Compare Fleep and Kolab Now on capabilities, jurisdiction, assurance, and fit for European buyers.
Estonia· Groupware
Needs review
Shortlist when you want an Estonian-operated messenger that mixes team chat with real email participation, light task/pin/file tools, and Business-side account ownership. Skip when you need E2EE, self-hosting, or a deep enterprise app marketplace — consider Nextcloud Talk (self-host) or Slack/Teams instead.
Switzerland· Groupware
Needs review
Shortlist when you want Swiss-operated, FOSS-based classical groupware (mail, CalDAV/CardDAV, ActiveSync, files, Collabora) on operator-owned Bern infrastructure. Skip when you need default zero-access E2EE mail, public ISO/SOC evidence, or mature video — consider Proton Mail/Tuta for E2EE mail or Google Workspace/Microsoft 365 for enterprise suite depth.
Highlighted rows differ between the two products.
| Feature | Fleep | Kolab Now |
|---|---|---|
| Country of origin | Estonia | Switzerland |
| Category | Groupware | Groupware |
| Open source | No | Yes |
| Self-hosted | No | No |
| Headquarters | Estonia | Switzerland |
| Legal entity | Fleep Technologies OÜ (registry code 12373841), Akadeemia tee 21/4, Tallinn, Estonia | Apheleia IT AG (trade register CH-036.3.053.227-3; VAT CHE-149.254.861) |
| Governing law | Republic of Estonia (Tallinn courts per Terms) | Swiss law (see Terms of Service for contract details) |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Primary app data on Amazon Web Services EC2 in Dublin, Ireland (vendor About + security help). Privacy policy: AWS in EU territory. Also names Braintree/PayPal (payments), Google Analytics and Mixpanel (analytics), MailChimp/US for marketing email. Full processor list on request only. | Primary mailbox/groupware hosting claimed on operator-controlled infrastructure in Bern, Switzerland (IBM OpenPOWER hypervisors, hardware-encrypted IBM storage, RHEL). No AWS/GCP/Azure hosting advertised for customer mail. Billing wallet supports PayPal, credit card, and EUR bank transfer — US-linked payment processors for payment data. Full subprocessor/backup register not published on pages reviewed. |
| Summary | Estonian team messenger that combines chat with email bridging, conversation tasks, pinboards, file sharing, and Business admin ownership of accounts and history. | Swiss-hosted FOSS Kolab groupware from Apheleia IT AG: email, calendars, contacts, files and optional Collabora collab on operator infrastructure in Bern. |
| Tags |
| At a glance | Fleep | Kolab Now |
|---|---|---|
| HQ | Tallinn, Estonia | Not listed |
| Legal entity | Fleep Technologies OÜ (reg. 12373841) | Not listed |
| Hosting (claimed) | AWS EC2, Dublin, Ireland | Not listed |
| Deployment | SaaS only (not self-hosted) | Not listed |
| Open source | No (proprietary; API samples on GitHub) | Not listed |
| Commercial model | Free trial; seat-based Business; Enterprise custom | Paid modular subscriptions via prepaid wallet; trial month |
| HQ / operator | Not listed | Apheleia IT AG, Bern, Switzerland |
| Product since | Not listed | 2013 (Swiss-operated hosted Kolab) |
| Hosting | Not listed | Operator rack in Bern; IBM OpenPOWER + encrypted storage (vendor FAQ) |
| Stack | Not listed | Kolab FOSS; RHEL; open mail/groupware protocols |
| Self-host this SKU | Not listed | No (managed); Kolab suite is self-hostable separately |
| Key capabilities | Fleep | Kolab Now |
|---|---|---|
| EU-operated (EE) | Yes | Not listed |
| Email bridging | Yes | Not listed |
| Cloud SaaS | Yes | Not listed |
| AWS EU hosting (claimed) | Yes | Not listed |
| Business admin controls | Yes | Not listed |
| Swiss-operated | Not listed | Yes |
| FOSS Kolab stack | Not listed | Yes |
| Full groupware suite | Not listed | Yes |
| IMAP / CalDAV / ActiveSync | Not listed | Yes |
| Hosted in Bern (claimed) | Not listed | Yes |
| Optional PGP | Not listed | Yes |
Email-bridged conversations
Send to a conversation's unique email address, receive on username@fleep.io, create email threads with non-users, or connect an existing mailbox so external partners stay in the same work stream without mandatory Fleep accounts.
Taskboard per conversation
Create, assign, and track tasks inside the same conversation where decisions happen; Business adds a My tasks view across work. Suited to light coordination, not a full project-management suite.
Pinboard and File Drawer
Pin announcements so plans do not drown in scrollback; store and re-open shared files from a conversation-level drawer across web, desktop, and mobile.
Fleep for Business admin ownership
Organization admins control Premium accounts and conversations—provision/deactivate users, reset passwords, manage membership and history access, set file retention, organization-wide teams, and company branding.
API, webhooks, and app integrations
Public API for post/read of messages and files plus listed integrations (e.g. GitHub, GitLab, Jira, Zapier, Dropbox, Whereby for A/V). Not a self-hosted product.
FOSS Kolab groupware with open clients
Hosted Kolab stack: IMAP/SMTP mail, CalDAV/CardDAV calendars and contacts, tasks, notes, and WebDAV files. ActiveSync is available for mobile/Outlook-style sync on full groupware subscriptions. Teams keep standard desktop and mobile clients instead of a proprietary-only app.
Private domains, multi-user cockpit, shared folders
Primary account owners verify custom domains (DNS guides in the KB), add users under one wallet, and share mail folders, calendars, notes, and files inside the domain. Fits small businesses and families that need branded addresses and shared inboxes without Google Workspace.
Swiss own-rack hosting with PFS and header hygiene
Operator FAQ places production systems in a Bern rack on IBM OpenPOWER with hardware-encrypted storage, RHEL, and segmented firewalls. TLS is described as end-to-end inside the platform with Perfect Forward Secrecy; outbound mail strips client IP and MUA identity from headers.
Sieve filters, DKIM, modular spam controls
Server-side Sieve rules (folder, redirect, vacation, discard) run in the web client. Outbound DKIM is supported with CNAME delegation for private domains. Spam tagging is available; aggressive auto-junk is deliberately left to customer Sieve policy rather than opaque provider filtering.
Collabora Online files plus optional PGP and Kolab Meet
Domain users can collaboratively edit documents/presentations via Collabora Online on shared files. Webmail can import PGP keys for optional message encryption (vendor warns keys on server are weaker than offline E2EE). Kolab Meet adds personal video rooms on groupware plans but remains public beta.
TOTP 2FA with an important client trade-off
Time-based one-time passwords (e.g. Aegis) can be required for accounts. When 2FA is enabled for a user, vendor docs state non-web clients (IMAP, POP, ActiveSync, CalDAV/CardDAV, WebDAV) are blocked — evaluate this before mandating 2FA on mobile-heavy fleets.
| Assurance & compliance | Fleep | Kolab Now |
|---|---|---|
| Independent security / no-logs audit | Not found No public independent audit report located on official site or help center. | Not found Vendor describes no content analytics and limited operational logs (up to six months). No public third-party no-logs or security audit PDF located. |
| ISO 27001 | Not found No ISO 27001 claim found on official pages. | Not found No public ISO 27001 certificate found on primary site/KB materials reviewed. |
| SOC 2 / SOC 3 | Not found No SOC 2/3 report or claim found on official pages. | Not found No public SOC 2/3 report found. |
| GDPR / EU data protection | Vendor claimed EE entity; public privacy policy; AKI as supervisory authority. Confirm DPA and processing roles for your use case. | Vendor claimed Swiss operator; KB GDPR article asserts customer data ownership, no ad analytics, export/delete paths, and Swiss warrant process for third-party access. Confirm DPA/ToS for EU controllers. |
| US CLOUD Act exposure (indicative) | Partial EU entity, no known US parent, but primary hosting on AWS and US-group analytics/payment/marketing tools (GA, Mixpanel, Braintree/PayPal, MailChimp). Not legal advice. | Partial Swiss entity / no known US parent; mail claimed on Bern own-infra (not hyperscaler). Partial residual exposure via PayPal/card payment processors and unpublished full subprocessor list. Not legal advice. |
| Data processing agreement (B2B) | Not found No public DPA template found. Privacy policy offers updated authorized-processor list on contact—ask sales/support for DPA. | Not found No public standalone DPA download located on marketing/KB pages in this pass; may exist in ToS or on request — confirm before B2B processing. |
| EU AI Act | Not applicable Team messenger; not marketed as an AI system. | Not applicable Groupware/email product; not an AI system offering. |
| Considerations & known limitations | Fleep | Kolab Now |
|---|---|---|
| US-group cloud and SaaS subprocessors | Medium Message storage on AWS (Dublin claimed) plus Google Analytics, Mixpanel, payment processors, and MailChimp (US marketing mail). Affects CLOUD Act / transfer diligence even with EE legal entity. | Not listed |
| No public ISO/SOC or independent audit | Medium Assurance package for regulated buyers is thin on the public site; expect questionnaire and contractual annexes rather than downloadable certs. | Not listed |
| Server-side encryption, not E2EE | Medium TLS + encrypted storage on provider servers; unsuitable if policy requires client-held keys or provider-blind messaging. | Not listed |
| Privacy/Terms last dated 2019 on site | Low Public privacy (Mar 2019) and terms (Jan 2019) may lag operational reality—confirm current policy versions and subprocessors during procurement. | Not listed |
| No self-host option | Low Cannot place Fleep inside your own VPC or air-gapped network; residency limited to vendor AWS EU setup. | Not listed |
| Mail not zero-access by default | Not listed | Medium Unlike Proton/Tuta defaults, ordinary stored mail is provider-accessible for protocol delivery unless users apply PGP or another client E2EE scheme. Material for threat models that assume provider compromise or compelled access to plaintext. |
| 2FA blocks non-web clients | Not listed | Medium Documented behaviour: enabling TOTP 2FA confines the user to the web client and blocks IMAP/ActiveSync/CalDAV and related protocols. Breaks many mobile/Outlook deployments if applied naively. |
| Limited public compliance pack | Not listed | Medium No public ISO/SOC certs, independent audit, or subprocessor register found. Procurement must rely on vendor FAQs, ToS, and direct questions — slower security review than certified EU SaaS peers. |
| US-linked payment processors | Not listed | Low Wallet top-ups via PayPal and credit cards introduce US-group payment processors for billing data even when mailboxes stay in Switzerland. Scope is payment metadata, not IMAP content, but still relevant to transfer inventories. |
| Kolab Meet still beta | Not listed | Low Voice/video rooms are labelled public beta; vendor notes support may be limited. Do not treat as a Zoom/Teams replacement for critical meetings. |
When: You need self-hosted collaboration chat with full control of infrastructure
Consider: Nextcloud (Talk) or other self-hosted groupware already in your stack
Fleep is SaaS-only on AWS EU.
When: You need deep Microsoft 365 chat, meetings, and identity integration
Consider: Microsoft Teams
Fleep is independent of M365 but thinner on meetings/Graph.
When: You need the largest integration marketplace and channel-centric workflows
Consider: Slack
Fleep competes on email bridging and simplicity, not ecosystem breadth.
When: You want hosted European groupware with mail/calendar as the core
Consider: Kolab Now
Different product shape: groupware suite vs messenger-first.
When: You need default zero-access / E2EE email more than ActiveSync groupware
Consider: Proton Mail or Tuta
Stronger default cryptography story; thinner classical groupware/ActiveSync depth than Kolab Now.
When: You want privacy-focused German email without full suite complexity
Consider: Posteo
Leaner privacy mail; not a Collabora + shared-domain groupware suite.
When: You need Google/Microsoft-class admin scale, apps marketplace, and compliance certifications
Consider: Google Workspace or Microsoft 365
Far larger ecosystems; US-centric custody and CLOUD Act profile differ sharply.
When: You want full self-host control of the same FOSS stack
Consider: Self-hosted Kolab (kolab.org) or Nextcloud plus a mail stack
More operational burden; Apheleia also sells Kolab professional services.