Echoworx On Demand Demonstration

The Echoworx solution is designed to integrate at the boundary of your organization’s email system, using secure connections such as TLS to encrypt all outgoing messages. This process starts from the moment a user creates an email.

Messages can be encrypted in two main ways — manually, via subject tagging or a plug-in, or automatically through policies like DLP (Data Loss Prevention) or PII (Personally Identifiable Information). This ensures encryption workflows align with your organization's specific compliance and security needs.

Our encryption platform is designed with a “secure-by-default” approach, enabling secure messaging that aligns with modern business workflows. It offers complete control over message encryption and delivery, all while maintaining compliance and without compromising on oversight or functionality.

Once an email is flagged for encryption, it flows securely through SEGs or policy engines before being routed to Echoworx via a TLS connection. From there, our customizable policy engine applies encryption rules, branding, and delivery methods—be it TLS, PGP, or a secure portal—tailored to protect sensitive data and meet both business and recipient needs.

To maintain transparency, the sender is notified when their email has been encrypted and given details on how it was secured. Echoworx even allows for multi-channel delivery, automatically selecting the best method—TLS, PGP, or secure portal—based on recipient capabilities and policy constraints. For additional control, senders also have access to a full audit trail and recall functionality when messages are delivered via secure portal.

Encrypted messages are seamlessly delivered to recipients through the appropriate channels, ensuring compliance with mail hygiene processes, journaling, and archiving workflows. Outbound communications are sent through the customer’s SMTP server, while inbound messages are securely routed through Echoworx before being delivered to the recipient’s inbox in clear text—secured via TLS.

With Echoworx, organizations can incorporate their branding into every element of the secure email process. From logos and colors to vanity domains, Echoworx ensures that every communication looks and feels like it’s coming directly from your organization.

This includes customizable headers, footers, and buttons—allowing you to shape the recipient's experience based on your unique business requirements. Even the branding can adapt dynamically to the locale of the recipient, adjusting language, logos, and overall formatting to ensure a consistent, professional, and localized communication.

Echoworx supports 28 languages and provides powerful dynamic branding features. Notifications and secure message portals automatically adjust not only the language but also other locale-specific details, such as date, time, and number formatting. Whether a message originates from a Spanish-speaking organization or an English-speaking one, Echoworx ensures that it’s delivered in the recipient’s preferred language—maintaining a consistent, trusted experience.

The Echoworx platform extends branding capabilities across all notifications, secure portals, and even online help resources—ensuring brand consistency at every level. Whether it’s inbound notifications offering customer support details or outbound emails incorporating custom headers and footers, Echoworx provides unlimited opportunities for customization. Additionally, online help pages can be branded and even redirected to custom-hosted solutions, giving organizations full control over the customer experience.

Echoworx doesn’t just offer branding features—it provides full branding as a service. Our dedicated engagement team works closely with customers to configure and deploy the platform in real time, ensuring that your branding is applied seamlessly from day one. Whether you’re operating in the US, the UK, or beyond, Echoworx ensures that your brand’s integrity is maintained, providing your customers with a secure, consistent, and reliable email experience.

From automated localization to unlimited customization, Echoworx delivers a secure email solution that doesn’t just protect your communications—it amplifies your brand’s presence across every interaction.

Direct delivery is all about secure, certificate-based encryption between sender and recipient. With support for industry standards like TLS, PGP, and S/MIME, Echoworx ensures communication stays private while providing flexibility for fallback options if TLS isn't available. This approach guarantees the best user experience by delivering encrypted messages directly to the recipient's inbox while maintaining robust security.

Push technology takes security to the next level by delivering encrypted content directly to recipients without requiring certificates. Available in two modes—full PDF or attachment-only—this method adapts to specific business requirements. Full PDF encrypts the email body and attachments, ensuring comprehensive protection, while attachment-only focuses on safeguarding sensitive documents like statements. With native AES-256 encryption for PDF, Office documents, and ZIP files, recipients can securely access files without additional software, whether on mobile or desktop.

Pull delivery offers the ultimate flexibility for securing communications. By directing recipients to a secure web portal, companies can authenticate users or even specific messages. With options for inbox-style functionality or per-message authentication, users can review, reply, and manage encrypted messages efficiently. Echoworx's portal adapts to diverse authentication needs, enabling organizations to align delivery methods with their unique security requirements.

Echoworx's encryption policy engine seamlessly integrates these delivery methods, tailoring security postures to each message's needs.

Echoworx leverages SEGs (Secure Email Gateways) to automatically identify messages that meet encryption requirements. Once detected, messages are tagged and encrypted based on pre-configured policy controls—eliminating the need for manual intervention. This automated process ensures compliance and security without disrupting day-to-day communication tasks.

For organizations seeking more control, Echoworx enables users to tag messages manually. Tagging can be as simple as including a predefined keyword like “secure:” in the subject line. This method works seamlessly across mobile devices, web access (OWA), and desktop platforms without requiring additional software. Advanced tagging options, such as message classification or sensitivity levels, further assist the system in routing the messages securely through the SEG.

Echoworx also provides optional add-ins for platforms like Outlook Web Access and Gmail. These add-ins enhance user experience by offering a one-click method to apply encryption tags. Beyond simplicity, the add-ins introduce advanced functionalities, such as varying message expiry times, triggering alternative delivery methods (e.g., using TLS, portals), customizing branding, or enabling sender-set passwords. These tools empower users with additional controls, improving efficiency and flexibility while maintaining robust security standards.

The Echoworx O365 and Gmail add-ins offer capabilities such as triggering SMS-based authentication for recipients, tailoring message expiry periods to meet specific needs, or enabling recall functionality for secure messages sent in error. Importantly, users also gain access to detailed message tracking and audit logs via secure portals, providing greater visibility into message delivery and recipient interaction. Notifications further reassure senders about the encryption status of their messages, enhancing confidence in their secure communications.

With Echoworx, organizations don’t just encrypt messages—they elevate the entire secure email experience.

Echoworx’s user portal authentication enables recipients to securely access messages by logging in with a user ID and password. Organizations can define password policies, including expiration timelines, strength requirements, and recovery options, ensuring compliance with their security needs. This traditional method offers the familiarity of a standard email experience while incorporating enterprise-grade controls.

.

• Social Connectors (OAuth): Simplify the login process by enabling users to authenticate through existing accounts like Gmail, Facebook, LinkedIn, or Office 365. These social connectors eliminate the need for creating separate accounts, enhancing usability while maintaining security. Enterprises retain control over which connectors are allowed, tailoring the experience to their specific requirements.
• Biometric Authentication (FIDO2): With support for biometric authentication, users can access secure messages using facial recognition or fingerprint scanning. This method leverages single-use tokens embedded on devices, offering both security and convenience, particularly for mobile users.
• Two-Factor Authentication (2FA): Increase security by requiring an additional verification step such as a code sent via SMS. Organizations can customize 2FA settings, making it optional or mandatory based on security policies, ensuring that all users comply with the desired authentication posture.
• Single Sign-On (SSO): Streamline the authentication process by integrating with the organization’s existing web portal using an API. This eliminates the need for users to create separate accounts or remember additional credentials, providing effortless access through a trusted primary platform.

For heightened security, Echoworx implements per-message authentication, shifting the focus from user-level access to message-level verification. This method requires recipients to pass specific challenges before accessing individual messages.

.

• Sender-Set Challenges: At the point of sending, senders can define challenge-response questions, such as account details or other unique identifiers. Recipients must respond correctly to access the message.
• Out-of-Band Verification: A random password is generated for the message and shared separately with the recipient, such as via phone or email. This out-of-band process ensures enhanced security by requiring an additional communication channel.
• Direct Open (No Authentication): For low-friction communication, users can access secure messages via time-limited links without needing an account. This approach is ideal for inbound scenarios, such as collecting sensitive documents like loan applications, while still ensuring secure submissions via HTTPS.
• SMS Verification: Recipients receive a link to access secure messages, with verification completed via a code sent to their mobile device. This option combines simplicity with security by authenticating users through their associated mobile numbers.

Echoworx supports two primary encryption formats tailored to specific use cases. Full PDF encryption secures the entire message — the email body is presented as an encrypted PDF alongside individually encrypted attachments.

Attachment-only encryption focuses exclusively on securing attachments, ideal for protecting sensitive documents without encrypting the email body. Both formats leverage AES-256 encryption, providing recipients with secure access on any device, without the need for additional software.

This mode prioritizes simplicity and immediacy. When sending a secure message, the sender sets a password for encryption, whether through manual input or an automated application. The password is shared directly with the recipient, often by using a recognizable hint (e.g., the last six digits of an account number or another shared reference).

With Sender Set authentication, recipients can receive and access secure messages directly in their inbox without needing to register, ensuring fast and efficient communication. This is particularly effective for scenarios requiring real-time delivery, such as agents coordinating with brokers or handling time-sensitive customer communications.

For greater autonomy, User-Managed authentication allows recipients to manage their own encryption passwords. When a message or attachment is sent securely, recipients create and maintain their passwords directly within the system.

This eliminates the sender’s responsibility for password creation and distribution, offering a scalable solution for bulk delivery scenarios. For example, messages sent to large customer bases or first-time users who are new to the secure platform can easily be managed through self-service password creation and recovery.

Both Sender Set and User-Managed authentication modes cater to specific business requirements. Sender Set excels in immediate, one-on-one secure interactions, while User-Managed ensures scalability and flexibility for broader communication needs. By supporting these use cases, Echoworx delivers unmatched adaptability in secure messaging, enabling organizations to protect sensitive information without compromising on efficiency or user experience.