Spectrum EBP Selects Tumbleweed Solutions to Build Secure Internet Communications Network

REDWOOD CITY, CA - May 16, 2001 - Tumbleweed® Communications Corp. (Nasdaq:TMWD), a leading provider of mission critical messaging software, today announced that Spectrum EBP, LLC, a bank-owned payment system utility that routes electronic bills and payments between billers and consumers, has chosen Tumbleweed to provide a comprehensive Internet security and email management solution. Using Tumbleweed Secure Public NetworkT (SPNT) and Tumbleweed Secure Redirect&153;, Spectrum can establish and control secure email communications between its banking and business partners, and customers.

Tumbleweed SPN and Tumbleweed Secure Redirect offer an integrated, server-based solution to create a secure enterprise-to-enterprise communications channel using Spectrum's existing email infrastructure. By using Tumbleweed SPN and Tumbleweed Secure Redirect, Spectrum can centrally manage and secure the exchange of confidential information sent via email without deploying new desktop software or end-user training throughout their organization.

Tumbleweed SPN uses server-based S/MIME (Secure/Multi-purpose Internet Mail Extensions) to secure messages traveling over the Internet. Tumbleweed SPN allows Spectrum to exchange S/MIME keys with other providers and members, enabling them to establish a secure communications network that is invisible to their end users. Tumbleweed SPN policies automatically encrypt messages sent to specific addresses or domains, and can authenticate and automatically decrypt inbound messages.

To send secure messages to recipients outside their Tumbleweed SPN S/MIME network, Spectrum will use Tumbleweed Secure Redirect. Using the capabilities within the Tumbleweed SPN, messages are scanned for content or other message attributes, such as attachment type or destination address. Based on policies set by Spectrum, messages are re-routed to Tumbleweed Secure Redirect for secure email delivery over the Internet and can be accessed by message recipients using only an email client and a Web browser. Tumbleweed Secure Redirect also allows Spectrum to auto-enroll recipients and users, so a complete secure messaging channel can be established.

"We are committed to providing our bank participants with the best security product which their customers demand. The unique combination of Tumbleweed SPN and Tumbleweed Secure Redirect provides Spectrum with a scalable, flexible communications platform for our customers," said Tim Barnett, CTO at Spectrum EBP, LLC. "Through our partnership with Tumbleweed, we are able to maintain the highest online security capabilities as we expand our solution set."

"Because Tumbleweed's solutions take advantage of the Internet's broad reach, we enable financial customers like Spectrum to bring a virtually unlimited number of partners into their secure communication network quickly and cost-effectively," said Jeffrey C. Smith, Chairman and CEO, Tumbleweed Communications Corp. "We're pleased to provide Spectrum with the ability to communicate with its banking and business partners and customers in a secure, open messaging infrastructure that supports their business objectives."

About Spectrum EBP
Spectrum is an independent company fully owned by J.P. Morgan Chase & Co. (JPM ) (www.jpmorganchase.com. - news), First Union Corporation (FTU ) and Wells Fargo & Company (WFC) . Formed to facilitate the exchange of electronic bills and payments, Spectrum's mission is to provide a secure, open and interoperable infrastructure to electronically link consumer and biller service providers. Additionally, Spectrum seeks to provide value to its participants by providing superior service and reducing overall bill presentment and payment costs. Spectrum does not host any bills directly, nor does it retain any bill details. Including the three founders, 22 financial institutions currently belong to the Spectrum network or have signed letters of intent to participate in the network. More information on Spectrum can be found at www.spectrumebp.com.

About Tumbleweed
Tumbleweed Communications (NASDAQ: TMWD) is a leading provider of mission critical messaging software that enables organizations to manage and secure online business communications and processes. Tumbleweed's customers use the company's solutions to define secure communication networks, to centrally control and monitor the corporate communications stream and to create a foundation for automated preparation and secure Internet delivery of sensitive business information. Companies that rely on Tumbleweed Communications solutions include American Express, Chase Manhattan Bank, Chevron, Datek Online, the European Union's Joint Research Council, FDA, John Deere, Merrill Lynch, Nike, Northern Trust, NTT, Salomon Smith Barney, Travelers, United Parcel Service, and seven of the world's largest postal services. Tumbleweed Communications was founded in 1993 and is headquartered in Redwood City, CA. More information can be found at www.tumbleweed.com.

Except for the historical information contained herein, the matters discussed in this press release may constitute forward-looking statements that involve risks and uncertainties that could cause actual results to differ materially from those projected, particularly with respect to the security features of Tumbleweed's products and the activities of any third party. In some cases, forward-looking statements can be identified by terminology such as "may," "will," "should," "potential," "continue," "expects," "anticipates," "intends," "plans," "believes," "estimates," and similar expressions. For further cautions about the risks of investing in Tumbleweed, we refer you to the documents Tumbleweed files from time to time with the Securities and Exchange Commission, particularly Tumbleweed's Form 10-K filed March 30, 2001 and Form 10-Q filed November 13, 2001. Tumbleweed assumes no obligation to update information contained in this press release.