Ask Secure Message a question. Answers come from this site's docs only. I will cite a page. I will not invent a product claim.
Mimecast is a cloud SEG. We are MX on your host. That is the split. We are an email gateway, not a DLP clone and not an archive clone.
| Mimecast | Secure Message | |
|---|---|---|
| Who hosts it | Their cloud SEG | You. MX on your host. |
| Where encryption happens | Their cloud | On your host |
| Where keys live | Their service | On the host you run |
| Recipient | Their path | Opens a link, enters a one-time code. No account. |
Mimecast is a cloud SEG on their vendor path. Secure Message is MX on your host: inbound gateway and hold-and-portal encryption on infrastructure you run, with keys on that host.
| Plan / note | Mimecast | Secure Message (Hub GET 2026-10-01) |
|---|---|---|
| Public list | Public price not verified | Community free (1 domain · 1 administrator) |
| Professional | — | $690 / year |
| Enterprise | — | $1,490 / year |
This is email — not Purview, not TigerConnect, not a chat app. Recipients do not install a client, join a chat, or create an account. They open a link and enter a one-time code sent to the mailbox they already have.
Enterprise adds Autopilot, eDiscovery, and DLP. The inbound classifier is one Enterprise signal and stays off until you turn it on. Message content is not sent to a vendor model unless you opt into a hosted provider.
Rubix PDF Sign is free and pairs with the gateway: sign on the workstation, then send through Secure Message.
Check SPF, DKIM, and DMARC with the free email auth checker.
The HIPAA framing is on the HIPAA email gateway page. The definition is on the self-hosted email gateway page. See how it works or pricing.