eclipso Mail Europe vs GMX Mail

Compare eclipso Mail Europe and GMX Mail on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Outlook.com

eclipso Mail Europe

Germany· Email Services

Needs review

Shortlist when you want German-hosted mail with direct IMAP/SMTP, optional OpenPGP/S/MIME free on all tiers, prepaid freemium cost control, and a small business suite (drive, calendar, hybrid SMS/fax/post). Skip when you need zero-access defaults, published ISO/SOC audits, or large-enterprise identity—consider Posteo, Tuta, Proton Mail, or mailbox.org instead.

Germany-hosted (claimed)OpenPGP + S/MIMEIMAP/SMTP nativePrepaid freemiumOwner-operated DEBusiness DPA (Art. 28)

View listing Visit Website

GMX Mail

Germany· Email Services

Needs review

Shortlist GMX Mail for consumer or light-professional freemail when you want a German United Internet operator, claimed German mailbox data centers, large free storage, and standard IMAP/POP—with optional OpenPGP. Skip when you need zero-access encryption by default, enterprise DPA/audit packs, or an ad-free architecture as the baseline; consider Proton Mail instead.

German operatorMailbox in DE (claimed)IMAP / POP3 / SMTPOptional OpenPGPFree ad-supportedSaaS only

View listing Visit Website

Highlighted rows differ between the two products.

eclipso Mail Europe vs GMX Mail: Snapshot
Feature	eclipso Mail Europe	GMX Mail
Country of origin	Germany	Germany
Category	Email Services	Email Services
Open source	No	No
Self-hosted	No	No
Headquarters	Germany	Germany
Legal entity	Claus-Peter Beringer (eclipso Mail Europe), Grubstr. 9b, 95445 Bayreuth	1&1 Mail & Media GmbH (Zweigniederlassung Karlsruhe; Hauptsitz Montabaur)
Governing law	German / EU law (GDPR, BDSG); BayLDA supervisory authority named in privacy notice	German law (international T&Cs); GDPR applies as EU controller
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Medium
Hosting / residency	Primary hosting claimed exclusively in Germany; privacy policy names Speedloc Datacenter (Görlitz) with AVV. Optional SMS/fax/post: Commify Germany, CM.com Germany, letterei.de (all DE). Payments: Stripe Payments Europe and PayPal (Europe). Site: Google reCAPTCHA; marketing ad partners documented; Matomo self-hosted analytics.	Vendor privacy (EN): FreeMail emails, address book, and calendar processed in secure data centers in Germany. Product security pages: European data centers for stored mail. Group United Internet AG (DE). Named non-mail paths: Google Analytics/GTM on portal; Google/Yahoo search partnership; international ad partners under consent; DE privacy allows third-country transfers with Chapter V safeguards when used. No public exhaustive mail-infra subprocessor list found.
Summary	Owner-operated German email and cloud suite with IMAP, optional OpenPGP/S/MIME, prepaid freemium, Drive/organizer, and hybrid SMS/fax/post—hosted in Germany.	German FreeMail from 1&1 Mail & Media GmbH (United Internet): large free storage, IMAP/POP/SMTP, optional OpenPGP and 2FA, ad-supported consumer webmail.
Tags	germany openpgp imap email privacy gdpr prepaid cloud-storage	germany openpgp imap freemail webmail united-internet ad-supported consumer

At a glance: eclipso Mail Europe vs GMX Mail
At a glance	eclipso Mail Europe	GMX Mail
HQ	Bayreuth, Germany	Not listed
Legal entity	Claus-Peter Beringer (owner-operated)	Not listed
Founded	2003 (vendor)	Not listed
Hosting	Germany; Speedloc Datacenter (Görlitz) named in privacy policy	Not listed
Open source	No	No
Self-hosted	No (SaaS)	No
Commercial model	Freemail (ad-supported) + prepaid paid tiers	Not listed
Encryption	Optional OpenPGP + S/MIME; TLS in transit	Not listed
HQ / entity	Not listed	1&1 Mail & Media GmbH, Montabaur (DE)
Parent group	Not listed	United Internet AG (DE)
Product type	Not listed	Consumer FreeMail + optional paid tiers
Hosting (claimed)	Not listed	Mailbox/calendar data in German data centers
Protocols	Not listed	Webmail; POP3/IMAP/SMTP (opt-in)

Key capabilities: eclipso Mail Europe vs GMX Mail
Key capabilities	eclipso Mail Europe	GMX Mail
Germany-hosted (claimed)	Yes	Not listed
OpenPGP + S/MIME	Yes	Not listed
IMAP/SMTP native	Yes	Not listed
Prepaid freemium	Yes	Not listed
Owner-operated DE	Yes	Not listed
Business DPA (Art. 28)	Yes	Not listed
German operator	Not listed	Yes
Mailbox in DE (claimed)	Not listed	Yes
IMAP / POP3 / SMTP	Not listed	Yes
Optional OpenPGP	Not listed	Yes
Free ad-supported	Not listed	Yes
SaaS only	Not listed	Yes

eclipso Mail Europe

Native OpenPGP and S/MIME in every plan
OpenPGP (RFC 4880/9580) key wizard and import work in webmail and apps, free from Freemail upward; S/MIME accepts user-supplied X.509 certificates for business clients. E2EE only applies when both sides use it—plain IMAP mail is not zero-access by default. Private keys for webmail PGP are held in the account under a passphrase for multi-device use.
Standard IMAP, POP3, SMTP plus CalDAV/CardDAV
Direct protocol access for Thunderbird, Outlook, Apple Mail, and mobile clients without a bridge product. Calendar and contacts sync via CalDAV/CardDAV; Premium and Business add WebDAV for the cloud drive. Suits teams that refuse locked-in web-only mail.
German-hosted suite: mail, drive, organizer
One account covers webmail, eclipso Drive file storage with link sharing, Media Center, calendar, address book, notes, and tasks. Vendor claims exclusive Germany data centres (privacy policy names Speedloc Datacenter, Görlitz). Storage and address limits scale by prepaid tariff; WebDAV and higher quotas need paid tiers.
Prepaid freemium with optional hybrid channels
Freemail signs up without credit card or phone number and is ad-supported; paid Connect/Premium/Business terms are prepaid and end automatically after a reminder. Credits enable SMS, fax, and hybrid physical post through named German gateways—useful for crafts and SMEs still on those channels.
Business domain and Art. 28 DPA on Business plan
Business includes a custom mail domain option, higher alias counts, daily send limits suitable for small campaigns, and an in-product Art. 28 GDPR DPA download per vendor docs. Not a full enterprise workspace: no public SCIM/SSO pack or multi-org admin model documented.

GMX Mail

Large free mailbox storage with open protocols
gmx.com free accounts advertise up to 65 GB email storage and 50 MB attachments. POP3, IMAP, and SMTP are supported after you enable them in settings (TLS 1.2+; imap.gmx.com / mail.gmx.com). Suits users who want client choice (Thunderbird, Outlook, mobile) without Google or Microsoft as the mailbox host.
Optional OpenPGP end-to-end encryption (Mailvelope)
GMX offers free OpenPGP messaging via the Mailvelope browser extension: key generation, local key storage, key directory, and mobile recovery. Encryption is opt-in per message after setup—not whole-mailbox zero-access by default. Best for occasional sensitive threads when both parties can use OpenPGP.
Aliases, Mail Collector, and multi-account inbox
Create up to 10 alias addresses (including other GMX domains) managed in one inbox, and pull up to 10 external accounts via Mail Collector. Useful for freelancers and project mail without juggling multiple passwords or providers day-to-day.
Spam filtering, antivirus, and optional TOTP 2FA
Free accounts include automated spam filtering (user blacklist and optional improved detection) and antivirus scanning of mail and cloud files. Optional two-factor authentication uses an authenticator app (TOTP); third-party clients use app-specific passwords when 2FA is on.
Bundled Cloud, calendar, contacts, and Online Office
Accounts include contacts, calendar/organizer, about 2 GB GMX Cloud with share links, and Online Office for common document formats—enough for light personal productivity without a separate suite subscription.

Assurance & compliance: eclipso Mail Europe vs GMX Mail
Assurance & compliance	eclipso Mail Europe	GMX Mail
Independent security / no-logs audit	Not found No public third-party security or no-logs audit PDF located on official pages	Not found OpenPGP/Mailvelope path described as externally reviewed; no public independent no-logs audit for FreeMail mailbox access found on product pages.
ISO 27001	Not found No ISO 27001 claim found on official security/about pages at research time	Not found No GMX FreeMail-branded ISO 27001 certificate located on security/privacy pages in this research pass (group companies may hold certs under other brands).
SOC 2 / SOC 3	Not found No SOC 2/3 report referenced on official site	Not found No SOC 2/3 report found on GMX public security pages.
GDPR / EU data protection	Vendor claimed German controller, DPO contact, BayLDA authority, GDPR rights language in privacy policy; servers claimed in Germany	Vendor claimed EU/German controller; public privacy notices under GDPR; DPO published; supervisory authorities named (BfDI / LfDI RLP).
US CLOUD Act exposure (indicative)	Partial EU/DE owner-operated entity with DE hosting (Speedloc), but Stripe, PayPal, and Google reCAPTCHA/ad tooling introduce US-group processing paths for payment and website data. Not legal advice.	Partial German entity and parent (United Internet AG); mailbox data claimed in German DCs. Partial/medium because portal analytics include Google LLC tools, freemail ads involve international partners, and no full public mail-infra subprocessor list. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Art. 28 DPA described as included and downloadable on Business plan; confirm for lower tiers	Not found Product is primarily consumer FreeMail under GTCs/privacy policy; no public self-serve B2B DPA flow found for FreeMail shortlisting.
EU AI Act	Not applicable Email/cloud suite; not an AI system product	Not applicable Not an AI-centric product; optional assistive features may appear in product privacy text but FreeMail is not marketed as an AI system.

Considerations & known limitations: eclipso Mail Europe vs GMX Mail
Considerations & known limitations	eclipso Mail Europe	GMX Mail
Not zero-access by default	Medium Without OpenPGP/S/MIME, mailbox content is accessible to the operator like traditional IMAP hosts. Webmail PGP private keys are stored in-account under a passphrase—review threat model vs pure local keys.	Not listed
US-group payment and site tooling	Medium Stripe, PayPal, Google reCAPTCHA, and documented ad partners process personal data outside pure DE mailbox hosting. Material for CLOUD Act and transfer diligence even if mail servers stay in Germany.	Not listed
No public ISO/SOC or independent audit	Medium Security assurance is first-party documentation only. Regulated buyers will need questionnaires, AVVs, and possibly on-request evidence.	Not listed
Freemail is ad-supported	Low Free tier includes advertising as a service component. Paid tiers are marketed as ad-free; verify current footer/banner behaviour on the live product.	Not listed
Owner-operated scale limits	Low Independent DE operator (not VC-backed hyperscale). Expect SME-grade support hours and product depth rather than global enterprise SLAs.	Not listed
Advertising-funded free tier	Not listed	Medium FreeMail depends on ads and (with consent) interest-based targeting and partner sharing. Privacy posture differs from paid privacy mail. Practical impact: expect consent UX, ad surfaces, and partner lists—not a zero-ads default.
E2E encryption is optional, not default	Not listed	Medium Without OpenPGP setup, mailbox content is accessible to the provider like conventional hosted mail. Practical impact: do not treat GMX FreeMail as zero-access encryption architecture.
Incomplete public infrastructure subprocessors	Not listed	Medium Residency for mail is claimed (Germany/EU), but there is no enterprise-style published subprocessor inventory for core mail infrastructure. Portal paths name Google Analytics and global ad partners. Practical impact: extra questionnaire work for high-assurance buyers.
Inactivity and freemail operational policies	Not listed	Low Terms/privacy allow deletion of free mailbox content after prolonged inactivity (about 180 days without login on FreeMail privacy text). Practical impact: inactive project addresses can disappear if not maintained.
No public ISO/SOC package for FreeMail	Not listed	Low Security pages emphasize product features (spam, AV, 2FA, PGP) rather than downloadable ISO/SOC evidence for FreeMail. Practical impact: may fail enterprise vendor security questionnaires without further vendor dialogue.

Fit

eclipso Mail Europe

Best fit when

Individuals and freelancers who want German mail with Thunderbird/Outlook IMAP and optional OpenPGP without a bridge
SMEs needing a custom domain, German server claims, and an Art. 28 DPA on the Business plan
Buyers who prefer prepaid terms that end automatically over auto-renewing Big Tech suites
Users who still send SMS, fax, or hybrid physical post from the same account
Teams migrating from Gmail/Outlook that value CalDAV/CardDAV and a bundled drive/organizer

Poor fit when

Orgs that require zero-access architecture where the provider never stores decryptable mailbox keys by default
Enterprises needing public ISO 27001/SOC 2 reports, SCIM/SSO, or multi-tenant admin
Buyers who refuse any US-group payment or website tooling (Stripe, PayPal, Google reCAPTCHA/ads)
Users seeking open-source or self-hosted mail only

Consider instead when

When: You want a simple paid-only German privacy mailbox without freemium advertising
Consider: Posteo
Posteo is ad-free paid; eclipso differentiates with freemail and hybrid channels
When: You prioritise always-on encryption over standard IMAP clients
Consider: Tuta or Proton Mail
Tuta uses proprietary E2EE clients; Proton needs Bridge for full IMAP-style access
When: You need a broader paid German workplace suite with stronger enterprise packaging
Consider: mailbox (formerly mailbox.org)
Compare admin, audit, and collaboration depth on current vendor docs
When: You need Google/Microsoft collaboration depth more than EU operator control
Consider: Gmail or Microsoft 365
Different jurisdiction and data-use models

GMX Mail

Best fit when

Individuals and freelancers who want a European freemail address with large free storage and IMAP client freedom
Users consolidating multiple addresses via aliases (up to 10) and Mail Collector
Buyers who prefer a German legal controller (1&1 Mail & Media GmbH / United Internet) over US Big Tech freemail
Teams that only need optional OpenPGP for specific sensitive threads, not zero-access by default
Users already familiar with GMX/WEB.DE in German-speaking markets who need international domains (e.g. gmx.com)

Poor fit when

Organizations that require default end-to-end / zero-access encryption for all mail
Procurement that needs a published independent security audit pack, ISO/SOC evidence, and a B2B DPA as standard shortlist inputs
Teams that cannot accept advertising-funded freemail economics or interest-based ad consent UX
Custom-domain corporate mail and admin controls at Microsoft 365 / Google Workspace depth
Self-hosted or open-source mail stack requirements

Consider instead when

When: You need zero-access encryption by default and a privacy-first paid model without ad-funded freemail as the core product
Consider: Proton Mail
Proton is the stronger shortlist peer in this catalog for E2E-first evaluation.
When: You need Google Workspace-class collaboration and are willing to accept US Big Tech jurisdiction
Consider: Gmail / Google Workspace
Richer suite integration; different sovereignty and ad/ecosystem tradeoffs.
When: You need Microsoft ecosystem mail, calendar, and compliance tooling
Consider: Outlook.com / Microsoft 365
Strong enterprise admin story; US parent and CLOUD Act path differ from GMX.

Open questions for due diligence

eclipso Mail Europe

Can non-Business tariffs obtain a signed Art. 28 DPA and full subprocessor list on request?
Is Speedloc the sole host for mailbox content (not only the marketing site), and are backup/DR locations exclusively in Germany?
Are independent penetration tests or ISO plans available under NDA for enterprise buyers?
What exact data minimisation applies to freemail advertising versus paid ad-free tiers (inbox content vs account metadata)?
How are OpenPGP private keys encrypted at rest in the account store, and is export/deletion documented for offboarding?

GMX Mail

Will 1&1 Mail & Media sign a B2B DPA and publish a current mail-infrastructure subprocessor list for our use case?
Are FreeMail mailbox systems solely on United Internet / 1&1 operated German DCs, or are any US-group cloud providers used for primary storage, backup, or DR?
What independent audits or certifications (if any) cover the FreeMail platform beyond the Mailvelope/OpenPGP path?
For paid/premium mailboxes: which advertising and tracking paths remain, and what contractual residency language is available?