Secure every email
Choose a HIPAA compliant email solution below to get started:
Where do you send email today?
Choose your plan
Every plan includes a business associate agreement and a 14 day free trial.
14 day free trial included
14 day free trial included
14 day free trial included
Get your Paubox Mailbox
Frequently asked questions
Not finding what you're looking for? Contact us and we'd be happy to answer any additional questions!
Free email addresses like @gmail.com and @yahoo.com aren't HIPAA compliant. A Paubox Mailbox gives you a compliant email address at @pauboxmail.com with every email encrypted, a BAA included, and no domain or IT setup.
No. A free email address like @gmail.com or @yahoo.com is not covered by a BAA and is not HIPAA compliant. Paubox Mailbox gives you a new HIPAA compliant email address @pauboxmail.com so you can send PHI compliantly.
Mail sent to your old address won't come to Pauboxmail on its own. Set up forwarding inside your old account and it will land in your Paubox Mailbox.
Yes. Every Paubox account includes a BAA at no extra cost, signed during checkout.
Yes. Start at @pauboxmail.com and switch to Paubox Email Suite on your own domain whenever you're ready.
They just open it. There are no portals, no passwords, and nothing for them to download or install.
You can check your mail in any web browser, or set it up in the mail app you already use, like Apple Mail, Outlook, or the Mail app on your iPhone.
Paubox Email Suite is an add-on to your Google Workspace or Microsoft 365 account. It ensures that the emails you sent are always encrypted and HIPAA compliant. Paubox Mailbox is a HIPAA compliant standalone email address so you don't need another email provider.
|
Compare all
Paubox offerings |
|||
|---|---|---|---|
| HIPAA email compliance | |||
|
HIPAA compliant email encryption
All outbound email is automatically encrypted by default |
|
|
|
|
Securely send protected health information (PHI) via email
Patented blanket TLS encryption ensures that PHI sent via email is always encrypted. |
|
|
|
|
Works with Google Workspace and Microsoft 365
Add on Paubox to Google Workspace and Microsoft 365, using your existing account |
|
|
|
|
Emails delivered directly to the inbox
Seamless delivery without portals, passwords, or plug-ins |
|
|
|
|
Send secure calendar invites
Send secure, HIPAA compliant calendar invites directly from Microsoft Outlook and Google Workspace. No plugins or apps to install. |
|
|
|
|
Domain-level email protection
Automatically add new senders on your domain to ensure compliance |
|
|
|
|
Optimized email deliverability
Maximizes email deliverability and avoids outbound email ending in spam folders by updating your SPF record and configuring DKIM and DMARC protocols. |
|
|
|
|
Encryption certificate verification
Prevents emails sent to domains with expired or self-signed encryption certificates to ensure email is delivered with proper encryption. |
|
|
|
| Inbound email security | |||
|
Advanced phishing, malware, virus, and BEC detection
Identifies and blocks sophisticated attacks, including credential theft, malicious payloads, and business email compromise attempts that often bypass other filters. |
|
|
|
|
Spam detection and filtering
Automatically identifies and filters unwanted or low-risk emails to reduce inbox clutter and help users focus on legitimate messages. |
|
|
|
|
AI analysis of sender behavior and intent
Uses behavioral signals and context to evaluate how an email is written and sent, not just what it contains, helping catch socially engineered threats. |
|
|
|
|
Display name spoofing protection with ExecProtect+
Prevents attackers from impersonating executives or trusted contacts by detecting deceptive display name and sender identity tactics. |
|
|
|
|
Identify safe senders with Paubox [Tags]
Automatically labels trusted senders so users and admins can quickly distinguish legitimate emails. |
|
|
|
|
Malicious link and attachment analysis
Scans links and attachments in real time to detect phishing destinations, malware, and harmful file behavior before delivery. |
|
|
|
|
QR code scanning
Inspects QR codes in attachments, inline images, and embedded graphics for malicious payloads. |
|
|
|
|
Customizable rules for specific domains, IP addresses, or keywords
Allows admins to define tailored rules to flag, allow, or block emails based on known senders and sources. |
|
|
|
|
Clear detection explanations for quarantined messages
Provides human-readable explanations showing exactly why a message was flagged, so admins can review decisions with confidence. |
|
|
|
|
Quarantine reporting and management
Gives admins control over how quarantined messages are reviewed and delivered, including automated reports, mailbox routing, and user access options. |
|
|
|
| Support | |||
|
Help center
Learn how to use Paubox products quickly with concise how-to articles, and step-by-step instructions. |
|
|
|
|
U.S.-based support team availalble by chat, phone, or email
Our customer success team is available by phone for extended hours, Monday through Friday, to assist with any technical or support issu our customers might have. |
|
|
|
| Data loss prevention | |||
|
Outbound and inbound DLP
Scans both sent and received emails for sensitive content to help prevent accidental data exposure and policy violations. |
|
||
|
Custom keyword and content-based rules
Lets admin define specific keywords or content patterns to quarantine emails based on organizational needs. |
|
||
|
Admin and compliance role notifications
Notifies designated admins or compliance users when emails are flagged by DLP, without requiring full administrative access. |
|
||
|
Sender quarantine notifications for DLP violations
Alerts the sender when an outbound email is quarantined due to a DLP rule, helping them quickly understand and correct the issue. |
|
||
|
Excluded users for outbound DLP scanning
Allows specific senders to be excluded from outbound DLP rules while keeping inbound scanning in place. |
|
||
| Archiving | |||
|
Unlimited archive storage
Archiving costs do not increase based on the number of emails stored or retained. |
|
||
|
No additional cost for volume
Archiving costs do not increase based on the number of emails stored or retained. |
|
||
|
Inbound & outbound mail archive
Automatically archives both incoming and outgoing emails for complete recordkeeping. |
|
||
|
Automatically enroll new email senders
New users and senders are added to archiving automatically, with no manual setup required. |
|
||
|
Archived mail search
Enables fast, searchable access to archived emails for audits, compliance requests, or internal review. |
|
||
| Additional Features | |||
|
HIPAA compliant forms
Create secure, customized HIPAA compliant forms to collect patient data, signatures, and attachments. Included free with all paid plans. |
|
|
|
|
Voicemail and audio file attachment transcription
Automatically transcribe audio attachments in email |
|
|
|
|
Salesforce CRM integration
Securely send HIPAA compliant email from Salesforce CRM. |
Optional add-on
|
Optional add-on
|
|
| Dashboard access | |||
|
Dashboard access for admin and users
Admin access to manage accounts and settings, and user level access to view user settings and quarantine |
|
|
|
|
SSO options to access dashboard
Login with Google Workspace or Microsoft 365 accounts |
|
|
|
|
Multi-factor authentication
Require authentication beyond a username and password when logging into your Paubox account. |
|
|
|
|
Real-time analytics
Comprehensive email analytics, mail logs, ruleset access, and quarantine. |
|
|
|
|
Email reports
Daily or weekly email reports on usage, analytics, patterns, and alerts sent directly to your inbox. These reports make it easy to quickly demonstrate value to upper management. |
|
|
|
| Compliance and security | |||
|
HIPAA compliant
Maintain the highest privacy and data protection with third party audits against HIPAA regulations. |
|
|
|
|
HITRUST certified
Safeguard your data with Paubox Email Suite, which has been HITRUST certified for its rigorous controls. |
|
|
|
|
Business associate agreement
Under HIPAA, organizations that use a service provider to process PHI on their behalf must put in place a business associate agreement with that service provider. Paubox includes BAAs with all accounts. |
|
|
|
|
TLS protocols 1.2 & 1.3
As per NSA guidance, Paubox supports only TLS 1.2 and TLS 1.3. The following obsolete protocols are not supported: SSL 2.0, SSL 3.0, TLS 1.0, and TLS 1.1. |
|
|
|
|
U.S. data centers
Rely on our cloud-based, redundant infrastructure with 99.99%, uptime. Customer data is stored encrypted at-rest and solely in U.S data centers. |
|
|
|
|
|
Customer success stories
Every plan includes:
U.S.-based support
Top ranked support that you can contact via phone or email.
Signable, encrypted forms
Save over $1,000 per year using our HIPAA compliant forms, free with any paid plan.
Business associate agreement
Paubox includes a BAA with all accounts.
HITRUST certified
Certified by a third-party for HIPAA compliance and security.
Secure calendar invites
Avoid common HIPAA compliance violations.
Complimentary setup
We’ll help you get your HIPAA compliant email set up.
$250 referral credit
Get $250 credit for every referral you send our way.
$100 off with a Paubox badge
Get $100 off your renewal for adding a Paubox Badge to your website.
Optimized email delivery
Maximize deliverability so your important messages don’t go to spam.
Frequently asked questions
Not finding what you’re looking for? Contact us and we’d be happy to answer any additional questions!
Paubox can also easily be setup on tablets and smartwatches with no proprietary apps or downloads needed.

