A computer-implemented system and method for secure electronic message exchange includes receiving an encrypted message between one of an inmate or an outside user. The message is transmitted between the users without decrypting the message at the server to ensure privacy. In various configurations, the message is stored at the server in encrypted form and a notification message is transmitted to a recipient. The recipient may then request retrieval of the message from the server. After being authenticated, the encrypted message is provided to the recipient without being decrypted at the server.