A Fortify 24x7 brand. Plating over the equipment that holds patient records.Client sign inAsk an engineer
Patient Data Armor
Plate 05 / Mail seam

The referral looks real because it was written by somebody reading your last one.

Mail is the seam in the plating, and it is where practices are actually opened. The message comes from a genuine address at a genuine dental lab or imaging centre, because that mailbox went first. Two lines on this sheet: cover working from inside your own tenant, and the training that shapes what your staff do during the three seconds they spend looking at it.

IronscalesMailbox level, not a gatewaySimulation and training
2 lines / inside the tenant / per mailbox or user
Lines here2
Built byIronscales
Counted inMailboxes or users
SitsInside your tenant

Why this joins by API rather than sitting ahead of your mail

Ironscales operates as a mailbox-level API, which is a different thing from a gateway. Nothing gets inserted ahead of your mail flow, and nobody has to alter a routing record. Mail arrives exactly as it does today. The platform reads what has already reached the mailbox, which lets it reach back into a message delivered an hour ago the moment the same campaign is recognized elsewhere, and lets it sweep every mailbox at once instead of only inspecting new traffic.

For a practice the distinction matters enormously, because the dangerous message is hardly ever the one that looked wrong on arrival. It is the conversation running since last week that suddenly carries an attachment, or the address that had been entirely legitimate right up until Tuesday.

The dangerous message is hardly ever the one that looked wrong on arrival.

Training built around a clinic schedule

Somebody on your front desk gets roughly four seconds between a patient walking up and a message opening on the screen. Hour long courses do not survive contact with that. What survives is brief, frequent, realistic practice, weighted towards the people whose results say they need it and left alone for the people whose results say they do not.

The exercises are drawn from what is genuinely circulating around healthcare: eligibility checks, prior authorization, a supplier announcing new payment details, and records requests carrying just enough clinical vocabulary to pass for routine.

Lines on this plate

Specifications and rates

Every figure below arrives from the billing system while this page opens. Whatever you add sits waiting in the panel while you keep reading.

Fortify-FES+SATSpecification

Mailbox Defense with Training

Ironscales, joined to whichever tenant you run, Microsoft 365 or Google Workspace

Cover living inside the tenant, with the training program alongside it. Impersonation, stolen accounts and hijacked conversations are judged against how your own practice writes, and once something is confirmed the sweep reaches every mailbox that received a copy.

  • Joined by API, which means it still acts on a message already sitting in a mailbox.
  • Impersonation and stolen account detection judged against your own traffic.
  • One person reports a message and the platform hunts down every other copy.
Built onIronscales
JoinsMicrosoft 365 or Google Workspace
MethodMailbox-level API, and never a gateway placed ahead of mail
CatchesImpersonation, stolen accounts, hijacked threads, bad links
IncludesExercises and short training for the same mailbox
Counted inMailboxes, monthly
Fetching the rateper mailbox
taken monthly, up front
QTY
Fortify-SATSpecification

Phishing Simulation and Training

Ironscales training, bought on its own

Training bought separately, for a practice already running mail protection it intends to keep. Realistic exercises, short assignments, and reporting to hand whoever asks how your workforce gets trained.

  • Exercises modelled on campaigns aimed at clinics, labs and billing offices.
  • Short assignments weighted towards the people whose results warrant them.
  • Results per person, which you can file with your own training records.
Built onIronscales
CoversSimulated campaigns and assigned training
ReportingResults per person, exportable
SuitsPractices holding on to the mail protection they already have
Counted inUsers, monthly
Fetching the rateper user
taken monthly, up front
QTY
Material limits

Where the mail seam gives out

Mail cover reduces how often something arrives and how long it lasts once it does. It does not close the seam, and here is the honest shape of that.

  • People can still be talked into things. Training shifts the numbers and it does not produce a workforce that never clicks. Any provider quoting a figure of zero is quoting something they cannot deliver.
  • This covers the mailbox, not the tenant. How your tenant is configured, what your domain publishes about who may send as it, and what your own retention settings say are yours to run. We will advise on all three, and we do not operate them unless that work was bought separately.
  • Fax and portal traffic never touch it. Referrals landing on a fax line, records pulled through a payer portal, and messages exchanged inside a patient portal never reach the mailbox and are not covered by either line here.
  • Training records are not a compliance program. What this reports is evidence you may keep. Deciding what your training policy requires, and demonstrating that you followed it, remains inside your own HIPAA program.
  • Nobody here reads your mail out of curiosity. The platform inspects for threats because you instructed it to. Nothing in a mailbox gets used for another purpose, and the account joining it is scoped to that job alone.
BILLING

Heads up: card statements show FORTIFY 24X7 - Patient Data Armor is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.