Compare ArkiaSuite and Proton Mail on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Google Workspace, Microsoft 365
France· Office Productivity Suite
Needs review
Shortlist when you want a French all-in-one workspace on operator-owned servers in Savoie with a public Art. 28 DPA and frank security limits. Skip when you need SecNumCloud/HDS, E2EE, mature Apple clients, or multi-admin 24/7 operations. Consider mailbox.org, Kolab Now or Nextcloud instead in those cases.
Switzerland· Email Services
Needs review
Shortlist Proton Mail when you want Swiss-jurisdiction, zero-access encrypted email with open-source clients, custom domains, Bridge for desktop mailers, and a public DPA. Skip when you need free-tier IMAP Bridge, fully self-hosted FOSS mail on your own servers, or Workspace-class collaboration depth—consider Tuta, Posteo, or Mailfence among EU peers, or stay on Google/Microsoft if suite lock-in wins.
Highlighted rows differ between the two products.
| Feature | ArkiaSuite | Proton Mail |
|---|---|---|
| Country of origin | France | Switzerland |
| Category | Office Productivity Suite | Email Services |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | France | Switzerland |
| Legal entity | GS Informatique EURL (SIREN 925 179 079, RCS Chambéry) | Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland (EU representative: Proton Europe sàrl, Luxembourg) |
| Governing law | Not listed | Swiss law (Terms; Geneva courts for business/non-US consumer disputes as stated in Terms) |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| EU-hosted status | EU hosted | Not listed |
| Hosting / residency | Content on GS Informatique hardware in Frontenex (primary) and Faverges (encrypted backup). Payments via Stripe Payments Europe (Ireland, US-group payment processor). Password checks via Have I Been Pwned k-anonymity API. TLS via Let's Encrypt. No AWS/GCP/Azure claimed for content. | Primary mail storage on Proton-owned servers in Switzerland (vendor security pages). Not marketed as AWS/GCP/Azure inbox hosting. Public privacy policy lists US-group processors for support and payments (Zendesk; Chargebee, Stripe, PayPal) and group support processing in North Macedonia and Taiwan; HubSpot noted for business sales inquiries. |
| Summary | French-hosted all-in-one workspace: cloud files, email, browser office docs, calendar and photo backup on the operator's own servers in Savoie. | Swiss end-to-end encrypted email from Proton AG: zero-access inbox storage, open-source clients, custom domains, and Bridge for desktop IMAP clients. |
| Tags |
| At a glance | ArkiaSuite | Proton Mail |
|---|---|---|
| HQ | Frontenex, Savoie, France | Plan-les-Ouates (Geneva), Switzerland |
| Legal entity | GS Informatique EURL (SIREN 925 179 079) | Proton AG (CHE-354.686.492); Proton Foundation supervision |
| Hosting model | Operator-owned servers (not AWS/GCP/Azure) | Proton-owned hardware in Switzerland (vendor claim) |
| Self-host | No (vendor-operated SaaS) | No (SaaS); clients open source |
| Open source | No | Not listed |
| Commercial model | Free tier + subscription storage/mail upgrades | Freemium + paid consumer and business seats |
| Bridge | Not listed | Paid plans that include Mail |
| Key capabilities | ArkiaSuite | Proton Mail |
|---|---|---|
| EU-operated | Yes | Not listed |
| Hosted in France | Yes | Not listed |
| Public Art. 28 DPA | Yes | Yes |
| Free tier | Yes | Not listed |
| Files + mail + docs | Yes | Not listed |
| E2EE + zero-access | Not listed | Yes |
| Swiss-operated | Not listed | Yes |
| Bridge (IMAP/SMTP) | Not listed | Yes |
| Open-source clients | Not listed | Yes |
| ISO 27001 & SOC 2 (claimed) | Not listed | Yes |
Operator-owned file sync in Savoie
ArkiaCloud stores and syncs files from Windows, browser or phone, with expiring password-protected share links, team spaces, trash and prior versions. Primary disks sit in Frontenex; nightly encrypted backups go to a second GS Informatique site in Faverges.
Email with optional custom-domain Pro
ArkiaMail provides ad-free mailboxes with spam filtering and optional two-factor authentication. Free accounts include a limited mailbox; larger boxes and ArkiaMail Pro on the customer's own domain are provisioned as paid add-ons (Pro is set up with the operator, not only self-serve).
Browser docs compatible with Office formats
ArkiaDocs offers word processing, spreadsheets and presentations in the browser with multi-user editing and claimed compatibility with Word, Excel and PowerPoint files, living on the same account as files and mail.
Calendar, contacts and photo backup
ArkiaAgenda syncs shared calendars, contacts and tasks with phone and desktop clients. ArkiaPhotos backs up phone photos and groups them by date, place and face; face templates are computed on Frontenex servers and can be disabled on request.
Windows desktop app shipping now
A native Windows 10/11 64-bit app (site lists version 1.6.0) auto-syncs chosen folders and opens mail, files, docs and calendar in one window. Android is described as in Play Store review; macOS and iOS clients are still in development.
Zero-access inbox encryption by default
Bodies and attachments are encrypted so Proton states it lacks keys to read stored mail. Proton-to-Proton traffic is end-to-end encrypted automatically; external recipients need password-protected messages or PGP/WKD for comparable content protection. Subject lines are not fully E2EE under OpenPGP header rules.
Proton Mail Bridge for desktop IMAP clients
Paid plans that include Mail can run Bridge locally to connect Outlook, Thunderbird, or Apple Mail over IMAP/SMTP while encrypting and decrypting on the device. Free accounts use official web/mobile/desktop apps instead of Bridge.
Custom domains, aliases, and business admin
Paid and business tiers support custom domains, extra addresses, catch-all and groups, hide-my-email aliases, and org admin for seats, storage, and retention policies. Suits teams leaving Google/Microsoft who still need branded addresses.
Open-source clients with published audits
Web, mobile, and desktop clients are published on GitHub with third-party audit reports linked from Proton’s open-source page. The hosted mail backend is not offered as self-hosted FOSS—audit client trust, not full server reproducibility.
Tracker blocking, PhishGuard, and Sentinel
Built-in tracker protection, phishing heuristics, link confirmation, SPF/DKIM/DMARC for custom domains, hardware-key 2FA, and optional Proton Sentinel monitoring for high-risk accounts. Complements encryption with everyday abuse defenses.
| Assurance & compliance | ArkiaSuite | Proton Mail |
|---|---|---|
| Independent security / no-logs audit | Not found No public third-party security or no-logs audit PDF found on the site. | Vendor claimed Open-source clients with published third-party audit reports (web/desktop links on open-source page). Not a classic VPN no-logs court test; transparency report covers legal orders for accessible account data. |
| ISO 27001 | Not found No ISO 27001 claim located on arkiasuite.fr. | Vendor claimed Vendor announces ISO 27001 certification after external audit completed 2 May 2024; Trust Center links a certificate download. Confirm scope and validity at procurement time. |
| SOC 2 / SOC 3 | Not found | Vendor claimed Vendor announces first SOC 2 Type II attestation (July 2025 blog). Report typically under NDA—request from vendor for diligence files. |
| GDPR / EU data protection | Vendor claimed French EURL controller/processor; public privacy policy and Art. 28 contract. Confirm fit for your processing roles. | Vendor claimed Swiss controller/processor with EU representative; public DPA; GDPR materials for business. Adequacy/transfer mechanisms documented for non-adequate destinations. |
| US CLOUD Act exposure (indicative) | Partial French entity with no known US parent; content on operator-owned FR servers. Residual exposure via Stripe (US-group payments) and Have I Been Pwned password API. Not legal advice. | Partial Swiss entity / no known US parent; inbox content on Proton-owned Swiss hardware with zero-access design. Partial exposure remains via US SaaS subprocessors (Zendesk support; Stripe/Chargebee/PayPal payments) and any account metadata Proton can access under Swiss process. Not legal advice. |
| Data processing agreement (B2B) | Vendor claimed Public Art. 28 subcontracting agreement accepted at signup/order; printable signature annex available. | Vendor claimed Public DPA at proton.me/legal/dpa forms part of terms when Proton acts as processor; Swiss law, Geneva jurisdiction; general authorization for listed subprocessors. |
| EU AI Act | Not applicable Face grouping on photos is a biometric-adjacent feature for the account holder's own library; product is not marketed as a general-purpose AI system. | Not applicable Core product is encrypted email. Optional Scribe assistant is ancillary; not an AI-centric offering for this catalog entry. |
| SecNumCloud / HDS | Not found Vendor materials do not claim SecNumCloud or HDS; submitter also stated none. | Not listed |
| Considerations & known limitations | ArkiaSuite | Proton Mail |
|---|---|---|
| No disk encryption at rest on site | Medium Vendor states Frontenex disks are protected by physical lock, not encryption at rest. Off-site backups are encrypted because they travel. Theft of powered-off disks or physical access is a different threat model than hyperscaler encrypted volumes. | Not listed |
| No end-to-end encryption | Medium Administrator access can technically read stored files. Fine for many SMEs that need server-side search and previews; incompatible with E2EE mandates. | Not listed |
| Single-operator support and admin | Medium Art. 28 text states only Gérald Sonzogni has admin access and answers support. Strong accountability, weak redundancy for holidays, illness or exit planning. | Not listed |
| Limited non-Windows clients | Medium Windows app ships; Android and Apple clients are not fully released. Browser access mitigates some gaps but not all mobile workflows. | Not listed |
| No SecNumCloud, HDS or public audit | High No independent audit, ISO 27001, SOC 2, SecNumCloud or HDS found. Public-sector and health buyers with those gates must look elsewhere. | Not listed |
| US-group payment subprocessor | Low Stripe Payments Europe processes cards. Content is said not to leave GS Informatique servers, but payment metadata still involves a US-group processor. | Not listed |
| Weaker defaults outside Proton | Not listed | Medium Mail to Gmail/Outlook/others is not E2EE unless password-protected or PGP/WKD is used. Subject lines are not fully E2EE. Train users or you only protect the Proton-stored copy. |
| US support and payment processors | Not listed | Medium Zendesk, Chargebee, Stripe, and PayPal appear in the public processor list. They should not see zero-access message bodies, but support content and billing data can touch US-group services—document this in DPIAs. |
| Bridge requires paid Mail | Not listed | Low Desktop IMAP/SMTP via Bridge is not available on free accounts. Budget seats for users who refuse the official apps. |
| Hosted service, not self-hosted FOSS mail | Not listed | Medium Open-source clients improve inspectability but you still depend on Proton’s operated backend, uptime, and Swiss legal process. Unsuitable if policy mandates customer-operated mail servers. |
| Swiss legal orders on accessible data | Not listed | Low Transparency reports show thousands of yearly legal orders for Mail with many complied. Bodies stay encrypted; recovery emails, IPs (when retained for abuse), and similar metadata may still be in scope. Align expectations with counsel. |
When: You need a mail-centric European suite with a longer public track record
Consider: mailbox.org or Proton Mail
Stronger mail heritage; less emphasis on operator-owned photo backup in Savoie
When: You want groupware with calendar/mail and more mature multi-platform clients
Consider: Kolab Now
Swiss/European groupware peer in the catalog
When: You want to operate the stack yourself on chosen EU infrastructure
Consider: Nextcloud
Self-host platform rather than GS Informatique-operated SaaS
When: You want German E2EE email with a different crypto product surface and may not need Proton’s full ecosystem
Consider: Tuta
Compare desktop interoperability and business admin maturity side by side.
When: You want ad-free European mail with strong transport privacy but do not require zero-access E2EE for all stored content
Consider: Posteo
Different threat model: Posteo is privacy-forward without Proton’s zero-access default.
When: You need OpenPGP-centric mail with classic collaboration extras under Belgian operation
Consider: Mailfence
Weigh automatic Proton-to-Proton E2EE UX versus Mailfence’s model.
When: Collaboration suite depth and ecosystem lock-in outweigh encryption defaults
Consider: Google Workspace or Microsoft 365
Accept US-provider jurisdiction and scanning/processing models as tradeoffs.