Every email checked.
Before it arrives.

Both Microsoft and Google offer basic spam and malware filtering. They're effective against generic, high-volume spam — but they were never built to catch targeted phishing, AI-generated attacks, business email compromise (BEC) or data exfiltration. MailShield acts as a specialized layer in front of (or alongside) your existing email service, using AI specifically trained on attack patterns. Most of our customers run MailShield together with Microsoft 365 or Google Workspace.

AI-generated phishing emails are linguistically perfect — but they still leave fingerprints. MailShield's Aura model analyzes sender behavior, domain reputation, link structure, attachment behavior, and message context (urgency markers, impersonation patterns, look-alike domains). The model is continuously retrained on new attack data, so it keeps pace as attackers evolve their tooling.

Usually within a few minutes. You change your MX record at your DNS provider — from that moment on, all your inbound mail traffic flows through MailShield before reaching your servers or cloud mailboxes. No software to install on devices, no agent on your mail server, no maintenance window. Outbound protection requires a slightly different configuration; our onboarding team will guide you.

Suspicious emails are held in quarantine and never reach the user's inbox. Administrators can review quarantined messages in the identiqa portal, release legitimate mail (false positives), or permanently delete confirmed threats. End users optionally receive a daily digest of their own quarantined emails, where they can self-release low-risk items. All actions are logged for audit purposes.

identiqa operates regional clusters in Europe, the US and additional regions. Each region runs independently, governed by its local entity. Email content of EU customers stays within the European legal space — never touches US infrastructure, never crosses to providers like Cloudflare, Proofpoint or Mimecast that route through US data centres. MailShield is fully GDPR-compliant and aligned with NIS2 requirements.

Yes. MailShield can run as the primary email filter or in layered architectures alongside existing tools (e.g., Microsoft Defender for Office 365, Proofpoint, Mimecast). Many of our customers initially run MailShield in parallel-monitoring mode to compare detection rates before fully cutting over. Logs and detections can be forwarded to your SIEM for unified incident response.

NIS2 specifically calls out email security as part of basic cyber hygiene, with managing directors personally liable for inadequate measures. MailShield's audit logs, blocked-attack reports and DLP event histories are structured to serve directly as evidence in NIS2, ISO 27001, DORA and SOC 2 audits. Reports are exportable on demand or scheduled monthly to your compliance team.