Sovereign encrypted email

Encrypted email for organizations that cannot afford a leak.

ARX is a closed, end-to-end encrypted email network for regulated French organizations. No webmail, no public cloud provider, and customer data stored and processed only in France.

Invitation only. Available to legal entities registered in France and their subsidiaries.

100%of data stored and processed in France
0webmail or public IMAP endpoints
99.99%availability commitment on the Sovereign edition
2data centers in the Paris region, active-active
Why ARX

Security by architecture, not by configuration

Conventional email bolts encryption onto an open protocol. ARX starts from a closed network where every participant is verified and every message is encrypted on the device that writes it.

End-to-end encryption

Messages and attachments between ARX users are encrypted on the sender's device and can only be decrypted by their recipients. ARX operators never hold readable content.

No webmail

Users reach their mail only through the ARX desktop client on enrolled devices. There is no webmail and no IMAP or SMTP access for users.

Hosted in France

Infrastructure, operations and staff are located in France. Customer data is stored and processed only in France.

Hardware-bound identities

User keys are generated on the device and unlocked with a smart card or FIDO2 security key. Lost devices are revoked in minutes.

Policy controls

Classification labels, forwarding restrictions, external sharing rules and retention policies are enforced by every ARX client and by the relay.

Tamper-evident audit

Administrative actions and key events are recorded in an append-only, signed audit log your compliance team can export.

Familiar on the outside

Your teams keep the inbox they know

The ARX desktop client looks and behaves like the email client your employees already use. The complexity stays underneath.

  • Folders, search, calendar invites and shared mailboxes work as expected.
  • Secure external delivery to recipients outside ARX through expiring, access-controlled links.
  • Directory synchronization with your existing identity provider.
  • Silent deployment through your device management tooling.
SenderEncrypts & signs
ARX relayCiphertext only
RecipientVerifies & decrypts
Encrypted storageParis region, two data centers

Private keys never leave enrolled devices. The relay cannot read message content.

Onboarding

How organizations join ARX

Invitation

Organizations are sponsored by an existing ARX member or invited directly after an eligibility review by our team.

Verification

We verify your legal entity and domain ownership, then enroll your administrators with hardware security keys.

Deployment

Your IT department deploys the desktop client and synchronizes the directory. Most organizations are live within two weeks.

Who we serve

Built for sectors where correspondence is sensitive by default

  • Defense & aerospace
  • Law firms
  • Banking & insurance
  • Healthcare
  • Energy & utilities
  • Public sector suppliers
  • Industrial R&D

Evaluate ARX for your organization

Access is granted by invitation. Our team will walk you through eligibility and onboarding.