SafeGuard Encryption

Protect data everywhere, automatically

Sophos SafeGuard encrypts content as soon as it's created. And with the encryption always on, you can enjoy seamless secure collaboration. Synchronized Encryption proactively protects your data by continuously validating the user, application, and security integrity of a device before allowing access to encrypted data.
Zones is your trusted provider of Sophos and end-user security solutions. To place an order or for more information, contact your Zones account manager or call 800.408.9663.


Data protection for lost devices

SafeGuard gives you the ability to manage keys and recovery functions for Windows BitLocker and Mac FileVault 2 encryption from the SafeGuard Management Center.

Real-time threat protection

SafeGuard Enterprise intelligently denies key access from unauthorized or unknown applications. It can also revoke keys from compromised systems and devices by integrating with Sophos Endpoint Protection and Sophos Mobile Control.

Always-on encryption, protecting data everywhere

A transparent encryption/decryption process protects your data without impacting user productivity. Secure your organization's data wherever it is stored, whether on a hard disk, removable media, network file shares, or the cloud.

Cross platform

Internal users can seamlessly access encrypted content across Windows, Mac, iOS, and Android devices*.

Secure collaboration

Allow your users to collaborate with others both internally and externally. Users can easily create password-protected files for external collaboration. SafeGuard wraps the password-protected file in a secure HTML 5 format, which also acts as a secure digital lockbox. The intended recipient can then use the same HTML 5 format to encrypt the updated file before sending it back to the original user, creating a two-way secure collaboration tool with external parties who may not have encryption software.

SafeGuard Encryption is available as the following packages

SafeGuard Disk Encryption

Provides the ability to centrally manage full disk encryption across Windows and Mac platforms. It includes Sophos' own disk encryption for Windows 7 without BitLocker and management of BitLocker and FileVault 2 with secure key management and key recovery.

SafeGuard File Encryption Advanced

Includes two modes, file/folder encryption and Synchronized Encryption.

SafeGuard Enterprise Encryption

A combination of disk encryption and file encryption. While disk encryption protects data in the case of lost or stolen devices, organizations need file encryption to protect data against hacking/malware, unintended disclosure, and files stored on USB drives and the cloud.

SafeGuard Enterprise Encryption plus Sophos Mobile Control Advanced Bundle

Includes synchronization between Sophos Mobile Control and SafeGuard.

*Accessing encrypted files on iOS and Android devices requires Sophos SMC Advanced and Secure Workspace.