Source
Mail server
Microsoft 365, Exchange, Google Workspace, Zimbra or any SMTP / IMAP server. PEC support via dedicated connector.
Email Archiving · M365 · Exchange · Google Workspace
Retain every email.
Retrieve it in seconds.
Compliant email archiving for Microsoft 365, Exchange and Google Workspace. RFC 3161 digital signing, immutable encrypted archive, configurable retention, legal hold and full-text eDiscovery. A centralised archive, separate from the mailbox, that survives accidental deletions, migrations and staff turnover.
Microsoft 365 · Exchange · Google Workspace · Cloud or on-premise
What is included
An archive built for compliance, audit and continuity.
Multi-method ingestion
Real-time SMTP journaling for maximum compliance, plus native connectors for Exchange, Microsoft 365, Microsoft Graph, Google Workspace and Zimbra. IMAP connector for any other mail server. Batch import of PST/OST and EML archives (over 20 compressed formats supported).
RFC 3161 signed archive
Every email is digitally signed with RFC 3161 certified time-stamping and encrypted with AES-256. Message integrity can be verified independently of the archive, a key requirement to use email as legal evidence.
Dedicated Privacy Officer
Role separated from the system administrator: even admins must request authorisation from the Privacy Officer to access sensitive data, via a time-based OTP valid for 15 minutes. Every action under authorisation is tracked and reported.
Legal Hold and Retention
Retention policies based on saved searches: retention only applies to messages matching a filter. Blocking legal hold for litigation, audits and investigations — preserved emails cannot be deleted or overwritten until the hold is released.
Instant full-text eDiscovery
Search the entire content of emails — body, subject, sender, recipients, ownership, attachment filenames — across millions of messages in milliseconds. Advanced searches can be saved and shared with authorised users, for collaborative audits.
Access anywhere, flexible export
Consult via Outlook add-in, web console and mobile Progressive Web App — the archive is always within reach of the end user. Export per user, saved search or time range in EML, ZIP or PST format for legal handover or migration to other systems.
Compatible with Italian PEC (Certified Email)
PEC mailboxes are archived via a dedicated IMAP connector that preserves the legal validity of the acceptance receipt, the delivery receipt and the transport envelope. A critical requirement for Italian organisations subject to tax retention obligations, civil litigation and relationships with the Public Administration.
How it works
From the mailbox to the immutable archive, in one continuous flow.
Every inbound and outbound email is copied in real time to an archive external to the mail server, indexed for full-text search and protected by retention and legal hold policies. Works with Microsoft 365, Exchange, Google Workspace, Zimbra and any SMTP or IMAP server. Exchange Online mailboxes have grown to 100 GB, but capacity is not retention: the archive remains a separate system.
Capture
Journaling
Real-time SMTP journaling or native connectors for Exchange / M365 / Graph / Google / Zimbra.
Retention
Immutable Archive
RFC 3161 signing, AES-256 encryption, retention and legal hold. Multi-volume for high availability.
Access
eDiscovery
Full-text search from Outlook, web or mobile app. Export EML, ZIP or PST for audit and litigation.
Why archive (and not just back up)
Backup and archiving serve different needs.
You need both.
Backup is about restoring data after an incident. Archiving is about preserving data in an immutable form for regulatory obligations, litigation and organisational continuity. They are complementary, not alternatives.
Many regulations require a separate, traceable and unalterable retention layer: GDPR, NIS2, decade-long tax retention, industry-specific obligations (healthcare, finance, public sector).
GDPR
EU data residency, access control and full traceability. A documented legal basis for extended retention of business communications.
NIS2
Supports the requirements of Directive (EU) 2022/2555: preservation of evidence and logs for incident management and notification to the competent authority.
10-year retention
Retention policies compatible with Italian civil and tax obligations for the preservation of business communications and attached invoices.
ISO 27001 · 27017 · 27018 · 9001
Designed and operated by a company certified for information security, cloud security, personal data protection and quality.
Frequently asked questions
Everything you need to know before you choose.
Exchange Online mailboxes have grown to 100 GB: do I still need to archive email?
Yes. Since 1 August 2026 the Microsoft 365 Business plan mailboxes are 100 GB, but capacity and retention are two different things. The mailbox does not provide immutability, governed retention, legal hold or granular restore, and on Business Basic and Standard the built-in archive stays at 50 GB. Microsoft also forbids using journaling or transport rules to copy mail into an Exchange Online mailbox for archiving purposes: journaling belongs on a dedicated external archive, which is exactly what this service is.
What is the difference between email backup and email archiving?
Backup is about restoring data after an incident — accidental deletion, corruption, ransomware. Archiving is about preserving email in an immutable form for regulatory obligations, litigation and organisational continuity. They are complementary: backup answers "can I restore?", archiving answers "can I prove?". Many regulations require both.
Which mail servers are supported?
The service works with Microsoft 365, on-premise Exchange, Google Workspace, Zimbra and any other SMTP or IMAP compatible mail server. Ingestion can happen via real-time SMTP journaling (maximum compliance), native connectors polling mailboxes, or batch import of existing PST / OST / EML archives.
Is the archive compatible with Italian PEC (Certified Email)?
Yes. PEC (Posta Elettronica Certificata) mailboxes are archived via a dedicated IMAP connector that preserves the legal validity of the acceptance receipt, the delivery receipt and the transport envelope. A critical requirement for Italian organisations subject to tax retention obligations and for those dealing with the Italian Public Administration.
What is RFC 3161 signing and how can it be verified in court?
RFC 3161 is the international standard for certified time-stamping. Every archived email receives a digital signature with a timestamp issued by a certification authority, proving beyond doubt that the message existed on a certain date and has not been altered since. Integrity can be verified independently of the archive itself: a court-appointed technical consultant can re-verify it with standard tools, a key requirement to use email as evidence in civil or criminal litigation.
Can the archive be deployed on-premise or only in the cloud?
Both options are available. In the cloud, the service is fully managed by AtWorkStudio with data in the EU. On-premise, the virtual appliance can be installed in the customer's own datacentre, useful for organisations with strict data sovereignty policies or deep integration needs with internal systems. In both cases storage can live on local volumes or on S3, S3-compatible, Azure Blob or FTP object storage, with multi-volume support for high availability.
How long can I retain emails? Are there time or volume limits?
There are no service-imposed time limits: retention policies are fully configurable — months, years or unlimited retention. You can define different rules per mailbox, group, domain or per any saved search (e.g. only mail from one department, only emails with certain attachments). On volume, the service scales linearly: adding storage does not require reindexing the existing archive thanks to incremental indexing.
MIMIT Cloud and Cybersecurity Voucher 2026
This service is eligible for the voucher: a 50% non-repayable grant.
AtWorkStudio is an approved supplier. The grant covers 50% of the expenditure, up to €20,000, as a direct purchase or a subscription of at least 24 months. The application must be submitted before buying: drafting opens on 20 October 2026, submissions from 10 November 2026 to 20 January 2027, first come first served.
Codes to enter in the application
VCCFA2600000145-D9
Do you need to retain email in a compliant and searchable way?
Tell us about your organisation’s requirements — retention, applicable regulations, mailbox volumes. We will show you how Email Archiving can simplify audits, eDiscovery and retention obligations.