Combell E-mail vs Mailfence

Compare Combell E-mail and Mailfence on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Microsoft 365, Outlook.com

Combell E-mail

Belgium· Email Services

Needs review

Shortlist when you need Benelux domain mail with phone-first support, Hosted Exchange on Combell infrastructure, or Microsoft 365 sold with local onboarding from a Belgian host. Skip when you need zero-access / E2EE mail or a vendor that never routes collaboration data through Microsoft — consider Mailfence, Proton Mail, or Tuta instead.

EU-operated (Belgium)Benelux data centres (claimed)Hosted ExchangeMicrosoft 365 resellerISO 27001 (claimed)24/7 local support

View listing Visit Website

Mailfence

Belgium· Email Services

Needs review

Shortlist Mailfence when you want Belgian-operated webmail with interoperable OpenPGP, digital signatures, and a light calendar/documents suite—plus optional business private-label or on-prem license. Skip when you need automatic closed E2EE without key management (consider Tuta), a large Swiss privacy ecosystem (Proton Mail), or a minimalist German mailbox (Posteo / mailbox.org).

EU-operated (Belgium)OpenPGP E2EEDigital signaturesMail + calendar + docsCustom domains (paid)B2B DPA available

View listing Visit Website

Highlighted rows differ between the two products.

Combell E-mail vs Mailfence: Snapshot
Feature	Combell E-mail	Mailfence
Country of origin	Belgium	Belgium
Category	Email Services	Email Services
Open source	No	No
Self-hosted	No	No
Headquarters	Belgium	Belgium
Legal entity	Combell nv (Skaldenstraat 121, 9042 Ghent; CBE 0541.977.701)	ContactOffice Group sa, Avenue Franklin Roosevelt 47b, B-1050 Brussels (BE 0466.241.584)
Governing law	Belgium / EU GDPR	Belgian law; Brussels courts (Terms of Use)
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Low
Hosting / residency	Basic and Hosted Exchange: Combell-operated Tier 3+ Benelux data centres (Belgium/Netherlands claimed for Exchange mail). Microsoft 365 SKUs: Microsoft cloud (US-parented provider). Flexmail and other team.blue sister tools may process campaign data. Public named subprocessor list not published — request via data protection contact. Privacy policy allows third-party processors and SCCs for some non-EU manufacturers.	Primary production servers described as located in Belgium under Mailfence operational control (no intermediary managing servers per security page). No public AWS/GCP/Azure subprocessor list found. Backups stored in locations separate from offices/main DC (providers not named). Payment-card processing path not fully published.
Summary	Belgian professional email hosting from Combell (team.blue): domain Basic IMAP mailboxes, Hosted Exchange, Microsoft 365 reseller options, spam protection, backups, SMTP relay, and 24/7 Benelux support.	Belgian secure email suite with browser-side OpenPGP encryption, digital signatures, calendar, documents, and optional custom domains under ContactOffice Group SA.
Tags	belgium gdpr email-hosting exchange microsoft-365 smb benelux imap	belgium gdpr privacy encrypted-email openpgp saas productivity

At a glance: Combell E-mail vs Mailfence
At a glance	Combell E-mail	Mailfence
HQ	Ghent, Belgium (Combell nv)	Not listed
Group	team.blue (European multi-brand)	Not listed
Product type	Hosted domain email (SaaS)	Not listed
Open source	No	No (front-end OSS planned; not current)
Self-host	No	SaaS default; Business license for large on-prem deployments
Main SKUs	Basic IMAP · Hosted Exchange · Microsoft 365 · SMTP relay · Flexmail	Not listed
Commercial model	Paid subscription plans; money-back guarantee advertised	Free tier + prepaid paid plans; Business packaging (see vendor site)
HQ / entity	Not listed	Brussels — ContactOffice Group sa (BE 0466.241.584)
Product launch	Not listed	Mailfence brand ~2013; ContactOffice lineage since 1999
Crypto	Not listed	OpenPGP E2EE + digital signatures; optional password-encrypted messages
Hosting	Not listed	Vendor-operated servers in Belgium (per security page)
Independent audit	Not listed	No public audit PDF found

Key capabilities: Combell E-mail vs Mailfence
Key capabilities	Combell E-mail	Mailfence
EU-operated (Belgium)	Yes	Yes
Benelux data centres (claimed)	Yes	Not listed
Hosted Exchange	Yes	Not listed
Microsoft 365 reseller	Yes	Not listed
ISO 27001 (claimed)	Yes	Not listed
24/7 local support	Yes	Not listed
OpenPGP E2EE	Not listed	Yes
Digital signatures	Not listed	Yes
Mail + calendar + docs	Not listed	Yes
Custom domains (paid)	Not listed	Yes
B2B DPA available	Not listed	Yes

Combell E-mail

Domain Basic mailboxes (IMAP/POP3/SMTP)
Create addresses on your own domain with multi-device sync, client compatibility (Outlook, Apple Mail, mobile), and browser webmail. Published storage tiers include 5 GB, 50 GB, and 100 GB Basic plans with spam/antivirus filtering and daily mailbox backups. Suited to SMEs that need professional mail without Exchange collaboration features.
Hosted Exchange with calendars and push
Exchange mailboxes add shared calendars, task lists, meeting-room booking, and direct push notifications, with free transfer help for existing Exchange setups. Combell states Exchange mail runs in Belgium and Netherlands data centres. Choose this when teams need Outlook-style groupware without the full Microsoft 365 app suite.
Microsoft 365 reseller with local setup
Business and Enterprise Microsoft 365 packages combine Exchange mail with Office apps, OneDrive, Teams, and related Microsoft cloud services. Combell differentiates with DNS/mailbox configuration service and 24/7 support in local languages rather than Microsoft-only helpdesks. Mailbox and file data on this path are processed by Microsoft, not only on Combell hardware.
Spam filtering, antivirus, and daily backups
Basic and Exchange product pages include automated spam and virus scanning plus daily mailbox backups for restore after accidental deletion. Microsoft 365 customers can add a separate Combell Microsoft 365 backup product for more frequent cloud backups of mail and files. Local client backups are still recommended for dual protection.
SMTP relay and Flexmail marketing path
A dedicated mail-server / SMTP relay product targets higher-volume sending with plan-based monthly send limits and optional dedicated IP, aimed at newsletters and app transactional mail that would hit shared-mailbox limits. New mailbox customers are offered Flexmail e-mail marketing trial packages via the sister brand in the team.blue group.
24/7 multilingual Benelux support
Combell markets round-the-clock support by phone (toll-free lines advertised), chat, and e-mail in local languages, including weekends and holidays. The company claims to have been the first Belgian hoster with 24/7 support (from 2000). This is a core reason Benelux SMEs pick Combell over pure self-serve global suites.

Mailfence

Browser-side OpenPGP end-to-end encryption
Encrypt outbound mail in the browser with the OpenPGP standard so intermediaries—including Mailfence when messages are properly E2EE—cannot read ciphertext. Fully interoperable with other OpenPGP tools (e.g. Thunderbird/GnuPG). Optional password-encrypted messages cover recipients who do not use PGP. Unencrypted mail still sits on servers in the normal webmail model.
Digital signatures and multi-key OpenPGP keystore
Sign messages for authenticity and integrity, and manage keys in-product: generate, import, export, publish, and hold multiple key pairs without browser plug-ins. Default generated keys are 4096-bit per the threat-model page. Passphrase protection of private keys limits crypto operations if only the account password is compromised.
Mail, calendar, documents, and groups in one account
Beyond inbox: shareable calendars, online document storage/editing, and contact groups for collaboration without bolting on a separate US suite. Storage and alias limits scale by plan; free accounts remain suitable only for light personal use.
Custom domains, aliases, and mail protocols on paid tiers
Higher plans add custom domains with SPF/DKIM/DMARC-oriented setup, larger alias counts, and classic client access (POP, IMAP, SMTP) plus ActiveSync where listed. Entry-level free accounts focus on web/PWA/apps rather than full protocol parity—verify the live plan matrix before procurement.
Business admin: API, SSO, private label, optional on-prem license
Mailfence for Business offers control-panel and XML-RPC API user provisioning, SSO and directory hooks (LDAP/AD/CAS), branding, and Belgian cloud hosting with SLA language—or a license to run on customer Linux servers for large deployments. Fit for orgs that need Belgian hosting with admin automation, not a consumer-only mailbox.

Assurance & compliance: Combell E-mail vs Mailfence
Assurance & compliance	Combell E-mail	Mailfence
Independent security / no-logs audit	Not found No public independent no-logs or mailbox-content audit found; ISO certificates are management-system certs, not no-logs proofs.	Not found No public third-party audit PDF found. Vendor mentions security specialists, bug bounty activity, and inspection openness—not a substitute for a published audit. Privacy policy documents operational metadata collection (not zero-logs).
ISO 27001	Vendor claimed Vendor states first Belgian hoster certified in 2011; certificate PDF linked on ISO page; scope includes hosting and related services. Re-verify current certificate in procurement.	Not found No Mailfence ISO 27001 certificate claim found on primary security/GDPR/company pages.
ISO 27701 (privacy information management)	Vendor claimed Vendor claims first Benelux hoster (2021); scope text includes e-mail and office tools. Certificate PDF linked on site.	Not listed
ISO 9001	Vendor claimed Vendor claims certification since 2007; certificate PDF linked; scope includes e-mail & tools among other services.	Not listed
SOC 2 / SOC 3	Not found No public SOC 2/3 report located on Combell marketing/trust pages during research.	Not found
GDPR / EU data protection	Vendor claimed Belgian EU entity; detailed privacy policy referencing GDPR; ISO 27701 claimed for privacy management. Confirm DPA and processing roles for your use case.	Vendor claimed Belgian controller/processor materials; dedicated GDPR page and technical/organisational measures overview. Confirm roles in your DPA.
US CLOUD Act exposure (indicative)	Partial EuropeanStack assessment: no known US parent of Combell nv, but Microsoft 365 SKUs use Microsoft (US-parented) as cloud processor; public subprocessor list missing; privacy policy contemplates non-EU manufacturers with SCCs for some products. Basic/Hosted Exchange on Benelux DCs is a lower-exposure path than Microsoft 365. Not legal advice.	Partial EU entity (ContactOffice Group sa), no known US parent; servers claimed self-operated in Belgium without named US hyperscaler hosts. No formal public subprocessor inventory; payment processors not named. Assessment residual: partial transparency on data path. Not legal advice.
Data processing agreement (B2B)	Not found No self-serve public DPA download found. Privacy policy describes processor contracts with sub-contractors; contact Data Protection Team (data.protection@combellgroup.com) to request current DPA and subprocessor list.	Vendor claimed Downloadable DPA linked from the GDPR page for organisational customers.
EU AI Act	Not applicable Core product is email hosting; optional Microsoft Copilot add-on is Microsoft AI — evaluate under Microsoft terms if purchased, not as a Combell-native AI system.	Not applicable Email/collaboration suite; not an AI system under typical procurement framing.

Considerations & known limitations: Combell E-mail vs Mailfence
Considerations & known limitations	Combell E-mail	Mailfence
Microsoft 365 path uses Microsoft cloud	High Choosing Microsoft 365 via Combell does not keep mailbox/file data solely on Belgian Combell servers. Microsoft remains the cloud provider for those tenants; CLOUD Act and transfer diligence must treat Microsoft, not only Combell.	Not listed
No public subprocessor list	Medium Privacy policy confirms third-party processors and group sharing but does not publish a named register. Buyers must request the current list (including Flexmail, Microsoft if applicable, and team.blue affiliates) before relying on residency claims.	Not listed
Not end-to-end encrypted mail	Medium Provider-side spam filtering and backups imply conventional hosted mail architecture. Unsuitable where zero-access encryption is a hard requirement.	Not listed
ISO claims not independently re-verified here	Low ISO 9001/27001/27701 are vendor-published with PDF certificates. This evaluation marks them claimed; procurement should check validity dates and scope against the actual email services purchased.	Not listed
PE-backed group ownership	Low team.blue has major PE investors (Hg and reported co-investors). This is European PE structure, not a US Big Tech parent, but ownership can change; track change-of-control clauses in contracts if sovereignty is critical.	Not listed
No public independent security audit	Not listed	Medium If vendor risk requires a published audit letter, ISO 27001, or SOC 2, treat Mailfence as incomplete until evidence is obtained offline or under NDA.
Closed-source SaaS	Not listed	Medium Cannot independently review server code or default-self-host like some FOSS mail stacks. Business on-prem license is a commercial path, not community self-host docs.
E2EE is opt-in OpenPGP, not automatic	Not listed	Medium Clear-text messages are operator-readable at rest. Users must encrypt/sign deliberately; training and policy matter for regulated content.
Operational metadata retention	Not listed	Low Privacy policy lists IP, message-IDs, addresses, subjects, and related fields for operations, abuse control, and legal process—not a zero-logs design.
Limited public subprocessor inventory	Not listed	Low Strong first-party claims of internal hosting, but no AWS-style public subprocessor table; confirm payment and support tooling in procurement.
US CLOUD Act (indicative)	Not listed	Low No known US parent; Belgian self-operated hosting narrative. Residual unknown payment/SaaS paths. Not a legal safe harbour guarantee.

Fit

Combell E-mail

Best fit when

Benelux SMEs that want professional domain addresses with IMAP/POP or Exchange and a real phone helpdesk
Teams already buying domains or web hosting from Combell / team.blue and consolidating vendors
Organisations that need Hosted Exchange calendars and push without standing up their own mail servers
Buyers who want Microsoft 365 with local DNS/mailbox configuration and 24/7 Dutch/French/English support
Senders who need an SMTP relay or Flexmail path alongside domain mailboxes

Poor fit when

Requirements for end-to-end encrypted or zero-access email (provider cannot read content)
Need for open-source self-hosted mail only (Combell is hosted SaaS, not a self-host product)
Hard ban on any Microsoft-class processor when the org still wants full Office cloud collaboration
Procurement that requires a public subprocessor register before first contact (list not published online)
Teams seeking free unlimited consumer mail rather than paid professional mailboxes

Consider instead when

When: You need Belgian or EU end-to-end encrypted mail with OpenPGP / zero-access positioning
Consider: Mailfence (Belgium) or Proton Mail
Combell is classic hosting mail with spam filters and backups, not an E2EE privacy suite.
When: You want privacy-focused paid mail without Microsoft suite lock-in and are fine outside Benelux support culture
Consider: Posteo, Tuta, Soverin, or Runbox
Stronger anti-tracking or encryption narratives; thinner local Belgian phone support than Combell.
When: You only need Microsoft 365 and do not value a Benelux reseller for setup/support
Consider: Microsoft 365 direct (or Google Workspace if you prefer Google)
Combell does not remove Microsoft as processor; direct purchase may be simpler for pure Microsoft estates.

Mailfence

Best fit when

You need OpenPGP interoperability and digital signatures from a European webmail, not only proprietary E2EE
Belgian legal entity and self-described self-operated Belgian hosting are procurement requirements
Teams want mail plus calendar/documents/groups without moving to Microsoft 365 or Google Workspace
You need custom domains, aliases, and classic clients (IMAP/POP/ActiveSync) on paid tiers
Business buyers evaluating private-label, API provisioning, SSO/directory integration, or large-scale on-prem license

Poor fit when

Security policy requires a published independent security audit, ISO 27001, or SOC 2 from the email vendor
You want fully open-source server/client stacks you can fork and self-host as default
Every message must be automatically E2EE with no OpenPGP key UX (Tuta-style)
You need Microsoft-class DLP, eDiscovery, compliance archives, and deep SaaS integrations
Zero-logs marketing is a hard requirement (Mailfence documents operational metadata collection)

Consider instead when

When: You want automatic encryption for all messages with minimal key management
Consider: Tuta
Different crypto model; less OpenPGP interop emphasis than Mailfence.
When: You want a larger Swiss privacy suite brand and ecosystem apps
Consider: Proton Mail
Trade Belgian ContactOffice ownership and PGP-centric UX for Proton’s broader product family.
When: You want a lean German ad-free mailbox without suite features
Consider: Posteo or mailbox.org
Simpler mailbox posture; different admin/domain/crypto tradeoffs.
When: You need full Google/Microsoft productivity and compliance tooling
Consider: Microsoft 365 or Google Workspace (accept US-cloud risk) or EU office suites if residency is the driver
Mailfence is not a drop-in M365 replacement.

Open questions for due diligence

Combell E-mail

Will Combell provide a signed DPA and a current named subprocessor list for Basic vs Hosted Exchange vs Microsoft 365 SKUs?
For Basic and Hosted Exchange, are all mailbox stores, backups, and anti-spam engines restricted to Belgium/Netherlands with no US-group subprocessors?
What Microsoft data residency / EU Data Boundary options are available on Combell-sold Microsoft 365 tenants?
Can independent auditors receive ISO certificate numbers, scopes, and any penetration-test summaries under NDA?
How is Flexmail (and other sister brands) contractually separated when mailbox customers enable marketing tools?

Mailfence

Will Mailfence provide a current written subprocessor list (including payment processors and any backup locations) for a company account?
Is any independent security assessment available under NDA for regulated buyers?
For Business on-prem license: exact minimum scale, support model, update cadence, and cryptographic feature parity vs SaaS?
Which plan tiers currently include IMAP/POP/ActiveSync and custom-domain limits for our user count?
How are disaster-recovery backup sites jurisdictions documented in the signed DPA annex?