S43–5 days
A salesperson deletes the thread that proves the delivery, or ransomware renames every mailbox. We keep a separate journaled copy of all mail, retained for seven years and searchable in seconds, with access locked away from the people who send it.
If any of these has already happened once, the archive is overdue.
What we need: admin access to the mail platform (or a capture address we may add), the retention your auditor expects, and one person to sign off the first restore test.
Cloud archives in the region run per user per month; a server licence is a one-off plus a Windows host. Ours is a flat yearly price.
| Service | Typical arrangement | With SifuMail |
|---|---|---|
| 15-user cloud archive | RM 1,300–2,600 / year | RM 900 / year, Nett |
| Retention | as long as the mailbox exists | seven years, deletion-proof |
| Storage | per-user quota, mixed with live mail | pooled, held apart from mailboxes |
| Recovering one thread | restore the whole mailbox backup | search and export in minutes |
| Who can read it | whoever holds the admin password | separate audit role, logged |
Nett — No SST charged
We list the mailboxes, the retention you must meet and who may search; you approve that policy in writing before anything is deployed.
A separate store is built, journaling starts, and a week of real mail is captured before anyone depends on it.
We restore one real thread you choose, show the search log, and the invoice follows that acceptance.
A dashboard proves nothing. Ask us to restore a thread from a date you name, in front of you, and to show who searched the archive last month. If that cannot be done inside your own instance, the retention promise is decoration.
A host backup snapshots a whole server, and it usually sits in the same account you are trying to protect against. Journaling captures each message as it passes, into a store with its own credentials, so ransomware or a deleted mailbox cannot reach it.
No. Capture happens at the mail server, not on their devices. The archive is a second copy they never see unless you grant someone the audit role — and granting it is logged.
Malaysian tax and company law expect seven years of records, which is why seven is our default. If a dispute or investigation is live, legal hold overrides the policy so nothing expires while it matters.
Their access is removed the same day and the mailbox is kept, not deleted, until you decide. The journal copy stays searchable by the people you nominate, including mail they already deleted themselves.
Send your mailbox count and the retention your auditor expects. You get the yearly price, the one-time setup and a restore test date — before anything is deployed.