Features · Hand over
Hand it over in the format that is asked for
An auditor wants PDF, a lawyer the originals, a new mail program an mbox. MailVault hands over the same selection in any of these formats, with an index and the digest of every message.
The formats
| Format | For |
|---|---|
| One file per message, to read and file. The file name can follow a pattern such as “2024-03-28 – Subject”. Pictures in the message can be left out; what a message links to is only fetched if you explicitly ask, because that reaches the sender's servers. If you like, each PDF carries the message's attachments inside it. | |
| EML | The message byte for byte, as the archive holds it. The format a lawyer or a court asks for. |
| mbox | All messages in one file, which Apple Mail reads through File ▸ Import Mailboxes, and Thunderbird too. |
| Maildir | One file per message, in the folder layout many mail servers use. |
| Portable archive | The messages as .eml plus an HTML page that searches and displays them in any browser, with nothing to install, no server and no network. In five languages. |
You export a selection, or exactly what a query finds. On request MailVault also writes a zip file and its checksum, for sending. The export sheet remembers its settings for next time.
The PDF with its attachments
A PDF is often the only copy of a message that leaves the building: to the auditor, to a court, to the other side. The attachments are part of the message, and with Embed attachments in the PDFs they travel inside the PDF:
- Clicking an attachment's name in the message header opens it.
- PDF viewers with an attachments list show them there too.
- The pages stay exactly as they were drawn: the attachments are appended to the finished PDF as an incremental update, and the PDF before it is still there, byte for byte, at the start of the file.
- Each PDF grows by the size of its attachments.
If a PDF cannot take its attachments, it is written without them, and the export says how many PDFs that affected. Whether attachments were embedded, and how many, is also recorded in the export's entry in the audit journal. On the command line the option is --attach-files:
mailvault export "Archive.mailvault" Handover --format pdf --attach-files
Readable without us
Switzerland's GeBüV requires records to be available for inspection until the end of the retention period and, on request, to be made readable even without tools (Art. 6). An archive that only its vendor's software can read depends on that vendor still existing. The portable archive depends on a browser.
With an index and digests
Next to the messages, an export contains an index as index.csv (semicolon-separated) and index.json. One line per message: SHA-256, Message-ID, date, sender, recipients, subject, folder, account, size, number of attachments, retention class and when the period ends.
MailVault adds the compliance report as it stood at the time of the export, the seals, and instructions for recomputing the journal, the seals and every message without MailVault. A whole-archive export carries the complete journal. A partial export carries only the entries about its messages and about the archive itself, such as seals, checks and policy changes, because the complete journal also covers other people's correspondence; the whole chain can be recomputed in the archive the export came from. Every export and printout is recorded in the audit journal. An archive kept where nothing can be written still exports; the export cannot be recorded there, and MailVault says so.
What goes out comes back whole
An export is only as good as what comes back from it. A message that came back one byte shorter would have another digest, and to an archive it would be another message.
An mbox, Maildir or EML export, and the portable archive, can be read back into an archive just as MailVault wrote them, index and report still in the folder. Every message comes back: in its mailbox, byte for byte, with the same digest. In the portable archive, a message that came attached to another stays an attachment. Whatever the archive already holds is recognised and not stored twice.
Printing
A selection can be printed on paper or to PDF, with only the headers if you like, as a list for an audit, for example. Printing stays available without a licence after the trial.
Back into a mailbox
An archived message can be restored to the mail server, into the mailbox it came from or another one. It is appended with its original delivery time, so it sorts where it belongs rather than at the top. In the app this is the only place MailVault writes to a mail server, and every restored message is recorded in the audit journal with the server and mailbox. On the command line, mailvault upload puts a whole archive back on an IMAP server with its folders, flags and delivery times.
A single message can also be dragged to the Finder or saved as .eml. Apple Mail, however, does not accept .eml files dropped onto its mailboxes; use the server route or an mbox export instead.
Questions
Can an auditor read the archive without MailVault?
Yes, with the portable archive. It opens in any browser, with nothing to install and no network.
How do I get mail back into Apple Mail?
Through an mbox export and File ▸ Import Mailboxes in Mail, or by restoring messages to the server.
Can I export email to PDF with its attachments?
Yes. With Embed attachments in the PDFs the attachments become part of the PDF; clicking an attachment's name in the message header opens it. Each PDF grows by the size of its attachments.
Can an export be read back in?
Yes. mbox, Maildir, EML and the portable archive give back every message byte for byte when read back in, each in its mailbox. Whatever the archive already holds is not stored twice.
Does exporting need a licence?
Not during the thirty days. After that exports need a licence; printing, reading and verifying remain available without one. More on the download page.
Try it on your own mailboxes.
Thirty days with everything open, no sign-up. Or we set up the first archive with you.