Encrypted email · LuxGap Mail

Your executive emails, sealed. Neither your administrator nor LuxGap can open them.

In a typical email system, the administrator can open any mailbox: in Microsoft 365, an account with eDiscovery rights searches and exports a mailbox's content without its owner knowing, and backups read just like the original. LuxGap Mail, business email hosted, encrypted and operated in Luxembourg, gives sensitive roles a zero-access mailbox: the key that unlocks it is derived from a secret known only to the user and is stored nowhere, neither at LuxGap nor in the backups. As many addresses as you need, with no per-user licence.

Discover LuxGap Mail → Contact us
Main features

What the software actually does.

Two mailbox levels, chosen role by role

Every mailbox is created at one of two levels, and both coexist within the same organisation. The standard mailbox, for the vast majority of roles: encrypted in transit and at rest, administered by the company, handed back when an employee leaves. The zero-access mailbox, for executive management, finance, human resources, legal and the DPO.

Zero-access: only the user opens the mailbox

The unlock key is held by the user alone. No administrator, on the company side or at LuxGap, can open the content, and backups do not allow it to be read. Without the user's secret, message content remains unreadable, including to those who run the service.

A choice made with full knowledge

If the user does not voluntarily hand over their access, a zero-access mailbox's content remains permanently inaccessible, including after a departure or dismissal. That is the price of real confidentiality: LuxGap helps you define which roles belong at this level and frame the choice contractually.

No per-user licence

Email is not billed per mailbox. An address for a new employee, a department, a project or a shared mailbox triggers no additional licence cost: create as many mailboxes, aliases and shared mailboxes as your organisation needs.

Email, calendars, contacts and groups in a single portal

Personal and shared calendars with delegation, personal address books and a company directory, groups, distribution lists and shared mailboxes (contact@, invoicing@, hr@). Access from the web portal or from your usual email software.

A platform monitored by LuxGap security teams

Anti-spam and anti-phishing filtering before messages reach the mailbox, multi-factor authentication, encryption in transit and at rest, backups with configurable retention. Every administrative action is logged and can be reviewed, and the platform is monitored by the teams who deliver the firm's CISO mandates.

Your domain, your addresses, a supported migration

You keep your domain name and current addresses. Four steps run with LuxGap: scoping mailboxes, sensitive roles and retention obligations; preparing the domain; bringing across existing email, calendars and contacts; training users and follow-up after the switch.

All European, end to end

One Luxembourg group, three disciplines: LuxGap handles security and compliance and operates the service, LuxOps runs the servers and the secure, high-availability European cloud, LuxApps builds the software. No Exchange server and no American or Chinese tooling anywhere in the chain.

Use cases

Who it is for, and in what context.

Executive management: strategic decisions, negotiations, exchanges with the board, which the email administrator has no business being able to read.

Finance: budgets, transactions in preparation, exchanges with banks and auditors.

Human resources: personnel files, pay, internal investigations.

Legal: litigation and exchanges with lawyers, covered by professional secrecy.

DPO: data breaches, data subject requests, exchanges with the CNPD.

Every other role: the standard mailbox, administered by the company and compatible with archiving obligations and HR governance, within the same email system.

Regulatory compliance

A basis for compliant processing, with documented measures.

  • GDPR Article 32: encryption is among the technical measures the text cites. The zero-access mailbox extends it to administrators and backups.
  • GDPR and the Luxembourg law of 1 August 2018: a platform designed to support compliant processing, with optional support from LuxGap's external DPO (register, impact assessments, data subject requests).
  • Professional secrecy (Article 458 of the Luxembourg Criminal Code): for covered exchanges, the zero-access mailbox rules out any administrator access, on the company side as well as at LuxGap.
  • NIS 2: logging of administrator access and monitoring that help document technical and organisational measures.
  • Retention obligations: the zero-access mailbox is not designed for a role whose retention the company must be able to meet without the user. LuxGap helps you reserve this level for the positions where it is appropriate.
  • Technical data: like any email operator, LuxGap processes the data needed for routing (addresses, timestamps, volumes, connection logs), never the content of a zero-access mailbox.
Architecture · Hosting

Technical stack and data sovereignty.

Encryption: every mailbox is encrypted in transit and at rest. For a zero-access mailbox, the key that unlocks the content is derived from a secret known only to the user; it is stored nowhere on the platform, neither at LuxGap nor in the backups.

Hosting and operations: high availability delivered by LuxOps on the group's secure European cloud, with no dependency on infrastructure outside the European Union. Service operated by LuxGap Sàrl, a Luxembourg company registered with the Luxembourg Trade and Companies Register under number B231193.

Software: built by LuxApps. No Exchange server, no American or Chinese tooling.

Access: web portal at email.luxgap.com or your usual email software, with multi-factor authentication.

FAQ

Frequently asked questions

What difference does it make compared with Microsoft 365 or Google Workspace?
In their usual configuration, these services encrypt your email in transit and on their disks, but your administrators keep the means to read it: in Microsoft 365, an account with eDiscovery rights searches and exports a mailbox's content. With a LuxGap Mail zero-access mailbox, the key is derived from a secret known only to the user: neither your administrator, nor LuxGap, nor the backups give access to the content. And email is not billed per user.
What happens when an employee leaves the company?
For a standard mailbox, the company stays in control: the mailbox can be suspended, redirected or handed back according to your internal rules. For a zero-access mailbox, the content remains inaccessible unless the user has voluntarily handed over their access. Departure arrangements are defined up front, contractually, with LuxGap's support.
Is the zero-access mailbox compatible with our archiving obligations?
It depends on your sector and the documents concerned. The zero-access mailbox is not designed for roles subject to a retention obligation the company must be able to meet without the user. LuxGap helps you identify those roles and reserve the zero-access level for the positions where it is appropriate: this question deserves a conversation before any roll-out.
Can we mix standard and zero-access mailboxes?
Yes. The level is chosen mailbox by mailbox. The usual pattern: the vast majority of roles on standard, with zero-access reserved for a handful of functions (executive management, finance, human resources, legal, DPO).
What does LuxGap see as operator of the platform?
For a zero-access mailbox, LuxGap cannot read the content of messages or attachments. Like any email operator, LuxGap does process the technical data needed to route and run the service: sender and recipient addresses, timestamps, volumes and connection logs. For a standard mailbox, administrative access is logged.
How much does it cost?
Email is not billed per mailbox: creating an address for an employee, a department, a project or a shared mailbox triggers no additional licence cost. Pricing comes as a costed proposal tailored to your organisation, which you can request at email.luxgap.com.
Combine with

Our complementary services.

See LuxGap Mail on your sensitive roles.

The portal, both mailbox levels and the no-per-user-licence model on email.luxgap.com; a demonstration, then a costed proposal tailored to your organisation.

Discover LuxGap Mail →

Contact us