Paubox
👤 Hoala Greevy (Nothing but email since 1999 (Critical Path). Knew deliverability cold — so 'encrypt without breaking the inbox' was home turf.)🌐 site𝕏LinkedIn
HIPAA forces healthcare to encrypt email. Paubox won by deleting the portal rivals forced on recipients.
Will it work? · our read
Killed the portal. HIPAA makes encrypted email non-optional. Paubox won by deleting the portal rivals forced on recipients — the risk is Google/Microsoft baking that convenience in natively.
01How the money moves
Clinic must email PHI; HIPAA bans plaintext
→
Paubox auto-encrypts every send, no portal
→
Org pays a monthly SaaS fee to stay compliant
02The numbers
4,000+
customers, all 50 states
Paubox '22
70M+/mo
emails secured
Paubox '22
$14M
raised, Arthur Ventures
Paubox '22
First-party counts are from Paubox's Aug 2022 raise; likely higher today. Paubox raises $10M (Aug 2022)
Latka estimates about $10M ARR in 2024 (up from $1.2M in 2018) — not company-confirmed.
03Weight class — CENTStap an axis
Control High
Owns the brand, the deliverability infra, and the direct customer relationship — not a reseller.
04The key move
Kill the portal
Rivals made recipients open a portal and type a passcode to read a 'secure' email — so staff skipped it. Paubox encrypts every send and it lands in the normal inbox. Friction gone, compliance follows.
fact
The counter-intuitive move
Convenience is a thin moat. Google Workspace and Microsoft 365 already sign BAAs; make seamless encryption native and the standalone layer commoditizes.
our read
05Where the moat is
Why a convenience layer holds on top of a legal mandate:
HIPAA: encrypt PHI or face OCR finesNo portal — so staff actually send secureBolts onto Google/Microsoft, no migrationSigned BAA + HITRUST CSF certified
06How it diesmedium confidence
Dead twin: portal encryptors like Zix kept the friction, got absorbed into OpenText. Paubox's mirror risk: Google/Microsoft make seamless HIPAA encryption native, and a convenience layer loses its reason. our read
Show evidence · counter
Evidence: Google and Microsoft sign BAAs but still require heavy config; Paubox hit the Inc. 5000 five straight years while they left the gap open.
Counter: Healthcare buys slowly and hates re-migrating email infra; deliverability at 70M+ emails/mo is hard to match; platforms show little urgency to make BAA-encryption truly seamless.
07Against rivals
Paubox's angle: priced per organization and zero recipient friction, vs per-seat tools and legacy portals. our read
08Who uses it
Clinics & practicesHospitalsHealth plansTelehealth startupsDigital health cos
★Would it work for you?
Pick a market where a law makes buying non-optional. Now: what humiliating friction do the incumbents force on users that you could simply delete?
Paubox's wedge wasn't encryption — it was deleting the portal. What friction could you delete? We don't score you — you answer.
🚀Use it as a launchpada prompt for your own AI
Copy → paste into your AI → then develop it freely in the conversation.
You are a sharp, honest startup strategist. Use the proven case below as a launchpad for MY idea — help me find my own angle, not copy it.
<my_profile>
Domain I know: [your domain]
My unfair advantage (access/audience): [your edge]
Interests: [your interests]
Resources & goal: [your resources] · [your goal]
</my_profile>
<case name="Paubox" model="saas">
What it does: HIPAA-compliant email that encrypts every message and delivers it to the recipient's normal inbox — no portal, no passcode.
Why it won (moat): Forced legal demand + removed the friction incumbents kept + email-deliverability expertise + native Google/Microsoft integration.
Weakest axis (CENTS): Crowded field (Virtru, Zix, LuxSci) and the real threat: Google/Microsoft could make seamless HIPAA encryption native.
How it could die: Platforms commoditize seamless encryption, or HIPAA safe-harbor guidance softens the must-encrypt mandate.
</case>
<task>
Be a skeptical operator, not a cheerleader. No generic startup platitudes. If my angle is weak, say so plainly.
First, a reality check: markets like this mostly fail. State the honest base rate (how crowded/hard is this?) and the ONE specific thing that would have to be true for ME to be the exception — grounded in my profile above.
Then a compact table:
- Fit — does this pattern suit my edge, or fight my gap?
- Angle — my sharpest differentiation vs Paubox (concrete, not "better UX")
- Distribution — exactly where my first 100 users come from (this is the hardest part — be specific, not "content marketing")
- Risk — its "how it dies" (above) in MY situation
Finish with one line: "The single thing to do next."
Use only the facts above; if data is thin, say so — never invent numbers.
Then stay with me and go deeper on whatever I ask — tech stack, rough cost & time, the smallest MVP to test, pricing, or timing.
</task>
✓ Copied — paste into your AI
👤Placeholders like [your domain] auto-fill from your profile — example values for now.Set up profile →
Sourcesupdated · daily
Paubox: $10M raise, 4,000+ customers, 70M emails/mo (Aug 2022)HIPAA Journal: interview with founder Hoala GreevyLatka: revenue estimate about $10M ARR (2024)Paubox: Inc. 5000 five years in a rowCrunchbase: Paubox funding & profile
Revenue is a third-party estimate: Latka pegs about $10M ARR in 2024 (up from $1.2M in 2018) — Paubox has not confirmed it, so treat it as EST, not official. The hard tiles (4,000+ customers, 70M+ emails/month, $14M raised) are first-party from Paubox's own Aug 2022 funding post and are now dated (likely higher). Not bootstrapped: $14M raised over two Arthur Ventures rounds. The 'kill the portal / no passcode' positioning is Paubox's own documented claim (fact). The commoditization 'dies' thesis and the platform-native threat are our read (infer), not a stated event. We never score you.