Choose the S/MIME Automation Path for You
Free Edition
Auto-configure certificates
MV · ZTmail Trusted
Forever Free (US$0)
- Full S/MIME cryptographic capabilities
- Instant activation, T1 Identity UI
Trusted Identity Edition
Auto-configure identity certificates
IV/OV/SV · ZTmail Trusted
US$5~9 / year / mailbox
- Buy & Auto-configured, Auto-encrypt
- T2 / T3 / T4, ZTmail Trusted Identity UI
Global Ecosystem Edition
Auto-configure globally trusted MV/IV/OV/SV
Optimized MV + ZTmail trusted IV/OV/SV
US$12~39 / year / mailbox
- Buy & Auto-configured, Auto-encrypt
- T1/T2/T3/T4, Global Trusted Identity UI
One App. Four Cryptographic Operations.
Sign
Choose the identity level you want to use when digitally signing an email.
Your signature can carry a validated identity, not just an email address.
Encrypt
Automatically encrypt email after exchanged the recipient's public certificate by sending a signed email.
No manual certificate selection.
No manual encryption setup.
Decrypt
Automatically decrypt S/MIME email using your protected private keys.
Your encrypted email remains accessible without changing the way you work.
Compatible with other email clients.
Signature Validation
Verify the sender's digital signature and display the sender's verified identity level ( T1 / T2 / T3 / T4 ) immediately.
Know who sent the email, not just what address appears in the From field.
Choose Your Identity Validated Trust Level.
Recipients See Your Validated Identity.
From:
-
< user@example.com >
Mailbox Validated
Upgrade to
-
Full name < user@example.com >
-
Organization name < user@example.com >
-
Full name, Organization name < user@example.com >
-
< user@example.com >
Identity Not Validated
-
< user@example.com >
Mailbox Validated
Upgrade to
Encrypted
— Sent to Whom
Every email you send is automatically encrypted and digitally signed.Choose the trusted identity level of your S/MIME certificate — MV · IV · OV · SV
Received:
-
James Johnson
Mailbox Validated
-
Emily Williams
Individual Validated
-
Michael Brown
Organization Validated
-
Sarah Jones
Sponsor Validated
-
John Smith
Identity Not Validated
-
James Johnson
Mailbox Validated
Encrypted
— Received from Whom
See the sender's verified identity level at a glance.MV · IV · OV · SV identity levels are clearly displayed as T1 / T2 / T3 / T4
Not Just an Encrypted Email. A Trusted Identity. Make Identity Visible. Make Identity Actionable.
S/MIME Certificates, Free & Automated from Day One.S/MIME should not require users to become certificate experts.
Automatic Enrollment
Certificates are requested and issued automatically according to the required identity level.
Automatic Deployment and Use
ZTmail automatically configures the selected certificate for email signing and encryption.
Automatic Renewal
Certificates are renewed automatically before expiration.
Automatic Replacement
When a new certificate becomes available, ZTmail automatically switches to it.
One Automation Service. Two Trust Domains.
ZTmail App provides one automated certificate service across two complementary trust domains: ZTmail Trust and Global Trust .
ZTmail Trust
ZTmail-trusted certificates are issued within the ZTmail Trust Domain, providing trusted T1 / T2 / T3 / T4 identity display across the ZTmail ecosystem.
Global Trust
Public CA-issued certificates provide global trust and S/MIME interoperability with compatible email clients and services outside the ZTmail ecosystem.
One automated certificate lifecycle management service. Two trust domains. Choose the certificate strategy that best fits your requirements:
ZTmail Trust domain + Trusted Identity
Global Trust domain + Global Trusted Identity
Client + Cloud. Built for Privacy and Automation.
ZTmail combines local cryptographic control with cloud-based certificate automation.
Your Data Stays in Your device. Your Certificates Stay Automated.
The client-cloud structure for S/MIME certificate automation follows RFC 8555 and RFC 8823 standards for RSA algorithm certificate, and the SM2 certificate automation follows the draft Chinese commercial cryptography standard, ‘Automated Certificate Management Protocol,’ led by ZoTrus Technology.
One Encrypted Email. Your Choice of Cryptography.
ZTmail supports multiple cryptographic algorithms so you can use technology that fits your interoperability, performance, regulatory, and future-security requirements.
RSA / ECC
For broad interoperability and established S/MIME ecosystems.
SM2
An standardized elliptic-curve algorithm with shorter keys and efficient performance.
PQC
Post-Quantum Cryptography for the next generation of secure communications.
Bring Your AI to ZTmail
Use the AI provider you trust. Bring your own API key. No forced AI vendor. No AI lock-in.
Write Smarter
- Draft & polish new emails, draft replies
- Summarize
- Translate
Work Smarter
- Extract schedules and action items
- Organize email information
- Turning conversations into useful tasks
Stay Safer
- Detect phishing and fraud
- Identify suspicious email patterns
- Protect sensitive information
Your AI. Your API Key. Your Choice. AI for Productivity. AI for Security.
→ Who are you?
→ Is the content encrypted?
→ Can this content be trusted? Is there a threat?
→ How can you work more efficiently?
Cryptography protects the trust layer. AI enhances the content and productivity layer.
Protect Your Past. Automate Your Future.
Already have S/MIME certificates? Bring them with you.
Your Private Keys. Your Control.
ZTmail automates certificates without taking control of your private keys, it is securely stored in your device. Automation remove the manual work, not take away your control.
One App. Many Secure Email Needs.
Personal Privacy
Protect personal emails, financial information, and confidential data.
Business Communication
Protect sensitive communication with clients, partners, and colleagues.
Trusted Identity
Let recipients verify who you are, beyond simply seeing your email address.
High-Security Communication
Use stronger identity validation and cryptographic protection where trust matters most.
Email Security Without the Certificate Headache.
ZTmail App turns S/MIME from a good technology into an easy-to-use one through automation.
Encryption
Encrypt sensitive email and digitally sign every messages.
Trusted
Let recipients verify the identity behind an email.
Controlled
Keep private keys and email data in your device.
Automated
Automate certificate enrollment, deployment, renewal, and replacement.
Future-Ready
Evolve from today's cryptography toward Post-Quantum Cryptography (PQC).