Features

This page describes what Secure Email can do, organized by capability. Each feature is written from a business perspective — what it does and why it matters. For setup and technical depth, see the Post-Installation Guide and Admin Guide.

The core of the platform: sending encrypted, HIPAA-compliant email without leaving Salesforce.

• Native Lightning component — compose and send secure email directly from any Salesforce record.

• Any standard or custom object — works from Contact, Account, Case, or any object you configure as a source.

• Templates and merge fields — use Lightning Email Templates with personalized merge fields, or write a message manually.

• Attachments — attach files up to 8.5 MB per message.

• Scheduling — queue a message to send at a future date and time.

What it means for you: sending a HIPAA-compliant email takes the same number of clicks as sending a normal one.Delivery Tracking & Status Insights

Once a message is sent, the platform surfaces exactly what happened to it.

• Real-time delivery status — Created, Processing, Delivered, Partially Delivered, or Failed, synced back to the record.

• Per-recipient tracking — each recipient's delivery and open status is tracked independently via the Email Recipient object.

• Open tracking — see when a recipient has opened a delivered message.

• Secure Email Inbox — a dedicated utility to view, filter, and reply to sent and received messages in one place.

What it means for you: you always know whether a sensitive message actually reached — and was read by — the intended recipient.

Every message is protected end-to-end, with the right delivery path chosen automatically.

• TLS-based direct delivery — 97–99% of recipients receive messages seamlessly, with no extra steps.

• Secure portal fallback — recipients without TLS support are routed to a secure Paubox portal.

• Flexible authentication — secure link, one-time login, or multi-factor authentication (SMS one-time passcode) can be applied or forced via API.

• Key management — Paubox KMS manages and rotates the encryption keys that protect every message.

Secure conversations behave like native Salesforce data, not an external system bolted on.

• Inbound sync — replies route back to Salesforce automatically via messageId mapping.

• Automatic threading — inbound and outbound messages are linked to the correct parent record and conversation.

• Related list & history — every secure email tied to a record is visible in a related list, sorted by most recent.

• Flexible field mapping — map one or multiple email fields per object as valid "To" addresses via Custom Metadata.

Reach many recipients at once without sacrificing the compliance trail.

• Bulk send from List View — send secure email to up to 200 selected records at a time directly from a Contact list view.

• Eligibility check — recipients with and without valid email addresses are separated automatically before sending.

• Template or manual content — use a Lightning Email Template with merge fields, or write the message once for the batch.

Secure email can be sent however your process needs it to be.

• Manual send — from the Lightning component on any record.

• Flow-triggered — auto-send on record status changes, new document generation, or scheduled reminders.

• Apex-triggered — programmatic sending for batch jobs, integrations, or custom logic.

• Scheduled & batch delivery — background batch jobs pick up scheduled or bulk-flagged messages and send them automatically.

• Automated status refresh — a scheduled batch job polls Paubox and keeps delivery status current without manual checks.

• HIPAA-compliant encryption — TLS 1.3+ in transit, AES-256 at rest.

• Zero data retention — Cloud Maven never stores or transmits message content; all traffic is Salesforce ↔ Paubox only.

• Full audit logging — every API and KMS call is logged for a compliance-ready audit trail.

• Independent certifications — Paubox HIPAA Seal of Compliance.

• Optional Salesforce Shield — add platform encryption for data stored inside Salesforce itself.

The platform adapts as your org grows — usually through configuration rather than a rebuild.

• Scalable tenant configuration — multiple credential sets and domains for complex, multi-org environments.

• Configurable UI behavior — control file upload, default templates, from/reply-to defaults, inbox lookback window, and more via Custom Settings.

• Custom lookup relationships — connect Secure Email to any object beyond Contact, Account, or Lead.

• Platform Events & middleware — integrate secure email into broader workflows and third-party systems.

Related Pages

• Get Started with Secure Email — setup and onboarding guide

• Post-Installation Guide — full configuration steps

• User Guides — how to send, bulk-send, and manage secure email

• Automation Guide — Flow and Apex automation details

• Status & Delivery Stages — full delivery lifecycle reference

• Configuration Settings — all configurable settings reference