How to Buy

License Options

Please find below the various license options for SafeGuard Encryption. Whatever your encryption needs, Sophos has the right combination for you. Unsure what each module includes? The chart on this page provides all the details in a handy comparison.

SafeGuard Enterprise and Sophos Mobile Advanced bundle

Combines the best of both worlds. Get the entire SafeGuard Enterprise bundle, seamlessly integrated with our Sophos Mobile device management platform.

SafeGuard Enterprise Encryption

Our SafeGuard Enterprise Encryption includes SafeGuard Disk Encryption and SafeGuard File Encryption in a single convenient license. To secure your data everywhere and prevent data loss, you need both full disk encryption and file encryption. SafeGuard Enterprise provides both capabilities, along with centralized management and reporting.

SafeGuard File Encryption

SafeGuard File Encryption provides file-level encryption through two options: file/folder encryption and next-generation synchronized encryption. Regardless of the option you choose, you can still secure files everywhere; on computers, removable media, cloud storage, and through file shares.

SafeGuard Disk Encryption

Sophos provides centralized management for full disk encryption with the ability to centrally manage device encryption for BitLocker/FileVault 2. You can deploy and manage full disk encryption across Windows and Mac computers using SafeGuard Disk Encryption or Sophos Central Device Encryption.

Sophos Central Device Encryption

Sophos Central Device Encryption lets you centrally manage Windows BitLocker and macOS FileVault native full disk encryption from the simple, intuitive, web-based interface. There is no server to deploy and no need to configure back-end key servers, meaning you can deploy and start securing data in minutes.



Modules Sophos Central Device Encryption SafeGuard Disk Encryption SafeGuard File Encryption  SafeGuard Enterprise Encryption SafeGuard Enterprise Encryption and Sophos Mobile Control Advanced
Manage BitLocker and FileVault Centrally manage native operating systems’ encryption technologies
Full Disk Encryption for Legacy Systems Full disk encryption for Windows 7 systems without BitLocker
Password Protect Files Create self-extracting, password protected HTML5 files for secure collaboration with external parties
File/Folder Encryption Protect files on selected folders
Encryption for Removable Media Protect data on removable devices, such as USB sticks and optical media
Encryption for File Shares Protect files and folders on local or network shares
Centralized Management Set policies for groups and devices from a centralized console Web-based On Premises On Premises On Premises On Premises
Cross-Platform Key Management Ensure only your users with authorized application have access to your encrypted data  
Compliance and Reporting Demonstrate compliance with data security regulations
Secure Workspace Enable secure collaboration across iOS and Android, providing seamless access to encrypted files        
Self-Service Key Recovery Allows users to access recovery key for BitLocker and FileVault device encryption      
Mobile Security View, access, and share encrypted data on mobile devices        
Mobile Device Management Protects data in the event of a lost or stolen device