Redact · Quarantine · Reject

Email & Compose-Window Protection

Inline gateway enforcement on outbound mail, plus a browser compose-window filter that catches content in Gmail, Outlook and Office 365 before it is ever sent.

Email and Compose-Window Protection — Redact · Quarantine · Reject
The challenge

Why this one is hard.

Most data loss through email is not malicious. It is a spreadsheet sent to a personal address to work on at home, or a reply-all that includes an attachment nobody checked.

Gateway-only inspection also misses the moment that matters. By the time the message reaches the gateway it has been sent; the user has moved on, and the correction is an incident rather than a nudge.

What changes

BeforeAfter
A spreadsheet of customer records reaches a personal inbox.It is quarantined before it leaves the tenant.
The sender learns about it during an incident review.The sender is told in the compose window, as it happens.
Evidence is assembled by hand for each audit.Per-policy reports export directly.
How it works

Four steps from decision to evidence.

01

Inspect at the gateway

Outbound mail passes through inline inspection, with redaction, quarantine or rejection applied by policy.

02

Catch it earlier

A browser compose-window filter examines content in Gmail, Outlook and Office 365 as it is written.

03

Coach the sender

In-context prompts explain why an action was risky, which cuts repeat incidents faster than a silent block.

04

Prove it

Per-tenant, per-domain and per-policy reports are exportable for regulators and client reviews.

Capabilities

What you get.

  • Inline outbound inspection with redact, quarantine or reject
  • Browser compose-window filter for Gmail, Outlook and Office 365
  • Multi-tenant support with per-tenant domains and policies
  • Message logs and audit logs for every decision
  • Detector catalogue shared with endpoint and network modules
  • Exportable per-policy reporting
The Data Loss Prevention console showing findings by channel and a live findings stream

Supported

Mail platforms
Microsoft 365 · Exchange · Gmail / Google Workspace · SMTP
Actions
Redact · quarantine · reject · allow with log
Multi-tenant
Tenants · domains · domain groups · per-tenant policy
Reporting
Message logs · audit logs · per-policy export
Questions

What buyers ask about this.

If yours is not here, our team will answer it directly.

Ask us
No. It sits alongside anti-spam and anti-malware, which solve a different problem. This module is concerned with sensitive content leaving, not with threats arriving.
Card and ID numbers are checksum-validated, so random digit strings do not trigger alarms. Beyond that, the recommended rollout runs in audit-only mode for several weeks so detectors are tuned against your real traffic before anything is blocked.
Yes. The email module is multi-tenant, with per-tenant domains, domain groups and policies, and exportable per-policy reports for client reviews.
Related use cases

Often deployed alongside.

Files, Images & OCR

Image-open and file-save blocking

Read more

GenAI Guardrails

ChatGPT · Claude · Gemini · Copilot

Read more

Clipboard, Screenshot & Print

Kernel-enforced on the device

Read more

See this working on your own systems.

Bring the system you are worried about and we will show you exactly how this control would be applied to it.