PreVeil

Market position

Positioned as a lower-cost, easier-to-deploy alternative to enclave approaches such as Microsoft GCC High for defense-sector compliance; one customer quoted on the website said a GCC High quote exceeded $200,000 for 33 users while PreVeil's quote was roughly one tenth of that. The company cites PC Magazine recognition for best encrypted email and file sharing five years in a row, and customers reported achieving perfect 110/110 CMMC scores. It compares its approach to the end-to-end encryption used by consumer messaging systems such as Signal and WhatsApp, applied instead to enterprise email and file sharing.

Keys held only on user devices so a server breach does not expose customer data; elimination of passwords in favor of cryptographic identity; Approval Groups that remove the administrator as a single point of failure; compatibility with users' existing email addresses and with Outlook, Gmail, Windows Explorer and Mac Finder; deployment alongside existing Office 365, Exchange or GSuite systems without changes to them; and packaged CMMC documentation covering all 110 controls at prices the company positions well below government-cloud alternatives.

Technology

End-to-end encryption in which data is encrypted and decrypted only on user devices, so servers hold unreadable ciphertext; encryption keys never reside on PreVeil's servers. Authentication uses cryptographic identity keys instead of passwords. Administrative privileges are governed by Approval Groups that cryptographically require authorization from multiple approvers before decrypted corporate data can be accessed for governance or compliance. The architecture is described as zero trust, with built-in ransomware recovery. Data is stored encrypted on AWS. The Series C release referenced military-grade "FIPS" encryption and plans to expose storage, sharing and messaging capabilities through open APIs.

Go-to-market

Direct sales supported by demo bookings and compliance consultations on the website, a partner network and partner webinars, content marketing (blog, LinkedIn Live sessions, whitepapers, CMMC cost calculators), and a freemium motion in which free individual and third-party collaborator accounts seed adoption within customer supply chains.

Enterprises and smaller organizations in regulated sectors: aerospace and defense contractors, higher education institutions, healthcare providers, law enforcement, law firms, tax and accounting firms, construction, and manufacturing/CNC shops. Buyers are typically those obligated to protect Controlled Unclassified Information or other regulated data under CMMC, DFARS, ITAR, HIPAA, CJIS, FERPA, GLBA or IRS rules. The Series C announcement described plans to expand into professional services, financial services and healthcare.

Geography

Headquartered in Boston, Massachusetts, USA. The company states its products are 100% designed and developed in the USA and describes its email and file sharing as trusted worldwide; customers referenced include an international law firm.

History

The company was co-founded in 2015. A third-party profile lists Randy Battat (CEO), Sanjeev Verma (Chairman) and Raluca Ada Popa (CTO) as co-founders. A $7M Series B is recorded for September 2019, and a $20M Series C led by PSG was announced in October 2022, bringing reported total funding to $27M. At the time of the Series C the company reported over 600 organizations and over 30,000 users in the federal government ecosystem; the current website cites 100,000 users and 20,000 organizations, including 3,000 defense contractors.

Risks & controversies

No controversies are described in the available sources. Data inconsistencies exist across sources: a third-party profile lists an employee range of 1,001-5,000 for a company that other material describes as a startup, and user/organization counts differ substantially between the 2022 funding announcement and current website claims. Most quantitative claims about users, organizations and compliance outcomes originate from the company's own website rather than independent verification.