TrustLayer
Book a demo
Compare · TrustLayer and Mimecast

TrustLayer as a Mimecast alternative.

If you're a UK organisation of 100 to 5,000 people on Microsoft 365, running email security and archiving with a small IT team, this is a fair comparison of the two.

One difference up front: Mimecast sells you email security. TrustLayer is a platform with four layers, and email is one of them. If your Mimecast estate also includes Cloud Web Security, that matters more than usual this year.

LayerTrustLayerMimecast
MailEmail Security + ArchiveEmail Security + Archive
BrowseWeb, CASB, AI ExposureCloud Web Security, ends 2 Aug 2027
UsersFull training libraryEngage, separate product
PostureMicrosoft 365 configurationNot offered
What actually differs

Three real differences.

Mimecast is a capable email security product. Most of what it does, we do. Comparison tables that suggest otherwise are wasting your time. So here is where the competition separates:

01How long you can keep the archive
02We'll manage the archive move
03What it costs, before you talk to anyone
01 · How long you can keep the archive

Mimecast's Governance, Compliance and Insight Suite runs a seven-year retention default, with extensions available on request, inside an account-level maximum retention setting.

TrustLayer's Compliant Email Archive retains indefinitely by default, and you can configure it shorter if your policy says so. No ceiling to request an increase to. Changes to retention need a second approver with the Data Guardian role, a four-eyes process, and any access to a message by someone who wasn't a party to it is audited in real time.

02 · We'll manage the archive move

Leaving an archiving vendor is the hard part, and most comparison pages pretend it isn't. We run a managed migration through a specialist partner: scoped, assessed and reported before anything moves, and run in parallel with the old archive so nothing stops.

The first conversation covers your volumes, your retention obligations and who does what, so the plan is real before you commit to anything.

03 · What it costs, before you talk to anyone

Mimecast publishes no pricing. Every plan tier ends in "contact sales".

TrustLayer publishes indicative per-user pricing on the site. Mail is from £2.70 per user per month as the Email Advanced bundle, at 750+ users, billed annually. Your BT account team, MSP or reseller confirms the number for your headcount.

Your web layer is on a clock

If you run Mimecast Cloud Web Security, this is the bigger decision.

Mimecast stopped selling Cloud Web Security on 2 August 2026, and the service shuts down on 2 August 2027. Customers were told to select their own replacement. No successor product was named, and Mimecast is not offering one.

If that's you, you are procuring a web security product between now and next summer whether you intended to or not. Which makes this a reasonable moment to ask whether the web layer should sit with the same platform as your email, rather than becoming a third vendor.

TrustLayer Browse covers web security, CASB and AI Exposure from the device. No proxy in the traffic path, so no rerouting and nothing to slow down. Malicious and off-policy sites blocked on the laptop itself, in the office or on hotel wifi. A live list of every cloud app in use, including the ones nobody signed off. And allow, track or block controls on AI tools by user, group and action, with an evidence export for auditors and insurers.

What to do about Mimecast's Cloud Web Security shutdown →
Service ends
2 Aug 2027
Sales stopped 2 August 2026. No successor named.
£3
per user / month
Web Security
£5.70
Web + CASB bundle
AI Exposure included
Indicative, at 750+ users, annually.
Side by side

Most rows tie. These are the ones that don't.

Sources: vendor documentation and public pricing, read September 2026.
TrustLayer
Mimecast
Published pricing
Indicative per-user pricing on site
Contact sales on every tier
Archive retention ceiling
Indefinite by default, configurable shorter
7 years default, extensions on request
Managed archive migration
Via a specialist partner
Not established
Web security
Browse, from the device, no proxy
Cloud Web Security shuts down 2 Aug 2027
Cloud app discovery and control (CASB)
Included with Browse
Not offered
AI tool visibility and control
AI Exposure, allow / track / block by action
Browser Isolation only
Microsoft 365 configuration posture
Posture layer
Not offered
Access to mail during an M365 outage
Read archived mail only
Continuity with send and receive

Both treat archiving as an add-on, both cover out-of-hours, and both run awareness training as a separate product. Mimecast wins on continuity. The rest of the table is where the decision sits.

Fair is fair

Where Mimecast is the better choice.

You need to keep sending and receiving during a Microsoft 365 outage.
Mimecast includes continuity with an emergency inbox from its entry tier. With TrustLayer you can read archived mail during an outage, but you can't work from it. If riding out an outage is a board-level requirement, that's a real reason to stay.
You need to govern message content inside Slack and Zoom.
Mimecast bought Aware in 2024 and captures and supervises collaboration content for compliance. Our CASB shows you who is using Slack and Zoom and lets you control access and file movement, and our archive journals Teams messages. Governing what is said inside Slack and Zoom is a different job and Aware does it.
You need support at global scale.
Our primary support team is UK-based, with international customers covered out of hours through a separate team. Mimecast runs a single global 24/7 operation.
You've just renewed.
Switching email security mid-term rarely pays for itself. Talk to us six months before your renewal date instead.
What switching involves

Three moving parts. None of them touch each other.

Deployment

Microsoft 365 Transport Rules and Connectors, or traditional MX routing. Pick either, switch with a wizard. Same quarantine engine and protection layers on both paths.

Your existing archive

Managed migration as above. You can run archiving in parallel during cutover, so nothing stops while the historic data moves.

Adding Browse at the same time

Pushed through Intune, Jamf or any MDM, or a link for the stragglers. Windows and macOS. No proxy to stand up, so it doesn't interact with the mail cutover at all.

Proof
4,000+
organisations
700m
threats blocked
16+
years in UK security
Best Email Security Solution
TEISS Awards 2026
"While Microsoft has basic security functionality, we needed more sophisticated security tools to protect our employees, but also at the right price. TrustLayer gives us advanced security and also has a far more personal and specialised security service."
Julian Daniel, Head of IT, Hallmark Hotels
Other comparisonsProofpointForcepointBarracudaMimecast Cloud Web Security shutdown