Combell E-mail vs Runbox

Compare Combell E-mail and Runbox on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Outlook.com

Logo: Combell E-mail

Combell E-mail

Belgium· Email Services

Needs review

Shortlist when you need Benelux domain mail with phone-first support, Hosted Exchange on Combell infrastructure, or Microsoft 365 sold with local onboarding from a Belgian host. Skip when you need zero-access / E2EE mail or a vendor that never routes collaboration data through Microsoft — consider Mailfence, Proton Mail, or Tuta instead.

EU-operated (Belgium)Benelux data centres (claimed)Hosted ExchangeMicrosoft 365 resellerISO 27001 (claimed)24/7 local support
Logo: Runbox

Runbox

Norway· Email Services

Needs review

Shortlist Runbox when you need Norwegian/EEA-hosted IMAP email with custom domains, ad-free subscription economics, and standard clients. Skip when you require default zero-access E2EE—consider Proton Mail or Tuta instead—or when you need a full Microsoft 365-style suite.

Norwegian email hostingIMAP / POP / SMTPCustom domains100% renewable (claimed)Runbox 7 open sourceOptional PGP / S/MIME
Combell E-mail vs Runbox: Snapshot
FeatureLogo: Combell E-mailCombell E-mailLogo: RunboxRunbox
Country of originBelgiumNorway
CategoryEmail ServicesEmail Services
Open sourceNoYes
Self-hostedNoNo
HeadquartersBelgiumNorway
Legal entityCombell nv (Skaldenstraat 121, 9042 Ghent; CBE 0541.977.701)Runbox Solutions AS
Governing lawBelgium / EU GDPRNorwegian law; Personal Data Act implementing GDPR (EEA)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyBasic and Hosted Exchange: Combell-operated Tier 3+ Benelux data centres (Belgium/Netherlands claimed for Exchange mail). Microsoft 365 SKUs: Microsoft cloud (US-parented provider). Flexmail and other team.blue sister tools may process campaign data. Public named subprocessor list not published — request via data protection contact. Privacy policy allows third-party processors and SCCs for some non-EU manufacturers.Core email and account content: servers in Oslo (StackInfra) under Norwegian jurisdiction; systems management Copyleft Solutions AS (Norway). Optional third parties per privacy policy: Stripe, PayPal, Coinbase (US payments); Enom (US domains); Gandi (FR); Domeneshop (NO); JaguarPC (US default web hosting, Norway option); NodePing (US, status page). No known US parent.
Summary

Belgian professional email hosting from Combell (team.blue): domain Basic IMAP mailboxes, Hosted Exchange, Microsoft 365 reseller options, spam protection, backups, SMTP relay, and 24/7 Benelux support.

Norwegian subscription email hosting from Runbox Solutions AS: Oslo-hosted IMAP mailboxes, custom domains, CalDAV/CardDAV, and optional PGP. Ad-free; not default zero-access.

Tags
At a glance: Combell E-mail vs Runbox
At a glanceLogo: Combell E-mailCombell E-mailLogo: RunboxRunbox
HQGhent, Belgium (Combell nv)Oslo, Norway
Groupteam.blue (European multi-brand)Not listed
Product typeHosted domain email (SaaS)Not listed
Open sourceNoPartial (Runbox 7 web app); not self-hosted
Self-hostNoNot listed
Main SKUsBasic IMAP · Hosted Exchange · Microsoft 365 · SMTP relay · FlexmailNot listed
Commercial modelPaid subscription plans; money-back guarantee advertisedPaid subscription + trial (no permanent free tier)
Legal entityNot listedRunbox Solutions AS (orgnr 996877027)
FoundedNot listedService since 2000; current AS form 2011
HostingNot listedEmail: StackInfra Oslo; optional web hosting may default US
Key capabilities: Combell E-mail vs Runbox
Key capabilitiesLogo: Combell E-mailCombell E-mailLogo: RunboxRunbox
EU-operated (Belgium)YesNot listed
Benelux data centres (claimed)YesNot listed
Hosted ExchangeYesNot listed
Microsoft 365 resellerYesNot listed
ISO 27001 (claimed)YesNot listed
24/7 local supportYesNot listed
Norwegian email hostingNot listedYes
IMAP / POP / SMTPNot listedYes
Custom domainsNot listedYes
100% renewable (claimed)Not listedYes
Runbox 7 open sourceNot listedYes
Optional PGP / S/MIMENot listedYes

Combell E-mail

  • Domain Basic mailboxes (IMAP/POP3/SMTP)

    Create addresses on your own domain with multi-device sync, client compatibility (Outlook, Apple Mail, mobile), and browser webmail. Published storage tiers include 5 GB, 50 GB, and 100 GB Basic plans with spam/antivirus filtering and daily mailbox backups. Suited to SMEs that need professional mail without Exchange collaboration features.

  • Hosted Exchange with calendars and push

    Exchange mailboxes add shared calendars, task lists, meeting-room booking, and direct push notifications, with free transfer help for existing Exchange setups. Combell states Exchange mail runs in Belgium and Netherlands data centres. Choose this when teams need Outlook-style groupware without the full Microsoft 365 app suite.

  • Microsoft 365 reseller with local setup

    Business and Enterprise Microsoft 365 packages combine Exchange mail with Office apps, OneDrive, Teams, and related Microsoft cloud services. Combell differentiates with DNS/mailbox configuration service and 24/7 support in local languages rather than Microsoft-only helpdesks. Mailbox and file data on this path are processed by Microsoft, not only on Combell hardware.

  • Spam filtering, antivirus, and daily backups

    Basic and Exchange product pages include automated spam and virus scanning plus daily mailbox backups for restore after accidental deletion. Microsoft 365 customers can add a separate Combell Microsoft 365 backup product for more frequent cloud backups of mail and files. Local client backups are still recommended for dual protection.

  • SMTP relay and Flexmail marketing path

    A dedicated mail-server / SMTP relay product targets higher-volume sending with plan-based monthly send limits and optional dedicated IP, aimed at newsletters and app transactional mail that would hit shared-mailbox limits. New mailbox customers are offered Flexmail e-mail marketing trial packages via the sister brand in the team.blue group.

  • 24/7 multilingual Benelux support

    Combell markets round-the-clock support by phone (toll-free lines advertised), chat, and e-mail in local languages, including weekends and holidays. The company claims to have been the first Belgian hoster with 24/7 support (from 2000). This is a core reason Benelux SMEs pick Combell over pure self-serve global suites.

Runbox

  • Norwegian-hosted IMAP email with full-disk encryption

    Mailboxes live on servers Runbox places in a StackInfra facility in Oslo under Norwegian jurisdiction, with full-disk encryption at rest and TLS (including PFS) in transit. Access via IMAP, POP, SMTP, or Runbox 7 webmail suits teams that need standard clients rather than a proprietary-only app.

  • Custom domains, aliases, and multi-account admin

    Host mail on your own domain, manage sub-accounts from a main account, and use many aliases on Runbox domains plus unlimited aliases on customer domains. Plus-addressing and filters help separate identities without running separate mailboxes.

  • CalDAV/CardDAV plus optional PGP or S/MIME

    Integrated calendar and contacts sync over CalDAV and CardDAV with common desktop and mobile apps. End-to-end confidentiality is user-controlled via PGP or S/MIME—not zero-access by default—so operators can still index mail for search and scan for malware.

  • Ad-free, subscription-funded privacy model

    Runbox states it does not show ads, does not use third-party trackers such as Google Analytics, and only scans messages for spam/virus protection—not advertising. Revenue is subscription-based with a public trial period, aligning incentives away from data-mining free mail.

  • Runbox 7 open-source webmail on hydropowered infra

    The Runbox 7 web client is published on GitHub for inspection; the hosted server stack remains largely proprietary. Email infrastructure is advertised as 100% certified renewable electricity in Norway, with additional company offset claims—useful for sustainability procurement checklists.

Assurance & compliance: Combell E-mail vs Runbox
Assurance & complianceLogo: Combell E-mailCombell E-mailLogo: RunboxRunbox
Independent security / no-logs audit
Not found

No public independent no-logs or mailbox-content audit found; ISO certificates are management-system certs, not no-logs proofs.

Not found

Vendor claims minimal logging and short retention windows; no public independent audit report found

ISO 27001
Vendor claimed

Vendor states first Belgian hoster certified in 2011; certificate PDF linked on ISO page; scope includes hosting and related services. Re-verify current certificate in procurement.

Not found

No Runbox ISO 27001 certificate found on primary pages (power supplier ISO 14001 is environmental, not info-sec)

ISO 27701 (privacy information management)
Vendor claimed

Vendor claims first Benelux hoster (2021); scope text includes e-mail and office tools. Certificate PDF linked on site.

Not listed
ISO 9001
Vendor claimed

Vendor claims certification since 2007; certificate PDF linked; scope includes e-mail & tools among other services.

Not listed
SOC 2 / SOC 3
Not found

No public SOC 2/3 report located on Combell marketing/trust pages during research.

Not found

No public SOC 2/3 report located

GDPR / EU data protection
Vendor claimed

Belgian EU entity; detailed privacy policy referencing GDPR; ISO 27701 claimed for privacy management. Confirm DPA and processing roles for your use case.

Vendor claimed

Norwegian entity; Personal Data Act implements GDPR; appointed DPO; privacy policy documents rights and retention

US CLOUD Act exposure (indicative)
Partial

EuropeanStack assessment: no known US parent of Combell nv, but Microsoft 365 SKUs use Microsoft (US-parented) as cloud processor; public subprocessor list missing; privacy policy contemplates non-EU manufacturers with SCCs for some products. Basic/Hosted Exchange on Benelux DCs is a lower-exposure path than Microsoft 365. Not legal advice.

Partial

No known US parent; core email in Norway. Medium/partial because privacy policy lists US third parties (Stripe, PayPal, Coinbase, Enom, JaguarPC web hosting default, NodePing). Not legal advice.

Data processing agreement (B2B)
Not found

No self-serve public DPA download found. Privacy policy describes processor contracts with sub-contractors; contact Data Protection Team (data.protection@combellgroup.com) to request current DPA and subprocessor list.

Not found

Processor DPA with Copyleft is mentioned; no public customer-facing B2B DPA template found—ask sales/support

EU AI Act
Not applicable

Core product is email hosting; optional Microsoft Copilot add-on is Microsoft AI — evaluate under Microsoft terms if purchased, not as a Combell-native AI system.

Not applicable

Email hosting product; vendor states no intrusive AI for ad profiling

Considerations & known limitations: Combell E-mail vs Runbox
Considerations & known limitationsLogo: Combell E-mailCombell E-mailLogo: RunboxRunbox
Microsoft 365 path uses Microsoft cloud
High

Choosing Microsoft 365 via Combell does not keep mailbox/file data solely on Belgian Combell servers. Microsoft remains the cloud provider for those tenants; CLOUD Act and transfer diligence must treat Microsoft, not only Combell.

Not listed
No public subprocessor list
Medium

Privacy policy confirms third-party processors and group sharing but does not publish a named register. Buyers must request the current list (including Flexmail, Microsoft if applicable, and team.blue affiliates) before relying on residency claims.

Not listed
Not end-to-end encrypted mail
Medium

Provider-side spam filtering and backups imply conventional hosted mail architecture. Unsuitable where zero-access encryption is a hard requirement.

Not listed
ISO claims not independently re-verified here
Low

ISO 9001/27001/27701 are vendor-published with PDF certificates. This evaluation marks them claimed; procurement should check validity dates and scope against the actual email services purchased.

Not listed
PE-backed group ownership
Low

team.blue has major PE investors (Hg and reported co-investors). This is European PE structure, not a US Big Tech parent, but ownership can change; track change-of-control clauses in contracts if sovereignty is critical.

Not listed
Not default zero-access encryptionNot listed
Medium

Unlike Proton/Tuta, Runbox can access stored mail for spam/virus scanning, indexing, and lawful process. Use PGP/S/MIME when E2EE is required.

US vendors on optional product pathsNot listed
Medium

Payments (Stripe/PayPal/Coinbase), domain registrar Enom, and default JaguarPC web hosting introduce US processors. Keep web hosting in Norway and minimize US payment data if policy requires.

No public ISO 27001 / SOC 2 / independent auditNot listed
Medium

Assurance relies on vendor policy, Norwegian law, and facility claims. Regulated buyers may need NDA evidence or on-site questionnaire.

Partial open source onlyNot listed
Low

Runbox 7 webmail is open source; mail backend is proprietary SaaS—no self-host path.

Post-closure and backup retentionNot listed
Low

Privacy policy defines multi-month content retention and backup windows after closure (and longer account-info retention for bookkeeping). Request immediate deletion if policy requires faster wipe.

Fit

Combell E-mail

Best fit when

  • Benelux SMEs that want professional domain addresses with IMAP/POP or Exchange and a real phone helpdesk
  • Teams already buying domains or web hosting from Combell / team.blue and consolidating vendors
  • Organisations that need Hosted Exchange calendars and push without standing up their own mail servers
  • Buyers who want Microsoft 365 with local DNS/mailbox configuration and 24/7 Dutch/French/English support
  • Senders who need an SMTP relay or Flexmail path alongside domain mailboxes

Poor fit when

  • Requirements for end-to-end encrypted or zero-access email (provider cannot read content)
  • Need for open-source self-hosted mail only (Combell is hosted SaaS, not a self-host product)
  • Hard ban on any Microsoft-class processor when the org still wants full Office cloud collaboration
  • Procurement that requires a public subprocessor register before first contact (list not published online)
  • Teams seeking free unlimited consumer mail rather than paid professional mailboxes

Consider instead when

  • When: You need Belgian or EU end-to-end encrypted mail with OpenPGP / zero-access positioning

    Consider: Mailfence (Belgium) or Proton Mail

    Combell is classic hosting mail with spam filters and backups, not an E2EE privacy suite.

  • When: You want privacy-focused paid mail without Microsoft suite lock-in and are fine outside Benelux support culture

    Consider: Posteo, Tuta, Soverin, or Runbox

    Stronger anti-tracking or encryption narratives; thinner local Belgian phone support than Combell.

  • When: You only need Microsoft 365 and do not value a Benelux reseller for setup/support

    Consider: Microsoft 365 direct (or Google Workspace if you prefer Google)

    Combell does not remove Microsoft as processor; direct purchase may be simpler for pure Microsoft estates.

Runbox

Best fit when

  • Teams that want Oslo-hosted mailboxes under Runbox Solutions AS and Norwegian law, with full IMAP client freedom
  • Organizations needing custom domains, multi-account admin, and generous alias patterns without self-hosting an MTA
  • Buyers who prioritize subscription-funded, ad-free email over free ad-supported Gmail/Outlook tiers
  • Procurement that values renewable-energy data-center claims and Ethical Consumer Best Buy style ESG signals
  • Users comfortable managing optional PGP/S/MIME when message-level E2EE is needed for specific threads

Poor fit when

  • Requirements for default zero-access encryption where the provider cannot read mailbox content (prefer Proton Mail or Tuta)
  • Need for a fully self-hosted or fully open-source mail server stack
  • Heavy dependence on Microsoft 365 collaboration (Teams, SharePoint, advanced Exchange) rather than plain email hosting
  • Mandatory public ISO 27001 or SOC 2 evidence before shortlist—none found on public Runbox pages in this research pass
  • Optional product paths (default US web hosting via JaguarPC) when a strict no-US-vendor rule covers every SKU

Consider instead when

  • When: You need default end-to-end / zero-access encryption for all messages

    Consider: Proton Mail or Tuta

    Runbox uses optional PGP/S/MIME; operator can access stored mail for filtering and lawful process

  • When: You want a German privacy-oriented host with similar sustainability positioning

    Consider: Posteo

    Compare jurisdiction (DE vs NO), domain limits, and feature depth

  • When: You need Belgian email with integrated collaboration extras

    Consider: Mailfence

    Different encryption defaults and product scope

  • When: You need global free-tier convenience and suite lock-in

    Consider: Gmail or Outlook.com / Microsoft 365

    Accept US jurisdiction and ad/suite economics tradeoffs

Open questions for due diligence

Combell E-mail

  • Will Combell provide a signed DPA and a current named subprocessor list for Basic vs Hosted Exchange vs Microsoft 365 SKUs?
  • For Basic and Hosted Exchange, are all mailbox stores, backups, and anti-spam engines restricted to Belgium/Netherlands with no US-group subprocessors?
  • What Microsoft data residency / EU Data Boundary options are available on Combell-sold Microsoft 365 tenants?
  • Can independent auditors receive ISO certificate numbers, scopes, and any penetration-test summaries under NDA?
  • How is Flexmail (and other sister brands) contractually separated when mailbox customers enable marketing tools?

Runbox

  • Will Runbox sign a customer-facing B2B DPA listing all subprocessors for your tenant configuration?
  • Can optional web hosting and domain registration be restricted to EEA-only providers for your account?
  • Is any independent penetration test or SOC/ISO report available under NDA?
  • What is the current employee ownership share and any non-EU shareholding since the 2018 figure on the About page?
  • Confirm backup geography (privacy policy: secure servers separate from main system—are they also Norway-only?)