Combell E-mail vs GMX Mail

Compare Combell E-mail and GMX Mail on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Outlook.com, Zoho Mail

Logo: Combell E-mail

Combell E-mail

Belgium· Email Services

Needs review

Shortlist when you need Benelux domain mail with phone-first support, Hosted Exchange on Combell infrastructure, or Microsoft 365 sold with local onboarding from a Belgian host. Skip when you need zero-access / E2EE mail or a vendor that never routes collaboration data through Microsoft — consider Mailfence, Proton Mail, or Tuta instead.

EU-operated (Belgium)Benelux data centres (claimed)Hosted ExchangeMicrosoft 365 resellerISO 27001 (claimed)24/7 local support
Logo: GMX Mail

GMX Mail

Germany· Email Services

Needs review

Shortlist GMX Mail for consumer or light-professional freemail when you want a German United Internet operator, claimed German mailbox data centers, large free storage, and standard IMAP/POP—with optional OpenPGP. Skip when you need zero-access encryption by default, enterprise DPA/audit packs, or an ad-free architecture as the baseline; consider Proton Mail instead.

German operatorMailbox in DE (claimed)IMAP / POP3 / SMTPOptional OpenPGPFree ad-supportedSaaS only
Combell E-mail vs GMX Mail: Snapshot
FeatureLogo: Combell E-mailCombell E-mailLogo: GMX MailGMX Mail
Country of originBelgiumGermany
CategoryEmail ServicesEmail Services
Open sourceNoNo
Self-hostedNoNo
HeadquartersBelgiumGermany
Legal entityCombell nv (Skaldenstraat 121, 9042 Ghent; CBE 0541.977.701)1&1 Mail & Media GmbH (Zweigniederlassung Karlsruhe; Hauptsitz Montabaur)
Governing lawBelgium / EU GDPRGerman law (international T&Cs); GDPR applies as EU controller
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyBasic and Hosted Exchange: Combell-operated Tier 3+ Benelux data centres (Belgium/Netherlands claimed for Exchange mail). Microsoft 365 SKUs: Microsoft cloud (US-parented provider). Flexmail and other team.blue sister tools may process campaign data. Public named subprocessor list not published — request via data protection contact. Privacy policy allows third-party processors and SCCs for some non-EU manufacturers.Vendor privacy (EN): FreeMail emails, address book, and calendar processed in secure data centers in Germany. Product security pages: European data centers for stored mail. Group United Internet AG (DE). Named non-mail paths: Google Analytics/GTM on portal; Google/Yahoo search partnership; international ad partners under consent; DE privacy allows third-country transfers with Chapter V safeguards when used. No public exhaustive mail-infra subprocessor list found.
Summary

Belgian professional email hosting from Combell (team.blue): domain Basic IMAP mailboxes, Hosted Exchange, Microsoft 365 reseller options, spam protection, backups, SMTP relay, and 24/7 Benelux support.

German FreeMail from 1&1 Mail & Media GmbH (United Internet): large free storage, IMAP/POP/SMTP, optional OpenPGP and 2FA, ad-supported consumer webmail.

Tags
At a glance: Combell E-mail vs GMX Mail
At a glanceLogo: Combell E-mailCombell E-mailLogo: GMX MailGMX Mail
HQGhent, Belgium (Combell nv)Not listed
Groupteam.blue (European multi-brand)Not listed
Product typeHosted domain email (SaaS)Consumer FreeMail + optional paid tiers
Open sourceNoNo
Self-hostNoNot listed
Main SKUsBasic IMAP · Hosted Exchange · Microsoft 365 · SMTP relay · FlexmailNot listed
Commercial modelPaid subscription plans; money-back guarantee advertisedNot listed
HQ / entityNot listed1&1 Mail & Media GmbH, Montabaur (DE)
Parent groupNot listedUnited Internet AG (DE)
Hosting (claimed)Not listedMailbox/calendar data in German data centers
ProtocolsNot listedWebmail; POP3/IMAP/SMTP (opt-in)
Self-hostedNot listedNo
Key capabilities: Combell E-mail vs GMX Mail
Key capabilitiesLogo: Combell E-mailCombell E-mailLogo: GMX MailGMX Mail
EU-operated (Belgium)YesNot listed
Benelux data centres (claimed)YesNot listed
Hosted ExchangeYesNot listed
Microsoft 365 resellerYesNot listed
ISO 27001 (claimed)YesNot listed
24/7 local supportYesNot listed
German operatorNot listedYes
Mailbox in DE (claimed)Not listedYes
IMAP / POP3 / SMTPNot listedYes
Optional OpenPGPNot listedYes
Free ad-supportedNot listedYes
SaaS onlyNot listedYes

Combell E-mail

  • Domain Basic mailboxes (IMAP/POP3/SMTP)

    Create addresses on your own domain with multi-device sync, client compatibility (Outlook, Apple Mail, mobile), and browser webmail. Published storage tiers include 5 GB, 50 GB, and 100 GB Basic plans with spam/antivirus filtering and daily mailbox backups. Suited to SMEs that need professional mail without Exchange collaboration features.

  • Hosted Exchange with calendars and push

    Exchange mailboxes add shared calendars, task lists, meeting-room booking, and direct push notifications, with free transfer help for existing Exchange setups. Combell states Exchange mail runs in Belgium and Netherlands data centres. Choose this when teams need Outlook-style groupware without the full Microsoft 365 app suite.

  • Microsoft 365 reseller with local setup

    Business and Enterprise Microsoft 365 packages combine Exchange mail with Office apps, OneDrive, Teams, and related Microsoft cloud services. Combell differentiates with DNS/mailbox configuration service and 24/7 support in local languages rather than Microsoft-only helpdesks. Mailbox and file data on this path are processed by Microsoft, not only on Combell hardware.

  • Spam filtering, antivirus, and daily backups

    Basic and Exchange product pages include automated spam and virus scanning plus daily mailbox backups for restore after accidental deletion. Microsoft 365 customers can add a separate Combell Microsoft 365 backup product for more frequent cloud backups of mail and files. Local client backups are still recommended for dual protection.

  • SMTP relay and Flexmail marketing path

    A dedicated mail-server / SMTP relay product targets higher-volume sending with plan-based monthly send limits and optional dedicated IP, aimed at newsletters and app transactional mail that would hit shared-mailbox limits. New mailbox customers are offered Flexmail e-mail marketing trial packages via the sister brand in the team.blue group.

  • 24/7 multilingual Benelux support

    Combell markets round-the-clock support by phone (toll-free lines advertised), chat, and e-mail in local languages, including weekends and holidays. The company claims to have been the first Belgian hoster with 24/7 support (from 2000). This is a core reason Benelux SMEs pick Combell over pure self-serve global suites.

GMX Mail

  • Large free mailbox storage with open protocols

    gmx.com free accounts advertise up to 65 GB email storage and 50 MB attachments. POP3, IMAP, and SMTP are supported after you enable them in settings (TLS 1.2+; imap.gmx.com / mail.gmx.com). Suits users who want client choice (Thunderbird, Outlook, mobile) without Google or Microsoft as the mailbox host.

  • Optional OpenPGP end-to-end encryption (Mailvelope)

    GMX offers free OpenPGP messaging via the Mailvelope browser extension: key generation, local key storage, key directory, and mobile recovery. Encryption is opt-in per message after setup—not whole-mailbox zero-access by default. Best for occasional sensitive threads when both parties can use OpenPGP.

  • Aliases, Mail Collector, and multi-account inbox

    Create up to 10 alias addresses (including other GMX domains) managed in one inbox, and pull up to 10 external accounts via Mail Collector. Useful for freelancers and project mail without juggling multiple passwords or providers day-to-day.

  • Spam filtering, antivirus, and optional TOTP 2FA

    Free accounts include automated spam filtering (user blacklist and optional improved detection) and antivirus scanning of mail and cloud files. Optional two-factor authentication uses an authenticator app (TOTP); third-party clients use app-specific passwords when 2FA is on.

  • Bundled Cloud, calendar, contacts, and Online Office

    Accounts include contacts, calendar/organizer, about 2 GB GMX Cloud with share links, and Online Office for common document formats—enough for light personal productivity without a separate suite subscription.

Assurance & compliance: Combell E-mail vs GMX Mail
Assurance & complianceLogo: Combell E-mailCombell E-mailLogo: GMX MailGMX Mail
Independent security / no-logs audit
Not found

No public independent no-logs or mailbox-content audit found; ISO certificates are management-system certs, not no-logs proofs.

Not found

OpenPGP/Mailvelope path described as externally reviewed; no public independent no-logs audit for FreeMail mailbox access found on product pages.

ISO 27001
Vendor claimed

Vendor states first Belgian hoster certified in 2011; certificate PDF linked on ISO page; scope includes hosting and related services. Re-verify current certificate in procurement.

Not found

No GMX FreeMail-branded ISO 27001 certificate located on security/privacy pages in this research pass (group companies may hold certs under other brands).

ISO 27701 (privacy information management)
Vendor claimed

Vendor claims first Benelux hoster (2021); scope text includes e-mail and office tools. Certificate PDF linked on site.

Not listed
ISO 9001
Vendor claimed

Vendor claims certification since 2007; certificate PDF linked; scope includes e-mail & tools among other services.

Not listed
SOC 2 / SOC 3
Not found

No public SOC 2/3 report located on Combell marketing/trust pages during research.

Not found

No SOC 2/3 report found on GMX public security pages.

GDPR / EU data protection
Vendor claimed

Belgian EU entity; detailed privacy policy referencing GDPR; ISO 27701 claimed for privacy management. Confirm DPA and processing roles for your use case.

Vendor claimed

EU/German controller; public privacy notices under GDPR; DPO published; supervisory authorities named (BfDI / LfDI RLP).

US CLOUD Act exposure (indicative)
Partial

EuropeanStack assessment: no known US parent of Combell nv, but Microsoft 365 SKUs use Microsoft (US-parented) as cloud processor; public subprocessor list missing; privacy policy contemplates non-EU manufacturers with SCCs for some products. Basic/Hosted Exchange on Benelux DCs is a lower-exposure path than Microsoft 365. Not legal advice.

Partial

German entity and parent (United Internet AG); mailbox data claimed in German DCs. Partial/medium because portal analytics include Google LLC tools, freemail ads involve international partners, and no full public mail-infra subprocessor list. Not legal advice.

Data processing agreement (B2B)
Not found

No self-serve public DPA download found. Privacy policy describes processor contracts with sub-contractors; contact Data Protection Team (data.protection@combellgroup.com) to request current DPA and subprocessor list.

Not found

Product is primarily consumer FreeMail under GTCs/privacy policy; no public self-serve B2B DPA flow found for FreeMail shortlisting.

EU AI Act
Not applicable

Core product is email hosting; optional Microsoft Copilot add-on is Microsoft AI — evaluate under Microsoft terms if purchased, not as a Combell-native AI system.

Not applicable

Not an AI-centric product; optional assistive features may appear in product privacy text but FreeMail is not marketed as an AI system.

Considerations & known limitations: Combell E-mail vs GMX Mail
Considerations & known limitationsLogo: Combell E-mailCombell E-mailLogo: GMX MailGMX Mail
Microsoft 365 path uses Microsoft cloud
High

Choosing Microsoft 365 via Combell does not keep mailbox/file data solely on Belgian Combell servers. Microsoft remains the cloud provider for those tenants; CLOUD Act and transfer diligence must treat Microsoft, not only Combell.

Not listed
No public subprocessor list
Medium

Privacy policy confirms third-party processors and group sharing but does not publish a named register. Buyers must request the current list (including Flexmail, Microsoft if applicable, and team.blue affiliates) before relying on residency claims.

Not listed
Not end-to-end encrypted mail
Medium

Provider-side spam filtering and backups imply conventional hosted mail architecture. Unsuitable where zero-access encryption is a hard requirement.

Not listed
ISO claims not independently re-verified here
Low

ISO 9001/27001/27701 are vendor-published with PDF certificates. This evaluation marks them claimed; procurement should check validity dates and scope against the actual email services purchased.

Not listed
PE-backed group ownership
Low

team.blue has major PE investors (Hg and reported co-investors). This is European PE structure, not a US Big Tech parent, but ownership can change; track change-of-control clauses in contracts if sovereignty is critical.

Not listed
Advertising-funded free tierNot listed
Medium

FreeMail depends on ads and (with consent) interest-based targeting and partner sharing. Privacy posture differs from paid privacy mail. Practical impact: expect consent UX, ad surfaces, and partner lists—not a zero-ads default.

E2E encryption is optional, not defaultNot listed
Medium

Without OpenPGP setup, mailbox content is accessible to the provider like conventional hosted mail. Practical impact: do not treat GMX FreeMail as zero-access encryption architecture.

Incomplete public infrastructure subprocessorsNot listed
Medium

Residency for mail is claimed (Germany/EU), but there is no enterprise-style published subprocessor inventory for core mail infrastructure. Portal paths name Google Analytics and global ad partners. Practical impact: extra questionnaire work for high-assurance buyers.

Inactivity and freemail operational policiesNot listed
Low

Terms/privacy allow deletion of free mailbox content after prolonged inactivity (about 180 days without login on FreeMail privacy text). Practical impact: inactive project addresses can disappear if not maintained.

No public ISO/SOC package for FreeMailNot listed
Low

Security pages emphasize product features (spam, AV, 2FA, PGP) rather than downloadable ISO/SOC evidence for FreeMail. Practical impact: may fail enterprise vendor security questionnaires without further vendor dialogue.

Fit

Combell E-mail

Best fit when

  • Benelux SMEs that want professional domain addresses with IMAP/POP or Exchange and a real phone helpdesk
  • Teams already buying domains or web hosting from Combell / team.blue and consolidating vendors
  • Organisations that need Hosted Exchange calendars and push without standing up their own mail servers
  • Buyers who want Microsoft 365 with local DNS/mailbox configuration and 24/7 Dutch/French/English support
  • Senders who need an SMTP relay or Flexmail path alongside domain mailboxes

Poor fit when

  • Requirements for end-to-end encrypted or zero-access email (provider cannot read content)
  • Need for open-source self-hosted mail only (Combell is hosted SaaS, not a self-host product)
  • Hard ban on any Microsoft-class processor when the org still wants full Office cloud collaboration
  • Procurement that requires a public subprocessor register before first contact (list not published online)
  • Teams seeking free unlimited consumer mail rather than paid professional mailboxes

Consider instead when

  • When: You need Belgian or EU end-to-end encrypted mail with OpenPGP / zero-access positioning

    Consider: Mailfence (Belgium) or Proton Mail

    Combell is classic hosting mail with spam filters and backups, not an E2EE privacy suite.

  • When: You want privacy-focused paid mail without Microsoft suite lock-in and are fine outside Benelux support culture

    Consider: Posteo, Tuta, Soverin, or Runbox

    Stronger anti-tracking or encryption narratives; thinner local Belgian phone support than Combell.

  • When: You only need Microsoft 365 and do not value a Benelux reseller for setup/support

    Consider: Microsoft 365 direct (or Google Workspace if you prefer Google)

    Combell does not remove Microsoft as processor; direct purchase may be simpler for pure Microsoft estates.

GMX Mail

Best fit when

  • Individuals and freelancers who want a European freemail address with large free storage and IMAP client freedom
  • Users consolidating multiple addresses via aliases (up to 10) and Mail Collector
  • Buyers who prefer a German legal controller (1&1 Mail & Media GmbH / United Internet) over US Big Tech freemail
  • Teams that only need optional OpenPGP for specific sensitive threads, not zero-access by default
  • Users already familiar with GMX/WEB.DE in German-speaking markets who need international domains (e.g. gmx.com)

Poor fit when

  • Organizations that require default end-to-end / zero-access encryption for all mail
  • Procurement that needs a published independent security audit pack, ISO/SOC evidence, and a B2B DPA as standard shortlist inputs
  • Teams that cannot accept advertising-funded freemail economics or interest-based ad consent UX
  • Custom-domain corporate mail and admin controls at Microsoft 365 / Google Workspace depth
  • Self-hosted or open-source mail stack requirements

Consider instead when

  • When: You need zero-access encryption by default and a privacy-first paid model without ad-funded freemail as the core product

    Consider: Proton Mail

    Proton is the stronger shortlist peer in this catalog for E2E-first evaluation.

  • When: You need Google Workspace-class collaboration and are willing to accept US Big Tech jurisdiction

    Consider: Gmail / Google Workspace

    Richer suite integration; different sovereignty and ad/ecosystem tradeoffs.

  • When: You need Microsoft ecosystem mail, calendar, and compliance tooling

    Consider: Outlook.com / Microsoft 365

    Strong enterprise admin story; US parent and CLOUD Act path differ from GMX.

Open questions for due diligence

Combell E-mail

  • Will Combell provide a signed DPA and a current named subprocessor list for Basic vs Hosted Exchange vs Microsoft 365 SKUs?
  • For Basic and Hosted Exchange, are all mailbox stores, backups, and anti-spam engines restricted to Belgium/Netherlands with no US-group subprocessors?
  • What Microsoft data residency / EU Data Boundary options are available on Combell-sold Microsoft 365 tenants?
  • Can independent auditors receive ISO certificate numbers, scopes, and any penetration-test summaries under NDA?
  • How is Flexmail (and other sister brands) contractually separated when mailbox customers enable marketing tools?

GMX Mail

  • Will 1&1 Mail & Media sign a B2B DPA and publish a current mail-infrastructure subprocessor list for our use case?
  • Are FreeMail mailbox systems solely on United Internet / 1&1 operated German DCs, or are any US-group cloud providers used for primary storage, backup, or DR?
  • What independent audits or certifications (if any) cover the FreeMail platform beyond the Mailvelope/OpenPGP path?
  • For paid/premium mailboxes: which advertising and tracking paths remain, and what contractual residency language is available?