A
Standard mailbox
For staff
- Encrypted in transit and at rest
- Administered by the company
- Can be handed back to the company when an employee leaves
- Compatible with archiving obligations and HR governance
- Suited to the vast majority of roles
Sovereign mail portal · email.luxgap.com
Business email, hosted, encrypted and operated in Luxembourg.
As many addresses as you need, with no per-user licence. And, for sensitive roles, mailboxes that even your administrator cannot open.
- LuxGap security, LuxOps servers, LuxApps software
- No Exchange server, no American or Chinese tooling
- High availability on our secure European cloud
Who can technically open your finance director's mailbox?
How much does your next email address cost?
Where do your backups sit, and who can read them?
In most organisations the answer is the same: the administrator, one more licence, and nobody really knows.
The service
A complete email platform, operated by LuxGap.
LuxGap operates a complete email platform for its clients: email, calendars, contacts, groups and distribution lists, brought together in a single portal at email.luxgap.com.
The platform is hosted and administered by LuxGap, to the same standard the firm applies to its DPO and CISO mandates.
Addresses are not billed per user. You create as many mailboxes, aliases and shared mailboxes as your organisation needs.
Three teams from one group, all in Luxembourg: LuxGap handles security and compliance, LuxOps runs the servers and our secure, high-availability European cloud, LuxApps builds the software. No Exchange server, no American or Chinese tooling: everything is European.
Security
Two mailbox levels, matched to the sensitivity of the role.
Every mailbox is created at one of two levels. The choice is made role by role, and both levels coexist within the same organisation.
B
Zero-access mailbox
For sensitive roles
- Intended for executive management, finance, human resources, legal and the DPO
- The unlock key is held by the user alone
- No administrator, on the company side or at LuxGap, can open the content
- Backups do not allow the content to be read
- Nothing can be handed back without a deliberate action by the user
A choice to be made with full knowledge of the consequences
If the user does not voluntarily hand over their access, the mailbox content remains permanently inaccessible, including after a departure or dismissal. This property is the price of real confidentiality. LuxGap works with you to define which roles belong at this level and to frame the choice contractually.
Zero-access encryption
Who can open what.
The same question, asked for each mailbox level and for everyone who touches the platform.
| The user | The company administrator | The LuxGap administrator | The backup | |
|---|---|---|---|---|
| Standard mailbox | Access | Access | Access | Access |
| Zero-access mailbox | Access | No access | No access | No access |
- Access to content possible
- No access to content
For a zero-access mailbox, the key that unlocks the content is derived from a secret known only to the user. It is stored nowhere on the platform, neither at LuxGap nor in the backups. Without that secret, message content remains unreadable, including to those who run the service.
Features
Every feature, in a single portal.
Unlimited addresses and aliases
An address per employee, per department or per project, with no additional licence cost.
Personal and shared calendars
Plan, share and delegate calendars across the organisation.
Personal and company address books
One shared directory kept up to date, plus a personal address book for everyone.
Groups, distribution lists and shared mailboxes
contact@, invoicing@, hr@: shared mailboxes managed by your teams.
Anti-spam and anti-phishing filtering
Unwanted messages and phishing attempts are filtered before they reach the mailbox.
Multi-factor authentication
A password on its own is not enough to open a session.
Encryption in transit and at rest
Messages are encrypted while they travel and while they are stored.
Backups and configurable retention
Retention periods are set to match your obligations and internal policy.
Access via browser and mail client
From the web portal or from your usual email software.
Monitoring by LuxGap security teams
The platform is monitored by the teams who deliver the firm's CISO mandates.
Logging of administrator access
Every administrative action is recorded and can be reviewed.
GDPR support from an external LuxGap DPO
Register, impact assessments, responses to data subjects: an external DPO supports you.
Sovereignty and compliance
Software, hosting and operations: all European.
One group, three disciplines
Security, data protection and compliance. Operates the service.
Infrastructure: servers and secure, high-availability European cloud.
Develops the platform software.
One Luxembourg group, three disciplines
Security and compliance by LuxGap, servers by LuxOps, software by LuxApps. No Exchange server and no American or Chinese tooling anywhere in the chain.
European high availability
High availability delivered by LuxOps on our secure European cloud, with no dependency on infrastructure outside the European Union.
European hosting
European hosting, operated by a Luxembourg company, LuxGap Sàrl, registered with the Luxembourg Trade and Companies Register under number B231193.
A basis for compliant processing
A platform designed to support processing that complies with the GDPR and the Luxembourg law of 1 August 2018.
Documented measures
Logging and monitoring that help document technical and organisational measures, particularly in a NIS2 context.
Support
Optional support from LuxGap's external DPO and external CISO.
The model
No per-user licence.
Email is not billed per mailbox. Creating an address for a new employee, a department, a project or a shared mailbox triggers no additional licence cost. The organisations that make the most of the platform are those that multiply their functional addresses.
Request a costed proposal tailored to your organisationGetting started
Four steps, supported by LuxGap.
Scoping
Identifying mailboxes, sensitive roles and retention obligations.
Preparation
Configuring the domain and its associated records.
Migration
Bringing across existing email, calendars and contacts.
Support
Training users and follow-up by LuxGap.
FAQ
Frequently asked questions.
For anything else, the demonstration is the right moment to talk it through.
Request a demonstrationFor a standard mailbox, the company stays in control: the mailbox can be suspended, redirected or handed back according to your internal rules. For a zero-access mailbox, the content remains inaccessible unless the user has voluntarily handed over their access. Departure arrangements are defined up front, contractually, with LuxGap’s support.
It depends on your sector and the documents concerned. The zero-access mailbox is not designed for roles subject to a retention obligation the company must be able to meet without the user. LuxGap helps you identify those roles and reserve the zero-access level for the positions where it is appropriate. This question deserves a conversation before any roll-out.
Yes. The level is chosen mailbox by mailbox. The usual pattern: the vast majority of roles on standard, with zero-access reserved for a handful of functions (executive management, finance, human resources, legal, DPO).
For a zero-access mailbox, LuxGap cannot read the content of messages or attachments. Like any email operator, LuxGap does process the technical data needed to route and run the service: sender and recipient addresses, timestamps, volumes and connection logs. For a standard mailbox, administrative access is logged.
Yes. You keep your domain name and existing addresses. The preparation phase consists of configuring your domain and its associated records so that it is served by the platform.
Existing email, calendars and contacts are brought across during the migration phase, planned with you to limit disruption. Users are trained before the switch, and LuxGap provides follow-up after go-live.
Take back control of your email.
A demonstration of the portal, a conversation about your sensitive roles, and a proposal tailored to your organisation.
Received, we will get back to you.