Mimecast Data Leak Prevention review
Focused email DLP for Microsoft environments, with detailed inspection and policy controls.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Mimecast Data Leak Prevention is a cloud-based email security service for organizations that need to detect and control sensitive information leaving through email. It examines message body text, headers, subjects, HTML, attachments, dictionaries, regular expressions, images, and fuzzy hashes. Administrators can apply policies to specific users and groups, then block, hold, copy, encrypt, securely deliver, or annotate messages. The product suits Microsoft-centered organizations that want centralized email policy management, incident evidence, review queues, and secure handling of sensitive messages.
Pricing is contact-sales only. The Advanced plan adds data protection to email security. Professional expands protection across endpoints, cloud, and email, and includes cases, forensic search, pre-built integrations, and API base access. Enterprise adds extended event retention, cases archival, and enhanced API integrations. Gov provides a FedRAMP-authorized SaaS solution for government organizations. This structure makes the right tier depend on whether the requirement is email control alone or broader insider-risk and investigation capabilities.
Microsoft Exchange, Microsoft 365, Secure Active Directory, and Microsoft Outlook are listed integrations, while web, API, Windows, and macOS are supported platforms. The service also provides policy-based TLS encryption for email in transit, Secure Messaging for sharing sensitive information within Mimecast’s network, document metadata removal, and conversion to PDF or ODF. It is a strong fit for email leakage prevention and incident review, but organizations seeking dedicated data discovery, removable-media controls, or a clearly defined broad cloud-app DLP scope should consider a wider platform instead.
Mimecast Data Leak Prevention pros and cons
- Where it wins
- Inspects email text, headers, HTML, attachments, images, and patterns
- Blocks, holds, encrypts, or securely delivers policy-triggered messages
- Supports evidence workflows, metadata removal, and granular user controls
- Where it doesn't
- Pricing requires contacting sales
- Its core DLP focus is email rather than data discovery
- Broader endpoint and cloud controls depend on higher-tier capabilities
Mimecast Data Leak Prevention fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update