Email ▪ Chat ▪ Document
One-Stop Cryptographic Automation Platform
Signature
Validation
Encryption
Decryption
AI
Download ZTmail AppExplore ZTmail Gateway
Please Choose the Cryptographic Application Automation Service: Email ▪ Chat ▪ Document
General Edition
From US$ 0
T1 ▪ Mailbox Identity (MV)
Cryptographic Automation Service for Mailbox Identity Personal Edition
From US$ 5
T2 ▪ Personal Identity (IV)
Cryptographic Automation Service for Personal Identity Organization Edition
From US$ 8
T3 ▪ Organization Identity (OV)
T4 ▪ Employee Identity (SV)
Cryptographic Automation Service for Organization Identity Three Services: Email · Chat · Document
Three communication and document experiences share the same cryptographic application automation foundation.
SignEncryptVerify
→ Who sent this email?
→ Who can read it?
Chat
SignEncryptVerify
→ Who am I talking to?
→ Who can read it?
Document
SignEncryptVerify
→ Who signed this document?
→ Who can read it?
Why ZTmail?
Understand Both Sides: CA, Email Client.
20 Years
of CA Operations
- Experience
- CA Operations
- Identity Validation
- Certificates
- Trust Infrastructure
ZTmail Connecting
- CA / Cloud
- Email Client + Gateway
5 Years
of Cryptographic Application Automation
- ZT Browser UI for Website Identity
- HTTPS Automation Gateway
- Client + Cloud Integration
Cryptographic Application Automation Architecture
The automation layer behind digital trust is the shared capability layer for Email, Chat, and Document. It is the core technology layer behind the One-Stop Cryptographic Application Automation Platform.
- ① One Cryptographic Foundation:
S/MIME · RFC 8555 · RFC 8823 · CN-GM/T | RSA · SM2 · PQC - ↓
- ② Certificate Lifecycle Management Automation
Request · Validate · Issue · Deploy · Renew · Replace · Revoke - ↓
- ③ Digital Trust & Identity
Identity Validation · Trusted Identity · Trust Levels - ↓
- ④ Cryptographic Operations
Digital Signing · Encryption · Decryption · Signature Validation · Key Management - ↓
- ⑤ Cryptographic Policies & Workflows
Trust Signals · Policies · Rules · Workflows · App UI Display · Gateway Action - ↓
- ⑥ App for Individuals · Gateway for Enterprises
Make Trust Visible in the App. Make Trust Actionable in the Gateway.
Learn more
Learn more
One Message. Three Trust Domains.
Three Cryptographic Services. Four Validated Trust Levels.Trusted identity is the common identity layer across Email, Chat, and Document. Make Identity Visible. Make Identity Actionable.
Three Trust Domains
ZTmail Trust
Identity validated by ZTmail and certificate trusted within ZTmail ecosystem.Global Trust
Identity validated by public CA with certificates trusted in global ecosystem.Hybrid Trust
IV/OV/SV identities are validated by ZTmail and trusted within ZTmail ecosystem, while MV identity is validated by public CA and trusted in global ecosystem.Three Cryptographic Application Services
Chat
Trusted encrypted conversations building on email and S/MIME.Document
Sign and encrypt documents without leaving the email workflow.Four Validated Trust Levels
T1
Mailbox Validated (MV)
Mailbox control validatedT2
Individual Validated (IV)
Individual identity validatedT3
Organization Validated (OV)
Organization identity validatedT4
Sponsor Validated (SV)
Organization identity and employee identity validatedAutomated Email Signing & EncryptionZTmail automates S/MIME operations so users can sign, encrypt, decrypt, and validate messages without manual certificate management.
- S/MIME certificate Automation
- Auto-configure free MV certificate, optional paid IV/OV/SV certificates
- Automatic email signing, user can choose different trust level identity from T1 / T2 / T3 / T4 as need
- Automatic email encryption after recipient certificate exchange
- Automatic email decryption using protected private keys. Automatic backup the private key into user’s own mailbox.
- Signature validation with visible T1 / T2 / T3 / T4 identity
- Compatible with other S/MIME clients like Outlook, Apple Mail etc.
- Existing S/MIME certificates can be imported to be used and decrypt the encrypted email history
- ZTmail App: For individuals and SMBs, making S/MIME widely practical
- S/MIME Automation Gateway: For large organizations, automating email signing and encryption without changing the email client in use, centralized key management
Cross-Platform End-to-end Encrypted Chat CommunicationZTmail Chat uses global email infrastructure and S/MIME underneath the Chat experience.
- One Infrastructure. Two Experiences. Chat · Mail
- No new app required for the communication partner, no new Chat account or separate Chat platform required
- Chat messages are encrypted and saved in user’s mailbox.
- The other party can use an existing email client
- IMAP IDLE can provide near-real-time arrival notification
- Chat and Mail can move between each other without copy-and-paste
- Trusted Identity remains visible at message level, and always end-to-end encrypted
- The communication remains interconnectable across different communication experiences
- ZTmail App: For individuals and SMBs, making S/MIME widely practical
- Enterprise Chat Gateway: For large organizations, centralized key management and S/MIME certificate self-provisioning
Automated PDF Document Signing & EncryptionZTmail Sign extends the cryptographic application automation into PDF documents, including documents already exchanged as email attachments.
- Automated management of document signing and encryption certificates, supporting dual algorithms (RSA/SM2) and dual certificates. Try MV document signing for free.
- Right-click an email attachment and sign the PDF
- Use the user's signing certificate and trusted identity
- ZTmail App can display the signer identity for the signed PDF with T1 / T2 / T3 / T4 icon
- Adobe Reader/Acrobat can verify the signature and display identity
- PDF encryption can use recipient public keys, authorized recipients decrypt with private keys
- No shared password is required for recipient-specific encryption
- Automatically attaches timestamp signatures, supports long-term valid (LTV)
- ZTmail App: For individuals and SMBs, making document signing and encryption widely practical
- Document Cryptogaphic Gateway: For large organizations, automating document signing and encryption for business systems
AI for Productivity. Cryptography for Trust.
Your AI. Your API Key. Your Choice.
Use your preferred AI model with your own API key. Choose the AI provider that fits your requirements.AI Can Help. It Cannot Prove Identity.
AI can help people write, summarize, translate, analyze, and organize information.AI alone cannot prove who sent a message, who signed a document, or who is authorized to access it.
h3Cryptography establishes what AI cannot: trusted identity, authenticity, confidentiality, and verifiable actions.
AI for Productivity
Draft · Summarize · Translate · Analyze
Draft · Summarize · Translate · Analyze
Cryptography for Trust
Identity · Signature · Encryption · Validation
Identity · Signature · Encryption · Validation
Built for the Ecosystem You Already UseZTmail is designed to work with existing standards, applications, and trusted document tools.
- Email ↔ Outlook and other compatible S/MIME email clients
- Sign, encrypt, send, receive, and verify S/MIME email across compatible clients
- Chat ↔ Existing S/MIME email clients
- The Chat partner can continue using an existing email client
- Document ↔ Adobe Reader/Acrobat
- Signed PDFs can be verified and signer identity displayed, authorized recipients can decrypt encrypted PDFs in Adobe Reader
One Trust Infrastructure. An Open Ecosystem.
One App. Three Function. Three Experiences.ZTmail App delivers cryptographic application automation services directly to individuals and small teams.
ZTmail App
Automated S/MIME digital signature and encryptionZTmail Chat
Trusted encrypted Chat Mode over email infrastructureZTmail Sign
Automated document signing and encryption- Cryptographic operations automation: Sign · Encrypt · Decrypt · Validation
- Automated certificate management: Application, configuration, and backup of S/MIME certificates and document certificates
- Local client mode: Private key operations are always controlled by the user, one-stop cryptographic application automation
One Gateway. Three Services. Full Automation
ZTmail Cryptography Application Automation Gateway sits between the user's existing security infrastructure, current business systems, and external networks. It automatically handles digital signing, encryption, decryption, signature validation, certificate management, and trusted identity management for emails, chats, and documents, and work together with the existing corresponding systems.
- Built-in dedicated organizational sub-CA and HSM-protected keys, which can automatically issue and manage ZTmail trusted S/MIME certificates and document certificates for the organization, without quantity limits.
- Optional globally trusted S/MIME certificates and document certificates to meet global trust application needs.
- Centralized management of private keys for email and document encryption.
- Automatically handle all cryptographic operations like digital signing, encryption, decryption, signature validation, and timestamping for emails, chats, and documents.
- Can work with existing email security gateways to handle decryption checks for inbound encrypted emails and pre-checks before encrypting outbound emails.
- Can integrate existing business systems to automate bulk signing and encryption of business documents.
- Employees don’t need to manage certificates and can continue using their current email clients and document readers.
Make Cryptographic Automation Simple. Make Digital Trust Actionable.
ZTmail automates certificates, keys, signatures, encryption, identity, validation, and application workflows across Email, Chat, and Document.
Protect Your Email
Secure Your Chat
Protect Your Documents
Prove Your Identity
Automate Your Cryptographic Infrastructure