xorlab is an email security product that analyses inbound email with behavioural AI. It models an organisation's communication patterns, scores each message on relationship, relevance, reputation and similarity, and then applies an action such as quarantine, a warning banner, attachment removal or delivery. It also includes an attachment sandbox, abuse-mailbox automation and self-service quarantine. It can complement Microsoft 365 or replace an on-premises secure email gateway, and is offered as a cloud service, on-premises or hybrid.
xorlab AG is headquartered in Zurich, Switzerland, and its funding announcement names no majority owner. According to the vendor's documentation, cloud processing for Swiss customers runs on Swiss infrastructure, while other customers are served mainly from Hetzner in Germany and Azure West Europe. On-premises deployments keep processing local. Some sub-processors, such as Microsoft Azure and Cloudflare (DNS records), are US companies, so a European organisation should check the data processing agreement.