email archiving for transaction evidence, and access controls for cardholder data. SOC 2: email security monitoring, access logging, and incident response evidence. The Enterprise tier includes compliance-specific reporting tailored to your framework, with metrics mapped to control objectives. We also provide the email retention and security monitoring evidence that many frameworks require.