We didn't invent these numbers. They come from the FBI, IBM, and HHS — a category of incident plain email enables and a category of cost VaultMail erases. The math isn't subtle.
Email is the initial attack vector in 35% of breaches. Per-record costs run highest in healthcare ($408) and finance ($217).
Tiered fines start at $137 per record for unknowing violations. Willful neglect tops out at $71,162 per record — and a single misdirected email can include thousands.
Most weren't sophisticated attacks. They were forwarded attachments, replied-to threads, and unsecured forwarders — ordinary email behavior, doing what email does.
Open Gmail or Outlook. Address the recipient, attach files, type your message. The extension lives in your compose window; you don't change anything about how you write email.
One extra button next to Send. Optionally set expiry, password, or forwarding rules before clicking. Encryption happens locally — your draft never leaves the machine in plaintext.
A regular-looking email arrives in their inbox with a View secure message button. Click → verify ownership of their address → decrypt in the browser. No app, no signup. Every open is logged.
We're an encryption layer, not a vertical SaaS — but compliance is industry-shaped. Each plan ships with the audit posture, certifications, and contracts your category requires. Pick yours; we'll send the paperwork.
We're not trying to replace your inbox. We're the encryption layer for the messages your inbox shouldn't be carrying in plaintext.
No credit card to start. Self-serve BAA (sign it yourself from settings) on every paid plan. Cancel anytime.
For solo practitioners, founders, and anyone whose inbox carries a few critical messages.
For practices, firms, and teams sending PHI, privileged correspondence, or financial documents at scale.
For hospitals, law firms, and finance teams with custom residency, deployment, and audit requirements.
If your security or legal team has a question we don't cover here, write to security@spriggan.ai — we answer within one business day, often with the actual engineer on the thread.
The VaultMail Chrome extension injects directly into Gmail and Outlook compose. Write your email exactly the way you always do — then click Encrypt & Send instead of Send.