The Chase Manhattan Bank to Offer Two-Way Secure Online Communications for its Clients

New York City and Redwood City, CA - March 21, 2000 - The Chase Manhattan Bank, (NYSE: CMB) and Tumbleweed Communications Corp. (NASDAQ: TMWD), a leading provider of secure Internet communications services, today announced that Chase will offer secure two way online communications for its clients who subscribe to Chase's Positive Pay Service. The new Positive Pay Exception Notification System - a communications channel between Chase and its clients - is built on Tumbleweed Integrated Messaging Exchange™ (IME™).

Positive Pay is a service for Chase corporate clients that proactively reconciles their large checking accounts by matching check issuing information that clients provide with checks that are presented to the bank for payment. Chase creates electronic images of checks that should be questioned before they are paid. Chase then uses IME to send their clients an electronic list of those checks and an image of each check. Clients then use the online system to review the check images and determine whether Chase should pay or return the checks. They notify Chase of their decisions securely via Tumbleweed IME.

This new service, called Positive Pay Exception Notification System, is part of Chase's Internet File Delivery services, a group of electronic communications services Chase is building on Tumbleweed IME. IME is a set of products and services that leverage the Internet and existing email and are designed to enable secure, trackable online communication.

"Our clients require immediate, secure access to critical business data," said Ken Smith, Senior Vice President, Chase Treasury Solutions. "We committed last year to building a secure two-way communications channel through which we could provide innovative services to our clients. The new Positive Pay Exception Notification System is the second major application we've undertaken on Tumbleweed IME - the foundation for our secure communications channel. We are delighted to offer this unique new service to our current and prospective clients."

"Chase moved aggressively to deploy Tumbleweed IME as their platform for secure communications with clients and partners," said Jeffrey C. Smith, president and CEO of Tumbleweed Communications Corp. "Chase has evaluated client and market needs and understands how important security is in its customer communications. This innovative application is one of many that Chase - a recognized technology leader - will deploy to leverage the value of IME."

Chase launched Chase Internet File Delivery, built on Tumbleweed IME, in June, 1999. Among the first Chase businesses to take advantage of this new utility was Chase Treasury Solutions, the bank's cash and treasury management unit, which offers corporate clients the ability to access demand deposit account (DDA) statements and other information from the Internet, while providing security and confidentiality not previously available in Internet transfers.

About Tumbleweed Communications Corp.
Tumbleweed is a leading provider of solutions for managing secure communication and collaboration to enable the business Internet. Tumbleweed's robust policy-based framework empowers organizations to safely share and protect critical information, increase customer loyalty and privacy and dramatically reduce costs. Tumbleweed is trusted by 1,000 blue-chip customers including American Express, Chevron, Datek Online, the European Union's Joint Research Council, First Union Wachovia, John Deere, Merrill Lynch, Nike, Northern Trust, NTT, Salomon Smith Barney, Travelers and US Food and Drug Administration. One hundred of the Fortune 500 are Tumbleweed customers. Tumbleweed Communications was founded in 1993 and is headquartered in Redwood City, Calif., with offices around the world.

Except for the historical information contained herein, the matters discussed in this press release may constitute forward-looking statements that involve risks and uncertainties that could cause actual results to differ materially from those projected, particularly with respect to the security features of Tumbleweed's products and the activities of any third party. In some cases, forward-looking statements can be identified by terminology such as "may," "will," "should," "potential," "continue," "expects," "anticipates," "intends," "plans," "believes," "estimates," and similar expressions. For further cautions about the risks of investing in Tumbleweed, we refer you to the documents Tumbleweed files from time to time with the Securities and Exchange Commission, particularly Tumbleweed's Form 10-K filed March 30, 2001 and Form 10-Q filed November 13, 2001. Tumbleweed assumes no obligation to update information contained in this press release.