Ask Secure Message a question. Answers come from this site's docs only. I will cite a page. I will not invent a product claim.
Zix encrypts in their cloud. We encrypt on your host. That is the split. We are an email gateway, not a DLP clone.
| Zix | Secure Message | |
|---|---|---|
| Where encryption happens | Their cloud | On your host |
| Who hosts it | Their service | You. Self-hosted gateway. |
| Where keys live | Their service | On the host you run |
| Recipient | Their path | Opens a link, enters a one-time code. No account. |
Zix encrypts on their cloud path. Secure Message is MX on your host: encryption and the hold-and-portal reader run on infrastructure you operate, with keys on that host.
| Plan / note | Zix | Secure Message (Hub GET 2026-10-01) |
|---|---|---|
| Public list | Public price not verified | Community free (1 domain · 1 administrator) |
| Professional | — | $690 / year |
| Enterprise | — | $1,490 / year |
This is email — not Purview, not TigerConnect, not a chat app. Recipients do not install a client, join a chat, or create an account. They open a link and enter a one-time code sent to the mailbox they already have.
Enterprise adds Autopilot, eDiscovery, and DLP. The inbound classifier is one Enterprise signal and stays off until you turn it on. Message content is not sent to a vendor model unless you opt into a hosted provider.
Rubix PDF Sign is free and pairs with the gateway: sign on the workstation, then send through Secure Message.
Check SPF, DKIM, and DMARC with the free email auth checker.
OME retirement is on the OME replacement page. The HIPAA framing is on the HIPAA email gateway page. See how it works or pricing.