eclipso Mail Europe vs Infomaniak kMail

Compare eclipso Mail Europe and Infomaniak kMail on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Outlook.com

Logo: eclipso Mail Europe

eclipso Mail Europe

Germany· Email Services

Needs review

Shortlist when you want German-hosted mail with direct IMAP/SMTP, optional OpenPGP/S/MIME free on all tiers, prepaid freemium cost control, and a small business suite (drive, calendar, hybrid SMS/fax/post). Skip when you need zero-access defaults, published ISO/SOC audits, or large-enterprise identity—consider Posteo, Tuta, Proton Mail, or mailbox.org instead.

Germany-hosted (claimed)OpenPGP + S/MIMEIMAP/SMTP nativePrepaid freemiumOwner-operated DEBusiness DPA (Art. 28)
Logo: Infomaniak kMail

Infomaniak kMail

Switzerland· Email Services

Needs review

Shortlist when you need Swiss-hosted professional email with custom domains, IMAP/CalDAV, suite bundling (kSuite), and operator-owned DCs. Skip when zero-access client-side E2EE or full self-host is mandatory—consider Proton Mail (E2EE) or a self-hosted stack instead.

Swiss-hosted mailCustom domainsIMAP / CalDAVOSS mobile clientsISO 27001 (claimed)Optional send encryption
eclipso Mail Europe vs Infomaniak kMail: Snapshot
FeatureLogo: eclipso Mail Europeeclipso Mail EuropeLogo: Infomaniak kMailInfomaniak kMail
Country of originGermanySwitzerland
CategoryEmail ServicesEmail Services
Open sourceNoYes
Self-hostedNoNo
HeadquartersGermanySwitzerland
Legal entityClaus-Peter Beringer (eclipso Mail Europe), Grubstr. 9b, 95445 BayreuthInfomaniak Network SA (Rue Eugène Marziano 25, 1227 Les Acacias, Geneva; CH-660.0.059.996-1; IDE CHE-103.167.648)
Governing lawGerman / EU law (GDPR, BDSG); BayLDA supervisory authority named in privacy noticeNot listed
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumLow
Hosting / residencyPrimary hosting claimed exclusively in Germany; privacy policy names Speedloc Datacenter (Görlitz) with AVV. Optional SMS/fax/post: Commify Germany, CM.com Germany, letterei.de (all DE). Payments: Stripe Payments Europe and PayPal (Europe). Site: Google reCAPTCHA; marketing ad partners documented; Matomo self-hosted analytics.Primary mail hosting on Infomaniak-operated Swiss data centres (Geneva/Zurich region; Swiss Hosting label claimed); dual-DC backups in Switzerland. Confidentiality policy names payment partners (e.g. PayPal, Checkout) and other ancillary third parties for account/billing/measurement—not AWS/GCP/Azure as primary mail hosts in public materials.
Summary

Owner-operated German email and cloud suite with IMAP, optional OpenPGP/S/MIME, prepaid freemium, Drive/organizer, and hybrid SMS/fax/post—hosted in Germany.

Swiss-hosted professional email, contacts and calendars from Infomaniak Network SA—custom domains, open protocols, optional encryption, part of kSuite.

Tags
At a glance: eclipso Mail Europe vs Infomaniak kMail
At a glanceLogo: eclipso Mail Europeeclipso Mail EuropeLogo: Infomaniak kMailInfomaniak kMail
HQBayreuth, GermanyGeneva, Switzerland (Les Acacias)
Legal entityClaus-Peter Beringer (owner-operated)Infomaniak Network SA
Founded2003 (vendor)Not listed
HostingGermany; Speedloc Datacenter (Görlitz) named in privacy policyOwn Swiss data centres; dual-site mailbox backups
Open sourceNoMobile clients GPL-3.0; backend SaaS
Self-hostedNo (SaaS)Not listed
Commercial modelFreemail (ad-supported) + prepaid paid tiersFree my kSuite tier; paid kSuite / Mail Service seats
EncryptionOptional OpenPGP + S/MIME; TLS in transitNot listed
Self-hostNot listedNo (hosted only)
Key capabilities: eclipso Mail Europe vs Infomaniak kMail
Key capabilitiesLogo: eclipso Mail Europeeclipso Mail EuropeLogo: Infomaniak kMailInfomaniak kMail
Germany-hosted (claimed)YesNot listed
OpenPGP + S/MIMEYesNot listed
IMAP/SMTP nativeYesNot listed
Prepaid freemiumYesNot listed
Owner-operated DEYesNot listed
Business DPA (Art. 28)YesNot listed
Swiss-hosted mailNot listedYes
Custom domainsNot listedYes
IMAP / CalDAVNot listedYes
OSS mobile clientsNot listedYes
ISO 27001 (claimed)Not listedYes
Optional send encryptionNot listedYes

eclipso Mail Europe

  • Native OpenPGP and S/MIME in every plan

    OpenPGP (RFC 4880/9580) key wizard and import work in webmail and apps, free from Freemail upward; S/MIME accepts user-supplied X.509 certificates for business clients. E2EE only applies when both sides use it—plain IMAP mail is not zero-access by default. Private keys for webmail PGP are held in the account under a passphrase for multi-device use.

  • Standard IMAP, POP3, SMTP plus CalDAV/CardDAV

    Direct protocol access for Thunderbird, Outlook, Apple Mail, and mobile clients without a bridge product. Calendar and contacts sync via CalDAV/CardDAV; Premium and Business add WebDAV for the cloud drive. Suits teams that refuse locked-in web-only mail.

  • German-hosted suite: mail, drive, organizer

    One account covers webmail, eclipso Drive file storage with link sharing, Media Center, calendar, address book, notes, and tasks. Vendor claims exclusive Germany data centres (privacy policy names Speedloc Datacenter, Görlitz). Storage and address limits scale by prepaid tariff; WebDAV and higher quotas need paid tiers.

  • Prepaid freemium with optional hybrid channels

    Freemail signs up without credit card or phone number and is ad-supported; paid Connect/Premium/Business terms are prepaid and end automatically after a reminder. Credits enable SMS, fax, and hybrid physical post through named German gateways—useful for crafts and SMEs still on those channels.

  • Business domain and Art. 28 DPA on Business plan

    Business includes a custom mail domain option, higher alias counts, daily send limits suitable for small campaigns, and an in-product Art. 28 GDPR DPA download per vendor docs. Not a full enterprise workspace: no public SCIM/SSO pack or multi-org admin model documented.

Infomaniak kMail

  • Custom-domain mail with IMAP, CalDAV and CardDAV

    Host name@your-domain addresses with standard IMAP/SMTP plus CalDAV/CardDAV so Thunderbird, Apple Mail, Outlook and other clients stay usable. Paid kSuite/Mail Service tiers add multi-mailbox management, aliases/categories, signatures and team admin; free my kSuite is limited to one address without aliases.

  • One-click send-time encryption (OpenPGP / ECC / AES)

    Optional encryption at send uses OpenPGP, ECC and AES-256-GCM; Infomaniak-to-Infomaniak is automatic after auth, while external recipients often open a password-protected secure page. Private keys stay on Infomaniak infrastructure—useful for sensitive sends, but not zero-access client-side E2EE with user-held keys.

  • Open-source Infomaniak Mail mobile clients

    Official iOS and Android mail apps are published on GitHub under GPL-3.0 for local inspection and contribution. The hosted mail backend remains Infomaniak SaaS only—there is no supported self-hosted server stack for kMail.

  • Swiss dual-DC backups, SPF/DKIM/DMARC and antivirus

    Mailboxes are backed up across Swiss data centres with vendor-stated restore windows around 30 days; anti-spam/antivirus plus domain authentication (SPF, DKIM, DMARC) are standard. Availability claims (e.g. high uptime for essential services) should be checked against the current SLA for your plan.

  • Sovereign AI assist (Euria) inside the mailbox

    In-product AI can help draft, correct, translate and process mail context; Infomaniak states messages sent to its AI are processed in Switzerland and not stored for other purposes. Treat AI features as operator-side processing of content you choose to submit—not as end-to-end private AI.

Assurance & compliance: eclipso Mail Europe vs Infomaniak kMail
Assurance & complianceLogo: eclipso Mail Europeeclipso Mail EuropeLogo: Infomaniak kMailInfomaniak kMail
Independent security / no-logs audit
Not found

No public third-party security or no-logs audit PDF located on official pages

Not found

Bug bounty and ISO ISMS claimed; no public independent no-logs audit of mailbox content found. Encryption is optional and keys remain with Infomaniak.

ISO 27001
Not found

No ISO 27001 claim found on official security/about pages at research time

Vendor claimed

Vendor publishes ISO 27001:2022 certificate (certified since 2018 per certifications page); downloadable PDF and SoA references.

SOC 2 / SOC 3
Not found

No SOC 2/3 report referenced on official site

Not found

Not listed among published certifications (ISO 27001/9001/14001/50001, B Corp, Swiss labels).

GDPR / EU data protection
Vendor claimed

German controller, DPO contact, BayLDA authority, GDPR rights language in privacy policy; servers claimed in Germany

Vendor claimed

Swiss entity; GDPR and Swiss FADP commitments on legal pages; DPO listed; Swiss hosting of service data claimed.

US CLOUD Act exposure (indicative)
Partial

EU/DE owner-operated entity with DE hosting (Speedloc), but Stripe, PayPal, and Google reCAPTCHA/ad tooling introduce US-group processing paths for payment and website data. Not legal advice.

Partial

Swiss Infomaniak Network SA, no known US parent, own Swiss DCs for mail—not a claimed clean bill. Account payments via partners such as PayPal/Checkout (US-group) per confidentiality policy. Indicative only; not legal advice.

Data processing agreement (B2B)
Vendor claimed

Art. 28 DPA described as included and downloadable on Business plan; confirm for lower tiers

Vendor claimed

Downloadable DPA linked from trust centre (Data_Processing_Agreement (DPA).pdf).

EU AI Act
Not applicable

Email/cloud suite; not an AI system product

Not applicable

Euria AI assist exists inside mail; product is primarily email/hosting, not an AI-system vendor offering.

Considerations & known limitations: eclipso Mail Europe vs Infomaniak kMail
Considerations & known limitationsLogo: eclipso Mail Europeeclipso Mail EuropeLogo: Infomaniak kMailInfomaniak kMail
Not zero-access by default
Medium

Without OpenPGP/S/MIME, mailbox content is accessible to the operator like traditional IMAP hosts. Webmail PGP private keys are stored in-account under a passphrase—review threat model vs pure local keys.

Medium

Optional send encryption keeps private keys on Infomaniak infrastructure. Operators with warrant or insider access to the platform may still access unencrypted stored mail. Practical impact: do not treat kMail as a zero-knowledge vault for all messages.

US-group payment and site tooling
Medium

Stripe, PayPal, Google reCAPTCHA, and documented ad partners process personal data outside pure DE mailbox hosting. Material for CLOUD Act and transfer diligence even if mail servers stay in Germany.

Not listed
No public ISO/SOC or independent audit
Medium

Security assurance is first-party documentation only. Regulated buyers will need questionnaires, AVVs, and possibly on-request evidence.

Not listed
Freemail is ad-supported
Low

Free tier includes advertising as a service component. Paid tiers are marketed as ad-free; verify current footer/banner behaviour on the live product.

Not listed
Owner-operated scale limits
Low

Independent DE operator (not VC-backed hyperscale). Expect SME-grade support hours and product depth rather than global enterprise SLAs.

Not listed
SaaS-only mail backendNot listed
Low

No official self-host for the mail service; exit means IMAP export/migration. OSS clients do not equal portable server stack.

Free tier residency and feature capsNot listed
Low

my kSuite requires OECD residency and phone verification; no aliases, limited storage, enforced free signature. Unsuitable as free global professional mail.

Limited public mail-path subprocessor tableNot listed
Low

Hosting is own Swiss DCs per vendor docs; confidentiality policy lists payment and marketing-class third parties. Procurement should request a current subprocessor list for mailbox content paths.

No HDS health-hosting certNot listed
Medium

Vendor FAQ states French HDS certification is not planned—material for French health-sector workloads.

Fit

eclipso Mail Europe

Best fit when

  • Individuals and freelancers who want German mail with Thunderbird/Outlook IMAP and optional OpenPGP without a bridge
  • SMEs needing a custom domain, German server claims, and an Art. 28 DPA on the Business plan
  • Buyers who prefer prepaid terms that end automatically over auto-renewing Big Tech suites
  • Users who still send SMS, fax, or hybrid physical post from the same account
  • Teams migrating from Gmail/Outlook that value CalDAV/CardDAV and a bundled drive/organizer

Poor fit when

  • Orgs that require zero-access architecture where the provider never stores decryptable mailbox keys by default
  • Enterprises needing public ISO 27001/SOC 2 reports, SCIM/SSO, or multi-tenant admin
  • Buyers who refuse any US-group payment or website tooling (Stripe, PayPal, Google reCAPTCHA/ads)
  • Users seeking open-source or self-hosted mail only

Consider instead when

  • When: You want a simple paid-only German privacy mailbox without freemium advertising

    Consider: Posteo

    Posteo is ad-free paid; eclipso differentiates with freemail and hybrid channels

  • When: You prioritise always-on encryption over standard IMAP clients

    Consider: Tuta or Proton Mail

    Tuta uses proprietary E2EE clients; Proton needs Bridge for full IMAP-style access

  • When: You need a broader paid German workplace suite with stronger enterprise packaging

    Consider: mailbox (formerly mailbox.org)

    Compare admin, audit, and collaboration depth on current vendor docs

  • When: You need Google/Microsoft collaboration depth more than EU operator control

    Consider: Gmail or Microsoft 365

    Different jurisdiction and data-use models

Infomaniak kMail

Best fit when

  • SMEs and associations wanting Swiss-hosted name@domain email with standard IMAP clients
  • Teams that prefer an integrated kSuite workspace (mail + drive + meet) under one Swiss operator
  • Orgs that need a published B2B DPA, dual-site Swiss backups, and SPF/DKIM/DMARC on domains
  • Buyers who value open-source mobile clients even if the mail backend is SaaS-only
  • Individuals in OECD countries open to free my kSuite with known feature and residency limits

Poor fit when

  • Requirements for default zero-access E2EE with user-held keys on every message
  • Need to self-host the mail server stack (kMail is SaaS-only)
  • French HDS health-data hosting (vendor states HDS certification is not planned)
  • Free-tier signup outside OECD residency / without mobile verification
  • Very large estates that need more than kSuite's published per-offer user ceiling without a custom deal

Consider instead when

  • When: You need zero-access end-to-end encryption as the default mail model

    Consider: Proton Mail

    Different trust model: client-side E2EE vs Infomaniak operator-held keys for optional encryption

  • When: You want European hosted mail with a different encryption or non-profit posture

    Consider: Mailfence or Posteo

    Compare encryption UX, storage model, and commercial terms on each vendor site

  • When: You need full control of the MTA and storage stack

    Consider: Self-hosted mail (e.g. mailcow/Stalwart) or a host that publishes server software

    Infomaniak mobile apps are OSS; the hosted service is not self-hostable

Open questions for due diligence

eclipso Mail Europe

  • Can non-Business tariffs obtain a signed Art. 28 DPA and full subprocessor list on request?
  • Is Speedloc the sole host for mailbox content (not only the marketing site), and are backup/DR locations exclusively in Germany?
  • Are independent penetration tests or ISO plans available under NDA for enterprise buyers?
  • What exact data minimisation applies to freemail advertising versus paid ad-free tiers (inbox content vs account metadata)?
  • How are OpenPGP private keys encrypted at rest in the account store, and is export/deletion documented for offboarding?

Infomaniak kMail

  • Request the current subprocessor list scoped to Infomaniak Mail mailbox content (not only account billing).
  • Confirm whether optional encryption is fully rolled out on mobile apps for your required clients.
  • Validate seat ceilings, SLA, and restore RPO/RTO against your RTO targets for the chosen kSuite/Mail plan.
  • For regulated sectors: map FADP/GDPR DPA clauses and any sector addenda (FINMA mapping exists; HDS does not).