Departo
powered by Zscaler
Why Departo Security Pricing FAQ Book a call

One SIM.Global Travel.Zero Trust.

Unlimited global data at a fixed price per SIM

Book a 30-minute call How it works
150+
countries covered
500+
carrier partners
24/7
support

Why mobile data is a security risk

Most security controls were built for offices and data centres. People who travel spend much of their time outside them.

Unpredictable roaming costs

Roaming fees can escalate quickly, which makes travel budgets hard to control.

Fragmented security policies

Rules for mobile access are often defined per country, carrier or device group, which makes consistent governance harder.

Unsecured networks

Hotel, airport and cafe Wi-Fi and foreign mobile networks put sensitive company data at risk.

Limited visibility

Security teams see device management data, but little of what mobile data traffic actually reaches.

Phishing and stolen credentials

Mobile users face the same web threats as anyone else, often with smaller screens and fewer visual cues.

VPN management complexity

Client software, gateways and exceptions add operational load, and a connected user may reach a wide network segment.

Patchy global coverage

In remote or underserved areas, connections drop and working hours are lost.

One SIM solves all seven

Fixed prices, 150+ countries and Zscaler Zero Trust security on every connection.

What the Global SIM includes

Global coverage

150+ countries over 500+ carrier partners, with fast, reliable data, even where local networks are weak.

Predictable cost

A fixed price per SIM, so roaming costs no longer vary from month to month.

Secured by Zscaler

All mobile data runs through Zscaler Zero Trust security, managed by Departo. SIMs are provisioned securely and work alongside your VPN.

Central control

IT provisions eSIMs, tracks usage and sets data policies remotely, including on personal devices (BYOD).

Live insight

Usage statistics, alerts, content filters, traffic shaping and quality of service controls.

Support

A dedicated account manager and 24/7 support.

Zscaler security on every Global SIM

Global SIM traffic runs through Zscaler Cellular Edge instead of going straight to the internet. Departo applies Zscaler security policies to every connection, in every country.

Zscaler Internet Access (ZIA)

Secures access to
The internet and SaaS applications
Question it answers
Is this destination and content allowed?
Typical controls
URL filtering, DNS security, threat protection, cloud firewall and data loss prevention (licence dependent)

Zscaler Private Access (ZPA), optional

Secures access to
Private enterprise applications
Question it answers
Is this user allowed to reach this application?
Typical controls
Application segmentation, inside-out connections, identity and device-based policy where supported

A standard SIM compared with Departo

Dimension
Standard SIM
Departo Global SIM
Security policy
Managed separately from connectivity.
Zscaler security policies are applied to all mobile data, managed by Departo.
Visibility
Usage and data volume reporting.
Insight into destinations, categories and blocked threats through Zscaler logging.
Threat protection
Relies on device and endpoint controls.
Adds network-level inspection and threat protection through ZIA.
Access control
Internet access is largely open.
Policy-based internet access and, where supported, application-specific access through ZPA.
Private applications
Through a VPN client and gateway.
Application-specific access instead of network-level access.
Governance
Spread across carriers, regions and device groups.
Policies defined centrally, with the same baseline in every region.
Operating model
Contracts and policies per country or carrier.
One SIM and one set of policies across 150+ countries.
Book a call See how this works for your team in 30 minutes.

Example scenarios

Professional services: consultants crossing borders every week

Hotel, airport and client Wi-Fi plus local mobile networks. Protection varies with each network.

With Departo
Company phones and tablets use Departo SIMs, with all traffic secured by Zscaler.
Expected benefit
The same protection and visibility in every country.

Healthcare and pharma: sensitive apps on tablets outside controlled sites

Broad VPN access, or direct internet access with device controls only.

With Departo
SIM-based connectivity with ZIA protection, and ZPA for approved private applications.
Expected benefit
Tighter, application-level access and a clearer record of access activity.

International field sales: CRM and quoting tools in many countries

Device-level controls and open mobile internet access.

With Departo
Managed smartphones send all web and SaaS traffic through Zscaler Internet Access.
Expected benefit
Less exposure to malicious sites, with one set of policies everywhere.

VPN replacement: a few private apps behind mobile VPN gateways

Client VPN with network-level access and gateway capacity planning.

With Departo
Selected applications move to application-specific ZPA access.
Expected benefit
Simpler operations and a narrower access scope for those workflows.

Pricing

30-day plans

Per 30 days
3 GB
EU, US and UK
30 days
$10per SIM
10 GB
EU, US and UK
30 days
$23per SIM
Unlimited
Worldwide
30 days
$54per SIM

Monthly unlimited

Billed per month
EU, UK and US
$35
per SIM per month
Asia Pacific and Japan
$39
per SIM per month
Africa
$45
per SIM per month
Worldwide
$49
per SIM per month

Prices are in US dollars per SIM and exclude VAT. 30-day plans are valid for 30 days. Monthly unlimited plans are billed per month. A fair use policy applies to all unlimited plans.

Ready to equip your team?

Tell us how many people travel and where. We recommend the right plans and send you a quote.

Book a call Email sales

What's included in unlimited plans

Allowed by default

VPN and tunnelling
Entire VPN category
Cloud storage
Office 365, OneDrive, Google Drive, Google Cloud Storage, Dropbox, Box, Evernote
Email
Gmail, Outlook 365, Exchange, IMAP, POP3, SMTP, Yahoo Mail, Zoho Mail, webmail
Calls and messaging
WhatsApp (including calls), Skype, Slack, Signal, Telegram, Viber, FaceTime, iMessage, WeChat, SIP, WebRTC, Cisco Spark, WebEx
Business and travel apps
Salesforce, SAP, Dynamics NAV, AWS, PayPal, Google Maps, Waze, Uber, Booking.com, Bloomberg
Web categories
Business, Finance, Travel, News, Government, Search, Sports, Food and restaurants
Social
LinkedIn, Twitter

Blocked by default

Social and communities
Facebook and Instagram, virtual communities, personals and dating
Entertainment and streaming
Netflix, Hulu, YouTube, TikTok, Pandora, Sonos, music, streaming media, mobile entertainment
Adult, gaming and gambling
Adult, mature and pornographic content, nudity, gaming, gambling
Security threats
Malware, botnets, phishing domains, potential malware victims, peer-to-peer
Sensitive content
Weapons, violence, self-harm, suicide, tobacco, occult, religion, politics
Other categories
Military, real estate, photography, pets, plagiarism, science, non-profit

Fair use policy applies. You can unblock any category in the portal. Data bundles have no category restrictions. Ask us about apps that are not listed.

Manage everything in one portal

Your company gets its own environment in the Departo portal, where IT handles credit, users and policies.

Credit

See remaining credit, usage and expiry dates at a glance, and add credit manually with a note.

Users

Invite users by email. Each user has a role, individual or company billing, a credit limit or uncapped, and a status.

Policies

Pick a ready-made policy such as Travel essentials, Restricted access or Work focus, or build your own.

Products

Manage the plans your team uses, each with its data allowance, duration and status, for example 10 GB for 30 days.

Build policies from filtering categories

Malware
Phishing & fraud
Adult content
Weapons & violence
Gambling
Social networking
Streaming media
Online gaming
File sharing
Anonymizers & proxies

Start with a pilot

Test Departo with a small group of users in the regions that matter to you, against success criteria we agree together. You only decide on a rollout once the pilot has proven itself.

Before the pilot
  1. 1

    Discover

    Where your people travel and how they connect today.

  2. 2

    Design

    Policies, devices and which apps your team needs.

The pilot
No commitment
  1. 3

    Pilot

    A controlled group in selected regions, with clear success criteria.

  2. 4

    Validate

    Test routing, policies and support in practice.

Selected usersSelected regionsAgreed success criteria
After you decide
  1. 5

    Deploy

    Phased rollout, SIM provisioning and user guidance.

  2. 6

    Optimise

    Review logs, refine policy and extend the scope.

Discuss a pilot Read the whitepaper

Frequently asked questions

Can't find your answer? Ask us directly.

Contact us
01Do we need to be a Zscaler customer?
No. Departo manages the Zscaler security for you, so every SIM is protected from day one. If you already use Zscaler, Departo adds protection for mobile data on top.
02We already use Zscaler. Why do we need this?
Zscaler on laptops and in the office does not cover mobile data on phones and tablets. On 4G or 5G, that traffic goes straight to the internet. Departo routes all SIM traffic through Zscaler, so mobile data is protected too.
03How does this protect against phishing and malicious sites?
Through Zscaler Internet Access (ZIA): URL filtering, DNS security and threat protection block malicious destinations before they reach the device. Mobile users face the same web threats as anyone else, often with smaller screens and fewer visual cues.
04Can we apply one policy across all countries?
Yes. Instead of rules per country, carrier or device group, the same Zscaler policies apply to every SIM, wherever your people travel.
05Do we get more visibility into mobile traffic?
Yes. Zscaler logs where mobile traffic goes and what it blocks, which is normally hard to see. What you can view depends on your setup.
06Can employees reach private apps without a VPN?
Where the architecture supports it, Zscaler Private Access (ZPA) connects a user to a named application, not to the network behind it. If credentials are compromised, the reachable scope stays limited to what policy permits.
07Does this reduce our VPN complexity?
It can. Selected mobile workflows can move from a VPN client and gateway to application-specific access. That means fewer gateways, exceptions and capacity planning for those workflows.
08What does it cost?
Prices are fixed per SIM. Data bundles start at $10 for 3 GB, unlimited worldwide data for 30 days is $54, and monthly unlimited plans run from $35 to $49 per SIM depending on the region. A fair use policy applies to unlimited plans.
09Does it work where our people travel?
The Global SIM covers 150+ countries over 500+ carrier partners, with fast, reliable data, even where local networks are weak.
10How quickly can we start?
You can start without any setup of your own. Departo manages the Zscaler environment for you, so your SIMs are protected from day one.
11How does IT manage the SIMs?
In the Departo portal. IT handles credit, users, policies and products in one place, provisions eSIMs remotely and builds policies from Internet filtering categories.
12Does this help with NIS2, ISO 27001 and GDPR?
It can support selected controls, such as consistent access governance and logging, in line with Zero Trust as described in NIST SP 800-207. It does not make you compliant on its own: compliance depends on your own controls, processes and legal assessment.
13Does this replace our MDM, identity or endpoint security?
No. A SIM does not identify a person. Your identity provider, MFA, mobile device management and endpoint protection stay essential. Departo adds a network-level control point beside them, inside the same Zero Trust framework.
14What is the risk of trying it?
Low. We start with a pilot: a controlled group of users in selected regions, with clear success criteria. Routing, licences and policy are validated before any commitment, and you decide on the rollout afterwards.

Book a 30-minute call

Leave your details and we reply with a time that suits you. In 30 minutes we look at where your people travel, how they connect today and how a pilot would work for you.

A short scan of your travel patterns and current mobile setup
Advice on plans and pricing for your team
A concrete pilot proposal, without obligations

Prefer email? Write to sales@departo.com

First read the whitepaper (PDF)

Your email app opens with the request to sales@departo.com. We reply with a time and a Teams invite. See our privacy policy.

Departo
powered by Zscaler
Book a call sales@departo.com Whitepaper Privacy policy
departo.com

Zscaler, Zero Trust Exchange, ZIA and ZPA are trademarks of Zscaler, Inc. Departo is an independent provider, powered by Zscaler. Capabilities depend on licensing, architecture, policy configuration and the customer environment.

Download the whitepaper

Beyond Connectivity: securing the global mobile workforce with Zero Trust. 16 pages, PDF, 1.4 MB.

We store your details to follow up about Departo. Read our privacy policy.
Book a call Email us