One-Stop Cryptographic Application Automation Platform

for Email, Chat, and Document

Signature
Validation
Encryption
Decryption

Cryptography for Trust. AI for Productivity.


Download ZTmail AppExplore ZTmail ChatZTmail SignZTmail Gateway

Please Choose the Cryptographic Application Automation Service: Email ▪ Chat ▪ Document

Universal Edition

From US$ 0
T1 ▪ Mailbox Identity (MV)
Cryptographic Automation Service for Mailbox Identity

Personal Edition

From US$ 5
T2 ▪ Personal Identity (IV)
Cryptographic Automation Service for Personal Identity

Organization Edition

From US$ 8
T3 ▪ Organization Identity (OV)
T4 ▪ Employee Identity (SV)
Cryptographic Automation Service for Organization Identity

Three Services: Email · Chat · Document
Three communication and document experiences share the same cryptographic application automation foundation.

Email

SignEncryptVerify
→ Who sent this email?
→ Who can read it?
Automated email signing and encryption

Chat

SignEncryptVerify
→ Who am I talking to?
→ Who can read it?
Cross-platform secure communication

Document

SignEncryptVerify
→ Who signed this document?
→ Who can read it?
Who signed this document?

Why ZTmail?
Understand Both Sides: CA, Email Client.

20 Years
of CA Operations

Experience
CA Operations
Identity Validation
Certificates
Trust Infrastructure

ZTmail Connecting

CA / Cloud
Email Client + Gateway

5 Years
of Cryptographic Application Automation

ZT Browser UI for Website Identity
HTTPS Automation Gateway
Client + Cloud Integration

Cryptographic Application Automation Architecture
The automation layer behind digital trust is the shared capability layer for Email, Chat, and Document. It is the core technology layer behind the One-Stop Cryptographic Application Automation Platform.

Email Security · Chat Security · Document Security

Cryptographic Application Automation Architecture
  • ① One Cryptographic Foundation:
    S/MIME · RFC 8555 · RFC 8823 · CN-GM/T | RSA · SM2 · PQC
  • ↓
  • ② Certificate Lifecycle Management Automation
    Request · Validate · Issue · Deploy · Renew · Replace · Revoke
  • ↓
  • ③ Digital Trust & Identity
    Identity Validation · Trusted Identity · Trust Levels
  • ↓
  • ④ Cryptographic Operations
    Digital Signing · Encryption · Decryption · Signature Validation · Key Management
  • ↓
  • ⑤ Cryptographic Policies & Workflows
    Trust Signals · Policies · Rules · Workflows · App UI Display · Gateway Action
  • ↓
  • ⑥ App for Individuals · Gateway for Enterprises
Make Trust Visible in the App. Make Trust Actionable in the Gateway.
Learn more

One Message. Three Trust Domains. Three Cryptographic Services. Four Validated Trust Levels.Trusted identity is the common identity layer across Email, Chat, and Document.

Three Trust Domains

ZTmail Trust

Identity validated by ZTmail and certificate trusted within ZTmail ecosystem.

Global Trust

Identity validated by public CA with certificates trusted in global ecosystem.

Hybrid Trust

IV/OV/SV identities are validated by ZTmail and trusted within ZTmail ecosystem, while MV identity is validated by public CA and trusted in global ecosystem.

Three Cryptographic Application Services

Email

Sign, encrypt, decrypt, and validate every message.

Chat

Trusted encrypted conversations building on email and S/MIME.

Document

Sign and encrypt documents without leaving the email workflow.

Four Validated Trust Levels

T1

Mailbox Validated (MV)
Mailbox control validated

T2

Individual Validated (IV)
Individual identity validated

T3

Organization Validated (OV)
Organization identity validated

T4

Sponsor Validated (SV)
Organization identity and employee identity validated

Make Identity Visible. Make Identity Actionable.

Learn more

Automated Email Signing & EncryptionZTmail automates S/MIME operations so users can sign, encrypt, decrypt, and validate messages without manual certificate management.

S/MIME certificate Automation
Auto-configure free MV certificate, optional paid IV/OV/SV certificates
Automatic email signing, user can choose different identity
Automatic email encryption after recipient certificate exchange
Automatic email decryption using protected private keys
Signature validation with visible T1 / T2 / T3 / T4 identity
Compatible with other S/MIME clients like Outlook, Apple Mail etc.
Existing S/MIME certificates can be imported to be used and decrypt the encrypted email history
ZTmail App: For individuals and SMBs, making S/MIME widely practical
S/MIME Automation Gateway: For large organizations, automating email signing and encryption without changing the email client in use, centralized key management

Cross-Platform End-to-end Encrypted Chat CommunicationZTmail Chat uses global email infrastructure and S/MIME underneath the Chat experience.

One Infrastructure. Two Experiences. Chat · Mail
No new app required for the communication partner, no new Chat account or separate Chat platform required
Chat messages are encrypted and saved in user’s mailbox.
The other party can use an existing email client
IMAP IDLE can provide near-real-time arrival notification
Chat and Mail can move between each other without copy-and-paste
Trusted Identity remains visible at message level, and always end-to-end encrypted
The communication remains interconnectable across different communication experiences
ZTmail App: For individuals and SMBs, making S/MIME widely practical
Enterprise Chat Gateway: For large organizations, centralized key management and S/MIME certificate self-provisioning

Automated PDF Document Signing & EncryptionZTmail Sign extends the cryptographic application automation into PDF documents, including documents already exchanged as email attachments.

Document signing and encryption certificate Automation
Right-click an email attachment and sign the PDF
Use the user's signing certificate and trusted identity
Signed PDFs can display and verify signer identity
Adobe Reader/Acrobat can verify the signature and display identity
PDF encryption can use recipient public keys, authorized recipients decrypt with private keys
No shared password is required for recipient-specific encryption
Automatically attaches timestamp signatures, supports long-term valid (LTV)
ZTmail App: For individuals and SMBs, making document signing and encryption widely practical
Document Cryptogaphic Gateway: For large organizations, automating document signing and encryption for business systems

AI for Productivity. Cryptography for Trust.

Your AI. Your API Key. Your Choice.

Use your preferred AI model with your own API key. Choose the AI provider that fits your requirements.

AI Can Help. It Cannot Prove Identity.

AI can help people write, summarize, translate, analyze, and organize information.

AI alone cannot prove who sent a message, who signed a document, or who is authorized to access it.
h3Cryptography establishes what AI cannot: trusted identity, authenticity, confidentiality, and verifiable actions.

AI for Productivity
Draft · Summarize · Translate · Analyze
Cryptography for Trust
Identity · Signature · Encryption · Validation

Built for the Ecosystem You Already UseZTmail is designed to work with existing standards, applications, and trusted document tools.

Email ↔ Outlook and other compatible S/MIME email clients
Sign, encrypt, send, receive, and verify S/MIME email across compatible clients
Chat ↔ Existing S/MIME email clients
The Chat partner can continue using an existing email client
Document ↔ Adobe Reader/Acrobat
Signed PDFs can be verified and signer identity displayed, authorized recipients can decrypt encrypted PDFs in Adobe Reader
One Trust Infrastructure. An Open Ecosystem.Learn more

One App. Three Function. Three Experiences.ZTmail App delivers cryptographic application automation services directly to individuals and small teams.

ZTmail App

Automated S/MIME digital signature and encryption

ZTmail Chat

Trusted encrypted Chat Mode over email infrastructure

ZTmail Sign

Automated document signing and encryption
Cryptographic operations automation: Sign · Encrypt · Decrypt · Validation
Automated certificate management: Application, configuration, and backup of S/MIME certificates and document certificates
Local client mode: Private key operations are always controlled by the user, one-stop cryptographic application automation

One Gateway. Three Services. Full Automation

ZTmail Cryptography Application Automation Gateway sits between the user's existing security infrastructure, current business systems, and external networks. It automatically handles digital signing, encryption, decryption, signature validation, certificate management, and trusted identity management for emails, chats, and documents, and work together with the existing corresponding systems.

Built-in dedicated organizational sub-CA and HSM-protected keys, which can automatically issue and manage ZTmail trusted S/MIME certificates and document certificates for the organization, without quantity limits.
Optional globally trusted S/MIME certificates and document certificates to meet global trust application needs.
Centralized management of private keys for email and document encryption.
Automatically handle all cryptographic operations like digital signing, encryption, decryption, signature validation, and timestamping for emails, chats, and documents.
Can work with existing email security gateways to handle decryption checks for inbound encrypted emails and pre-checks before encrypting outbound emails.
Can integrate existing business systems to automate bulk signing and encryption of business documents.
Employees don’t need to manage certificates and can continue using their current email clients and document readers.

Make Cryptographic Automation Simple. Make Digital Trust Actionable.
ZTmail automates certificates, keys, signatures, encryption, identity, validation, and application workflows across Email, Chat, and Document.

Protect Your Email
Secure Your Chat
Protect Your Documents
Prove Your Identity
Automate Your Cryptographic Infrastructure