Combell E-mail vs web.de

Compare Combell E-mail and web.de on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Outlook.com

Logo: Combell E-mail

Combell E-mail

Belgium· Email Services

Needs review

Shortlist when you need Benelux domain mail with phone-first support, Hosted Exchange on Combell infrastructure, or Microsoft 365 sold with local onboarding from a Belgian host. Skip when you need zero-access / E2EE mail or a vendor that never routes collaboration data through Microsoft — consider Mailfence, Proton Mail, or Tuta instead.

EU-operated (Belgium)Benelux data centres (claimed)Hosted ExchangeMicrosoft 365 resellerISO 27001 (claimed)24/7 local support
Logo: web.de

web.de

Germany· Email Services

Needs review

Shortlist web.de when you need mass-market German freemail with DE-sited mail/cloud, E-Mail made in Germany TLS alliance markers, optional PGP/2FA, and a familiar DACH portal. Skip when you need default E2EE, no advertising data path, self-host, or enterprise admin—consider Posteo, mailbox.org, Tuta, or Proton Mail instead.

DE-operated freemailE-Mail made in GermanyGermany data centers (claimed)Optional PGPFreeMail + paid upgradesSaaS only
Combell E-mail vs web.de: Snapshot
FeatureLogo: Combell E-mailCombell E-mailLogo: web.deweb.de
Country of originBelgiumGermany
CategoryEmail ServicesEmail Services
Open sourceNoNo
Self-hostedNoNo
HeadquartersBelgiumGermany
Legal entityCombell nv (Skaldenstraat 121, 9042 Ghent; CBE 0541.977.701)1&1 Mail & Media GmbH (United Internet AG group)
Governing lawBelgium / EU GDPRGermany / EU GDPR
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumLow
Hosting / residencyBasic and Hosted Exchange: Combell-operated Tier 3+ Benelux data centres (Belgium/Netherlands claimed for Exchange mail). Microsoft 365 SKUs: Microsoft cloud (US-parented provider). Flexmail and other team.blue sister tools may process campaign data. Public named subprocessor list not published — request via data protection contact. Privacy policy allows third-party processors and SCCs for some non-EU manufacturers.Vendor claims email and Online-Speicher stored exclusively in Germany in company-owned data centers (E-Mail/Cloud made in Germany). FreeMail monetized via advertising and IAB TCF consent partners; privacy notice allows EEA third-country transfers with Chapter V safeguards. Portal/optional features use additional processors (e.g. search partners, embeds, homepage builder DUDA Inc., ID vendors). No exhaustive public mail-stack subprocessor list found.
Summary

Belgian professional email hosting from Combell (team.blue): domain Basic IMAP mailboxes, Hosted Exchange, Microsoft 365 reseller options, spam protection, backups, SMTP relay, and 24/7 Benelux support.

German freemail and portal from United Internet’s 1&1 Mail & Media GmbH: FreeMail with DE-sited mail and cloud, E-Mail made in Germany TLS alliance, optional PGP—consumer SaaS, not default-E2EE privacy mail.

Tags
At a glance: Combell E-mail vs web.de
At a glanceLogo: Combell E-mailCombell E-mailLogo: web.deweb.de
HQGhent, Belgium (Combell nv)Not listed
Groupteam.blue (European multi-brand)Not listed
Product typeHosted domain email (SaaS)Consumer freemail + portal + cloud (SaaS)
Open sourceNoNo
Self-hostNoNo
Main SKUsBasic IMAP · Hosted Exchange · Microsoft 365 · SMTP relay · FlexmailNot listed
Commercial modelPaid subscription plans; money-back guarantee advertisedAd-supported FreeMail; paid mailbox/cloud upgrades; Consent or Pay
HQ / operatorNot listed1&1 Mail & Media GmbH, Montabaur/Karlsruhe, Germany
Parent groupNot listedUnited Internet AG (Germany)
Hosting (vendor claim)Not listedCompany-owned data centers in Germany
Key capabilities: Combell E-mail vs web.de
Key capabilitiesLogo: Combell E-mailCombell E-mailLogo: web.deweb.de
EU-operated (Belgium)YesYes
Benelux data centres (claimed)YesNot listed
Hosted ExchangeYesNot listed
Microsoft 365 resellerYesNot listed
ISO 27001 (claimed)YesNot listed
24/7 local supportYesNot listed
E-Mail made in GermanyNot listedYes
Germany data centers (claimed)Not listedYes
Optional PGPNot listedYes
FreeMail + paid upgradesNot listedYes
SaaS onlyNot listedYes

Combell E-mail

  • Domain Basic mailboxes (IMAP/POP3/SMTP)

    Create addresses on your own domain with multi-device sync, client compatibility (Outlook, Apple Mail, mobile), and browser webmail. Published storage tiers include 5 GB, 50 GB, and 100 GB Basic plans with spam/antivirus filtering and daily mailbox backups. Suited to SMEs that need professional mail without Exchange collaboration features.

  • Hosted Exchange with calendars and push

    Exchange mailboxes add shared calendars, task lists, meeting-room booking, and direct push notifications, with free transfer help for existing Exchange setups. Combell states Exchange mail runs in Belgium and Netherlands data centres. Choose this when teams need Outlook-style groupware without the full Microsoft 365 app suite.

  • Microsoft 365 reseller with local setup

    Business and Enterprise Microsoft 365 packages combine Exchange mail with Office apps, OneDrive, Teams, and related Microsoft cloud services. Combell differentiates with DNS/mailbox configuration service and 24/7 support in local languages rather than Microsoft-only helpdesks. Mailbox and file data on this path are processed by Microsoft, not only on Combell hardware.

  • Spam filtering, antivirus, and daily backups

    Basic and Exchange product pages include automated spam and virus scanning plus daily mailbox backups for restore after accidental deletion. Microsoft 365 customers can add a separate Combell Microsoft 365 backup product for more frequent cloud backups of mail and files. Local client backups are still recommended for dual protection.

  • SMTP relay and Flexmail marketing path

    A dedicated mail-server / SMTP relay product targets higher-volume sending with plan-based monthly send limits and optional dedicated IP, aimed at newsletters and app transactional mail that would hit shared-mailbox limits. New mailbox customers are offered Flexmail e-mail marketing trial packages via the sister brand in the team.blue group.

  • 24/7 multilingual Benelux support

    Combell markets round-the-clock support by phone (toll-free lines advertised), chat, and e-mail in local languages, including weekends and holidays. The company claims to have been the first Belgian hoster with 24/7 support (from 2000). This is a core reason Benelux SMEs pick Combell over pure self-serve global suites.

web.de

  • E-Mail made in Germany alliance transport

    Founding member of the German provider alliance (WEB.DE, GMX, 1&1, STRATO, T-Online, freenet). TLS on paths inside the alliance, mail stored in Germany, and green checkmarks on alliance addresses in the compose UI. Does not encrypt content to non-alliance or non-PGP recipients end-to-end by default.

  • FreeMail + paid upgrades with intelligent inbox

    Ad-supported FreeMail with integrated calendar, contacts, and Online-Speicher. Intelligent inbox categorizes newsletters, orders, social, and contracts/subscriptions without duplicating messages; optional package tracking via DHL, DPD, and GLS when consented. Paid tiers expand quotas and reduce ad/tracking friction under Consent or Pay.

  • Optional PGP and free 2FA

    Optional PGP end-to-end encryption for sensitive mail (both parties need keys/compatible clients). Optional free two-factor authentication for account login. Baseline mailbox protection relies on account credentials, spam/virus filters, and TLS—not default E2EE for every message.

  • Cloud made in Germany Online-Speicher

    Mailbox-integrated cloud with browser, app, and desktop access; link sharing and Online Office for documents. Vendor claims exclusive German data-center storage and TLS in transit under Cloud made in Germany. Free tier includes a starter cloud quota; larger capacities are paid add-ons. Not a full Google Drive/OneDrive collab suite.

  • German consumer portal on the same identity

    News, services, WEB.Cent cashback, and optional Deutsche Post letter preview sit beside mail. Useful for personal DACH users; increases advertising and partner surface versus a pure mailbox product. Portal embeds and partners are consent-gated where required.

Assurance & compliance: Combell E-mail vs web.de
Assurance & complianceLogo: Combell E-mailCombell E-mailLogo: web.deweb.de
Independent security / no-logs audit
Not found

No public independent no-logs or mailbox-content audit found; ISO certificates are management-system certs, not no-logs proofs.

Not found

No public independent no-logs or full security audit package found for FreeMail; alliance pages claim oversight by data-protection function and independent Prüfstellen at a high level only.

ISO 27001
Vendor claimed

Vendor states first Belgian hoster certified in 2011; certificate PDF linked on ISO page; scope includes hosting and related services. Re-verify current certificate in procurement.

Not found

No public ISO 27001 certificate page located for the web.de freemail product during research.

ISO 27701 (privacy information management)
Vendor claimed

Vendor claims first Benelux hoster (2021); scope text includes e-mail and office tools. Certificate PDF linked on site.

Not listed
ISO 9001
Vendor claimed

Vendor claims certification since 2007; certificate PDF linked; scope includes e-mail & tools among other services.

Not listed
SOC 2 / SOC 3
Not found

No public SOC 2/3 report located on Combell marketing/trust pages during research.

Not found

No public SOC 2/3 report found for web.de FreeMail.

GDPR / EU data protection
Vendor claimed

Belgian EU entity; detailed privacy policy referencing GDPR; ISO 27701 claimed for privacy management. Confirm DPA and processing roles for your use case.

Vendor claimed

German controller (1&1 Mail & Media GmbH); detailed GDPR privacy notice; DE storage claims for mail/cloud. Not a legal certification.

US CLOUD Act exposure (indicative)
Partial

EuropeanStack assessment: no known US parent of Combell nv, but Microsoft 365 SKUs use Microsoft (US-parented) as cloud processor; public subprocessor list missing; privacy policy contemplates non-EU manufacturers with SCCs for some products. Basic/Hosted Exchange on Benelux DCs is a lower-exposure path than Microsoft 365. Not legal advice.

Partial

EU/German entity and parent; no known US parent; mail/cloud claimed on company-owned DE data centers. Partial because privacy notice allows third-country transfers with safeguards, FreeMail uses ad/TCF partners, and no exhaustive public subprocessor inventory. Not legal advice.

Data processing agreement (B2B)
Not found

No self-serve public DPA download found. Privacy policy describes processor contracts with sub-contractors; contact Data Protection Team (data.protection@combellgroup.com) to request current DPA and subprocessor list.

Not found

Consumer freemail focus; no clear self-serve public B2B DPA for FreeMail found. Request under contract if treating as processor for an organization.

EU AI Act
Not applicable

Core product is email hosting; optional Microsoft Copilot add-on is Microsoft AI — evaluate under Microsoft terms if purchased, not as a Combell-native AI system.

Not applicable

Consumer mail/portal with limited in-product assistants; not an AI-centric product for this checklist.

Considerations & known limitations: Combell E-mail vs web.de
Considerations & known limitationsLogo: Combell E-mailCombell E-mailLogo: web.deweb.de
Microsoft 365 path uses Microsoft cloud
High

Choosing Microsoft 365 via Combell does not keep mailbox/file data solely on Belgian Combell servers. Microsoft remains the cloud provider for those tenants; CLOUD Act and transfer diligence must treat Microsoft, not only Combell.

Not listed
No public subprocessor list
Medium

Privacy policy confirms third-party processors and group sharing but does not publish a named register. Buyers must request the current list (including Flexmail, Microsoft if applicable, and team.blue affiliates) before relying on residency claims.

Not listed
Not end-to-end encrypted mail
Medium

Provider-side spam filtering and backups imply conventional hosted mail architecture. Unsuitable where zero-access encryption is a hard requirement.

Not listed
ISO claims not independently re-verified here
Low

ISO 9001/27001/27701 are vendor-published with PDF certificates. This evaluation marks them claimed; procurement should check validity dates and scope against the actual email services purchased.

Not listed
PE-backed group ownership
Low

team.blue has major PE investors (Hg and reported co-investors). This is European PE structure, not a US Big Tech parent, but ownership can change; track change-of-control clauses in contracts if sovereignty is critical.

Not listed
Ad-financed FreeMail and consent surfaceNot listed
Medium

FreeMail uses advertising and Consent or Pay. With consent, content may feed interest profiles; FreeMail users cannot drop WEB.DE informiert like paid tiers. Unsuitable where ad-tech processors are banned.

No default end-to-end encryptionNot listed
Medium

TLS and alliance transport protection are not content E2EE. Optional PGP only covers willing counterparties. Operator can process plaintext for spam, intelligent inbox, and consented ad analysis.

Limited public audit/cert artifactsNot listed
Medium

ISO 27001, SOC 2, and independent no-logs audits not found on public product pages. Trust rests on German entity, DE hosting claims, and first-party security copy.

Third-country transfers and portal partnersNot listed
Low

Privacy notice contemplates non-EEA recipients under Chapter V safeguards. Portal/search/ID/ad features introduce extra processors beyond the mailbox DC story—review consent layer and purpose before sensitive use.

FreeMail inactivity content deletionNot listed
Low

Privacy notice: FreeMail email content may be deleted after more than 180 days without login. Not a durable archive without activity or export.

Fit

Combell E-mail

Best fit when

  • Benelux SMEs that want professional domain addresses with IMAP/POP or Exchange and a real phone helpdesk
  • Teams already buying domains or web hosting from Combell / team.blue and consolidating vendors
  • Organisations that need Hosted Exchange calendars and push without standing up their own mail servers
  • Buyers who want Microsoft 365 with local DNS/mailbox configuration and 24/7 Dutch/French/English support
  • Senders who need an SMTP relay or Flexmail path alongside domain mailboxes

Poor fit when

  • Requirements for end-to-end encrypted or zero-access email (provider cannot read content)
  • Need for open-source self-hosted mail only (Combell is hosted SaaS, not a self-host product)
  • Hard ban on any Microsoft-class processor when the org still wants full Office cloud collaboration
  • Procurement that requires a public subprocessor register before first contact (list not published online)
  • Teams seeking free unlimited consumer mail rather than paid professional mailboxes

Consider instead when

  • When: You need Belgian or EU end-to-end encrypted mail with OpenPGP / zero-access positioning

    Consider: Mailfence (Belgium) or Proton Mail

    Combell is classic hosting mail with spam filters and backups, not an E2EE privacy suite.

  • When: You want privacy-focused paid mail without Microsoft suite lock-in and are fine outside Benelux support culture

    Consider: Posteo, Tuta, Soverin, or Runbox

    Stronger anti-tracking or encryption narratives; thinner local Belgian phone support than Combell.

  • When: You only need Microsoft 365 and do not value a Benelux reseller for setup/support

    Consider: Microsoft 365 direct (or Google Workspace if you prefer Google)

    Combell does not remove Microsoft as processor; direct purchase may be simpler for pure Microsoft estates.

web.de

Best fit when

  • German consumers who want a familiar .de freemail address with portal news and everyday cloud storage
  • Secondary personal or family mail where DE operator and DE storage matter more than default E2EE
  • Users who value intelligent inbox sorting, package tracking, and mobile/desktop access over privacy-maximalist design
  • Teams comparing Gmail/Outlook.com alternatives on jurisdiction while accepting consumer freemail trade-offs
  • Buyers already in the United Internet ecosystem (WEB.DE / GMX) who need a consistent DACH brand

Poor fit when

  • Organizations needing primary business mail with admin console, SSO, and signed B2B DPA as standard
  • Hard requirements for default end-to-end encryption or zero advertising/tracking surface
  • Self-hosted or open-source mail stacks you operate yourself
  • Long-term cold archives on FreeMail (inactivity deletion policy)
  • Procurement policies that forbid ad-tech partners or third-country transfer language without contract exhibits

Consider instead when

  • When: You need default E2EE and a privacy-first paid mailbox

    Consider: Tuta or Proton Mail

    web.de PGP is optional and counterpart-dependent; FreeMail is ad-financed.

  • When: You want ad-free German/EU mail with strong consumer privacy posture and paid model only

    Consider: Posteo or mailbox.org

    Less portal monetization; clearer privacy-first product framing than mass freemail.

  • When: You prefer the same United Internet Mail & Media stack under another brand

    Consider: GMX Mail

    Nearly aligned trust and capability story; brand and portal mix differ.

  • When: You need Google/Microsoft-class workspace collab and enterprise compliance packs

    Consider: Gmail (Google Workspace) or Outlook.com / Microsoft 365

    Trade DE freemail residency story for US-group platforms and deeper admin tooling.

Open questions for due diligence

Combell E-mail

  • Will Combell provide a signed DPA and a current named subprocessor list for Basic vs Hosted Exchange vs Microsoft 365 SKUs?
  • For Basic and Hosted Exchange, are all mailbox stores, backups, and anti-spam engines restricted to Belgium/Netherlands with no US-group subprocessors?
  • What Microsoft data residency / EU Data Boundary options are available on Combell-sold Microsoft 365 tenants?
  • Can independent auditors receive ISO certificate numbers, scopes, and any penetration-test summaries under NDA?
  • How is Flexmail (and other sister brands) contractually separated when mailbox customers enable marketing tools?

web.de

  • Will 1&1 Mail & Media sign a B2B DPA and provide a current subprocessor list for mailbox and cloud processing?
  • Are there ISO 27001, C5, or independent penetration-test summaries available under NDA for Mail & Media freemail infrastructure?
  • For your use case, is FreeMail with ads acceptable, or must you force paid TrackFree/premium paths and refuse intelligent-inbox/ad consents?
  • Confirm whether any non-DE backup, support, or analytics processors touch mailbox content beyond the public privacy notice.