.svg){kind=icon}
FileGrant
Securely store, share, and manage your files with an advanced, easy-to-use, and highly customizable platform
File-centric business email security
Every message and every attachment stays under your control after you hit send, because the protection lives in the data and follows it beyond the recipient's mailbox.
Email is the channel you use most. It's also the one you protect least.
Email is the channel your company uses most and protects least. Contracts, quotes, customer data, and credentials leave the company by email every day, and once you hit send, they slip out of the sender's control. It rarely takes a sophisticated attack. The human element shows up in 62% of data breaches (Verizon DBIR 2026), and in email that means ordinary slips, like the wrong name in the cc line or one attachment too many.
Standard mail providers encrypt the channel in transit with TLS, but on delivery the content becomes readable again in the recipient's mailbox, where it can be copied and forwarded onto servers you don't govern. CyberGrant moves the protection onto the data. With EmailGrant, the secure messaging module of FileGrant, every message is encrypted inside the platform, tracked and revocable, and attachments inherit the same policies as your corporate files. It's the file-centric approach to data protection applied to email: protection follows the message beyond the mailbox, for the entire life cycle of the data.
POST-SEND CONTROL
Every message stays under your control, even after you send it
When an email leaves your company, it usually leaves your line of sight too. You don't know if it was opened, from which device, or whether it was forwarded. With standard email, once you hit send, the message is no longer yours.
EmailGrant, the secure messaging module of FileGrant, makes every message trackable in real time: who opened it, when, from which IP. If you wrote to the wrong recipient or want to pull a document back, you revoke access to an already-sent email, even while the recipient is reading it. Control stays with you after you send, not only before.
PROTECTED ATTACHMENTS
Your policies travel with the file, inside and outside the mailbox
An attachment sent by email is a file that leaves the perimeter with no rules attached. Once downloaded, it can be copied, forwarded, and edited, and your corporate policies stop at the mailbox door.
With EmailGrant, attachments inherit the same protections as files managed in FileGrant: classification, permissions, screenshot blocking, revocation, and an audit trail. The download happens in encrypted Lock&Go format, with quantum-safe CRYSTALS-Kyber encryption (NIST FIPS 203 standard). If an internal policy forbids sharing an unclassified document, the email doesn't go out. The control is systemic and doesn't depend on any one person's attention.
HUMAN ERROR
A safety net for the mistakes that happen anyway
The human element shows up in 62% of data breaches (Verizon DBIR 2026), and sending to the wrong recipient is among the leading errors behind a breach. No attack required: one person in the wrong line, a file attached by mistake, a document shared for too long.
EmailGrant shrinks the surface for these mistakes. You set an expiration on the message, and on the set date the email closes even if it's already open. You revoke access with one click. You authenticate the recipient by account or OTP. The wrong move is still possible, but it no longer causes lasting damage.
ADVANCED ENCRYPTION
Encryption that holds even if the recipient's mailbox is compromised
Traditional mail providers don't encrypt end-to-end. If the recipient's mailbox is breached, your data is breached with it. In Italy, phishing is the dominant threat category at 70.7%, ahead of malware and business email compromise (Clusit Report 2026). A compromised mailbox is not a hypothetical.
For the most sensitive communications, EmailGrant protects the message with an extra password-based layer: the content is encrypted on the front end too, and no one, not even the system administrator, can read it without the key. Attachments leave in Lock&Go format with quantum-safe CRYSTALS-Kyber encryption (NIST FIPS 203 standard), built to hold against harvest now, decrypt later. With on-premise deployment and zero-knowledge keys, sensitive mail stays under the company's sovereignty.
READ THE ARTICLE
See what happens to an email after you hit send
EmailGrant extends to your inbox the same policies that protect your corporate files: tracking, revocation, expiration, and persistent encryption on the message and the attachment.
FAQ
What is file-centric business email security?
It's an approach that moves protection from the network perimeter to the individual message and its attachments. Instead of only filtering mail, it encrypts the content, tracks access to it, and keeps expiration and revocation active even after you hit send. Protection follows the data beyond the recipient's mailbox, for its entire life cycle.
Why isn't standard email encryption (TLS) enough to protect corporate data?
TLS encrypts the message while it travels between servers, then on delivery the content becomes readable again in the recipient's mailbox. From that point the email and its attachments can be copied and forwarded, stored on systems the company doesn't govern. Sensitive data needs encryption that stays applied to the message after delivery, independent of the channel. EmailGrant adds password-based encryption that also holds on the front end, which not even the system administrator can bypass.
Can you revoke or expire an email that has already been sent?
Yes. With EmailGrant you can revoke access to an already-sent message, even while the recipient is reading it, and set an expiration: on the set date the email closes even if it's already open. It's the direct countermeasure to send errors, which remain among the leading causes of breaches tied to the human element (Verizon DBIR 2026).
Do email attachments stay protected after they leave the company?
With EmailGrant, attachments inherit the policies of files managed in FileGrant: classification, permissions, screenshot blocking, revocation, and an audit trail. The download happens in encrypted Lock&Go format with quantum-safe CRYSTALS-Kyber encryption (NIST FIPS 203 standard). If an internal policy forbids sharing an unclassified document, the email isn't sent.
Does EmailGrant replace Microsoft 365 or Google Workspace?
No. EmailGrant works alongside your existing mail provider and doesn't replace it. It's the secure messaging module of FileGrant and adds to standard email the protection it lacks: persistent encryption on the message, tracking, expiration, post-send revocation, and attachment policies.
Does email security help with NIS2, GDPR, and DORA compliance?
Yes. Risk-appropriate encryption, access control, traceability, and an audit trail are measures required or expected by GDPR (Art. 32), NIS2 (Italian Legislative Decree 138/2024), and DORA (EU Regulation 2022/2554). Applying these measures to the individual message and its attachments helps you show that personal data and sensitive communications stay protected outside the perimeter, and helps you respond faster to an incident.