Hostpoint E-Mail & Cloud Office vs Mailo

Compare Hostpoint E-Mail & Cloud Office and Mailo on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Microsoft 365, Outlook.com

Logo: Hostpoint E-Mail & Cloud Office

Hostpoint E-Mail & Cloud Office

Switzerland· Email Services

Needs review

Shortlist Hostpoint E-Mail & Cloud Office when you need Swiss-hosted custom-domain IMAP mail plus Open-Xchange calendars, Drive, and optional browser docs under Hostpoint AG—with Swiss human support and free mailbox migration. Skip when you require end-to-end zero-access mail (consider Proton Mail) or a full Microsoft 365 / Google Workspace admin stack; for another Swiss multi-product cloud suite, compare Infomaniak kMail.

Swiss-hosted mailCustom domain IMAPOpen-Xchange Cloud OfficeDrive + CalDAV/CardDAV7-day Swiss supportB2B DPA (GTC annex)
Logo: Mailo

Mailo

France· Email Services

Needs review

Shortlist Mailo when you want French-entity freemium webmail with classic IMAP/EAS clients, integrated calendar/cloud, supervised Mailo Junior for kids, or Pro custom domains for SMEs—without US Big Tech accounts. Skip when you need default zero-knowledge E2EE, open-source/self-host, or a full Workspace-class suite; consider Tuta, Proton Mail, or Infomaniak kMail instead.

France-hosted (claimed)Freemium webmailMailo JuniorIMAP / ActiveSyncPro custom domainsOptional PGP (server-side)
Hostpoint E-Mail & Cloud Office vs Mailo: Snapshot
FeatureLogo: Hostpoint E-Mail & Cloud OfficeHostpoint E-Mail & Cloud OfficeLogo: MailoMailo
Country of originSwitzerlandFrance
CategoryEmail ServicesEmail Services
Open sourceNoNo
Self-hostedNoNo
HeadquartersSwitzerlandFrance
Legal entityHostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, SwitzerlandMAILO SAS (capital €75,000; RCS Créteil 851585547; VAT FR44851585547)
Governing lawNot listedFrench law (terms of use)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)LowMedium
Hosting / residencyPrimary: Hostpoint-operated servers and NetApp storage at Digital Realty (ex-Interxion) Glattbrugg, CH; Swiss e-mail/Drive residency claimed, dual backups, hourly snapshots. swiss hosting label (rankingCoach exception). Migration: Audriga (DE). Full public Sub-Processor List not found—DPA references list. Site analytics: Google Analytics, reCAPTCHA, Hotjar (not mailbox storage).Vendor states user personal data and content are stored/processed on servers in France; specialised French host centre (who-we-are); website hosted by Ecritel, Arradon, France. Named third parties: Verifone/Paybox (payment email), PayPal option, Gandi/Netim (domains), Sirdata + ad agencies (free-tier ads), optional Rainbow video and OnlyOffice. Full mail DC/backup subprocessor list not published.
Summary

Swiss custom-domain email and Open-Xchange Cloud Office (calendar, Drive, docs) from Hostpoint AG, with mailboxes and data hosted in Switzerland.

French freemium webmail and Mail&Cloud suite (MAILO SAS): email, calendar, cloud disk, Mailo Junior for children, and Pro custom domains—hosted in France, proprietary SaaS.

Tags
At a glance: Hostpoint E-Mail & Cloud Office vs Mailo
At a glanceLogo: Hostpoint E-Mail & Cloud OfficeHostpoint E-Mail & Cloud OfficeLogo: MailoMailo
HQRapperswil-Jona, SwitzerlandNot listed
Legal entityHostpoint AG (CHE-101.974.997)Not listed
ProductCustom-domain email + Cloud Office (Open-Xchange)Not listed
HostingHostpoint servers, Digital Realty Glattbrugg (CH)Not listed
Self-host / OSSNeither (managed SaaS)Not listed
Commercial modelPaid per-mailbox tiers; domain required; no free tierNot listed
HQ / entityNot listedMAILO SAS, France (RCS Créteil 851585547)
Hosting (claimed)Not listedServers in France; website host Ecritel (FR)
ModelNot listedFreemium SaaS (Free / Premium / Pro / Junior / Edu)
Open sourceNot listedNo (proprietary MailObject®)
Self-hostNot listedNo
Encryption defaultNot listedTLS + optional server-side PGP (not ZK E2EE)
Key capabilities: Hostpoint E-Mail & Cloud Office vs Mailo
Key capabilitiesLogo: Hostpoint E-Mail & Cloud OfficeHostpoint E-Mail & Cloud OfficeLogo: MailoMailo
Swiss-hosted mailYesNot listed
Custom domain IMAPYesNot listed
Open-Xchange Cloud OfficeYesNot listed
Drive + CalDAV/CardDAVYesNot listed
7-day Swiss supportYesNot listed
B2B DPA (GTC annex)YesNot listed
France-hosted (claimed)Not listedYes
Freemium webmailNot listedYes
Mailo JuniorNot listedYes
IMAP / ActiveSyncNot listedYes
Pro custom domainsNot listedYes
Optional PGP (server-side)Not listedYes

Hostpoint E-Mail & Cloud Office

  • Custom-domain mailboxes with IMAP and free migration

    Each plan is one inbox on a domain you control (new or external), with webmail plus IMAP/POP3/SMTP, unlimited forwards, aliases, out-of-office replies, server-side search, and spam/virus filters. Hostpoint’s free migration path (including Audriga-assisted moves from Gmail, GMX, Bluewin, Yahoo, and other hosts) is designed so teams keep historical mail when leaving FreeMail. Requires a domain; not a freemail brand address.

  • Open-Xchange Cloud Office: calendar, contacts, tasks

    Browser suite for multi-calendar scheduling, shared address books, tasks, and appointment booking with free/busy style team scheduling. CalDAV/CardDAV sync targets Outlook, Thunderbird, Apple Calendar, and similar clients. Fits SMEs that want groupware next to IMAP without a full Microsoft 365 tenant.

  • Hostpoint Drive with desktop and mobile clients

    Swiss-hosted file storage included per tier (upgradeable within product limits), with share links, e-mail shares, access controls, and local clients for Windows, macOS, iOS, and Android (Open-Xchange-powered). Business tier adds managing shared folders in teams. This is conventional cloud storage under Hostpoint—not zero-knowledge Drive.

  • Browser documents and real-time collaboration (Plus/Business)

    From Cloud Office Plus upward, edit text, spreadsheets, and presentations in the browser with Microsoft Office file compatibility, real-time multi-user editing, and version history. Basic is mail-plus-calendar oriented; teams that live in shared docs should shortlist Plus or Business rather than Basic.

  • Swiss ops: dual backups, monitoring, seven-day support

    Product pages claim Swiss data location, 24/7 monitoring, DDoS protection, hourly snapshots, daily mail backups with tiered retention (longer on higher tiers), and backup copies in two locations. Support is Swiss-based Mon–Sun daytime via phone, e-mail, WhatsApp, and form—useful for SMEs that need humans, not only tickets.

Mailo

  • French-hosted webmail with IMAP, EAS, and classic protocols

    Webmail plus IMAP4 for clients, Exchange ActiveSync for mobile sync, and POP3 on paid tiers; SMTP relay with account credentials. Vendor states mail and content stay on servers in France. Free tier is ad-supported with lower quotas; Premium unlocks POP3, more aliases, and larger mail/cloud caps. Suits teams that need standard desktop/mobile clients rather than a closed proprietary app only.

  • Mailo Junior supervised email for children

    Child accounts (about ages 6–14) only exchange mail with contacts a parent or teacher validates. Age-adapted mini/junior UIs, no ads on Junior, optional promotion to a standard account while keeping the address. Separate Junior mobile apps. Unique fit for families and schools versus generic consumer mail.

  • Calendar, virtual disk, and open sync protocols

    Shared calendars and tasks, address book, photo albums, and a virtual disk for files with WebDAV/FTP access. CalDAV and CardDAV for external clients. Premium+ can unlock OnlyOffice in-browser editing. Better as an all-in-one Mail&Cloud for SMEs/families than bare IMAP-only privacy mail.

  • Mailo Pro spaces: custom domains and mutualised storage

    Pro Start/5/Modulo style plans share mail+cloud quota across accounts, support custom domains (register, transfer, or declare external), distribution lists, mailbox sharing, resource calendars, and manager tooling. Priority Pro hotline with documented acknowledgement and restoration targets for Pro subscriptions. Aimed at TPE/PME, associations, and municipalities—not a full Google Workspace clone.

  • Optional server-side PGP and account security controls

    Built-in PGP/MIME encrypt and sign in the webmail as a trusted third party (keys managed on Mailo for multi-device convenience). Two-factor authentication, application passwords, connection history, and guardianship-style access options. Not zero-knowledge E2EE by default—use external client crypto if the provider must never hold keys.

Assurance & compliance: Hostpoint E-Mail & Cloud Office vs Mailo
Assurance & complianceLogo: Hostpoint E-Mail & Cloud OfficeHostpoint E-Mail & Cloud OfficeLogo: MailoMailo
Independent security / no-logs audit
Not found

No public third-party no-logs or product security audit PDF for Cloud Office located on official pages.

Not found

Charter claims no commercial reading of messages; automated AV/spam scanning on servers. No public third-party audit PDF found.

ISO 27001
Not found

Company page describes the Glattbrugg data center as ISO- and FINMA-certified (facility). No Hostpoint-organization ISO 27001 certificate page found in this pass.

Not found

No ISO 27001 claim found on legal/security/primary pages researched.

SOC 2 / SOC 3
Not found

No public SOC 2/3 report for Hostpoint Cloud Office found.

Not found

No SOC 2/3 report referenced on public product pages.

GDPR / EU data protection
Vendor claimed

Swiss FADP primary; privacy states GDPR may apply in some processing. EU representative: Hostpoint Limited, Malta. Swiss–EU adequacy eases transfers. Customer remains controller for hosted content.

Vendor claimed

French controller; privacy rules cite GDPR and French correspondence secrecy; DPO at dpo@mailo.com; France storage claim.

US CLOUD Act exposure (indicative)
Partial

EuropeanStack assessment: Swiss AG, no known US parent, Swiss product residency claims → relatively low ownership exposure vs US SaaS mail. Residual factors: US-listed Digital Realty facility owner (colocation), possible US-group tools on full subprocessor/marketing stack, privacy exceptional-transfer language. Not a clean bill; not legal advice.

Partial

EU entity / no known US parent / France-claimed mail hosting, but Verifone and PayPal (US-group) on payment path; full infra subprocessors unpublished. Assessment only—not legal advice.

Data processing agreement (B2B)
Vendor claimed

Annex 2 DPA + TOMs published with web-hosting GTC PDF; sub-processor engagement rules and audit rights described. Confirm applicability to your E-Mail & Cloud Office order and obtain current Sub-Processor List.

Not found

Privacy rules and terms cover processing; no standalone public B2B DPA download found—request via DPO or Pro channel.

EU AI Act
Not applicable

Not an AI product.

Not applicable

Traditional email/cloud suite; not marketed as an AI system product.

swiss hosting label
Vendor claimed

Company states Hostpoint bears the swiss hosting label (HQ + data location in Switzerland), with rankingCoach exceptions noted.

Not listed
Considerations & known limitations: Hostpoint E-Mail & Cloud Office vs Mailo
Considerations & known limitationsLogo: Hostpoint E-Mail & Cloud OfficeHostpoint E-Mail & Cloud OfficeLogo: MailoMailo
Not zero-access / E2E mail
Medium

Standard hosted mail: provider can access mailbox content for operations, spam filtering, and legal process. Unsuitable if your threat model requires only client-held keys.

Not listed
Full subprocessor inventory not self-serve
Medium

DPA references a Sub-Processor List and change notifications, but a complete public e-mail-path inventory was not found on the marketing site. Request it (and any US-group vendors) before procurement sign-off.

Not listed
Facility ISO/FINMA vs org certification
Low

ISO/FINMA language on public pages refers to the data center facility. Do not treat that as a verified Hostpoint ISMS ISO 27001 without a certificate.

Not listed
Docs collaboration only on higher tiers
Low

Browser Office documents and real-time collab start at Plus; team shared-folder management is Business-oriented. Basic is intentionally limited.

Not listed
Customer still owns backup duty
Low

GTC state customers remain responsible for their own backups; Hostpoint packages are supplementary and do not guarantee zero data loss.

Not listed
PGP is server-side trusted third partyNot listed
Medium

Webmail PGP holds keys on Mailo for multi-device use. Provider-access risk differs from zero-knowledge E2EE defaults at Tuta/Proton. Use external crypto if that is a hard requirement.

Incomplete public subprocessor inventoryNot listed
Medium

Privacy rules name payments, domains, and free-tier ads, but not a full list of mail storage, backup, or anti-spam infrastructure vendors. Request annex for B2B risk review.

US-group payment processorsNot listed
Low

Checkout shares email with Verifone/Paybox; PayPal is also offered. Limited to billing path per privacy rules, but relevant to CLOUD Act diligence.

Free tier third-party advertisingNot listed
Low

Mailo Free shows ad banners via agencies under IAB TCF consent (Sirdata CMP). Premium removes ads. Ad cookies stated as not tied to Mailo profile.

No public ISO/SOC or independent security auditNot listed
Medium

Security posture relies on first-party statements and internal measures. Procurement teams may need questionnaires or NDA evidence.

Free accounts deleted after inactivityNot listed
Low

Mailo Free unused for 365 days can be deleted with content loss. Premium/Pro have different retention rules—plan backups and renewals.

Fit

Hostpoint E-Mail & Cloud Office

Best fit when

  • Swiss SMEs and freelancers replacing FreeMail with branded @domain mailboxes
  • Teams that want IMAP mail plus shared calendars, contacts, and Drive in one Swiss panel
  • Buyers already using Hostpoint domains/hosting who want same-vendor mail and support
  • Organizations that prioritize Swiss data location messaging and Swiss daytime phone support
  • Migrators from Gmail/GMX/Bluewin who need an included mailbox migration path

Poor fit when

  • Security programs that require zero-access / E2E encrypted mail by default
  • Enterprises needing SSO/SCIM-centric identity and deep SaaS compliance tooling out of the box
  • Teams that only want free freemail without a domain or paid plan
  • Self-host or fully open-source groupware mandates
  • Buyers who need a published independent security audit report before shortlisting

Consider instead when

  • When: You need end-to-end encrypted, zero-access mail as the primary control

    Consider: Proton Mail or Tuta

    Hostpoint is conventional hosted Open-Xchange mail, not a zero-knowledge mailbox.

  • When: You want a broader Swiss cloud suite (kDrive, Swiss Meet, etc.) under one multi-product vendor

    Consider: Infomaniak kMail

    Compare suite breadth vs Hostpoint’s registrar/hosting + Cloud Office focus.

  • When: You need Microsoft/Google admin ecosystems, global collaboration defaults, or advanced DLP

    Consider: Microsoft 365 or Google Workspace

    Trade Swiss-operator simplicity for global SaaS depth and US-group jurisdiction.

  • When: You want German privacy-oriented hosted mail with OpenPGP-centric workflows

    Consider: mailbox.org or Mailfence

    Different legal HQ and crypto posture; Hostpoint is Swiss SME groupware-first.

Mailo

Best fit when

  • EU individuals and families wanting French-hosted mail with calendar and cloud disk in one account
  • Parents/schools needing supervised child email (Mailo Junior) with contact allow-lists
  • French SMEs, associations, and municipalities needing custom domains and mutualised Pro storage
  • Teams that depend on IMAP, EAS, CalDAV, CardDAV, or WebDAV rather than a locked-in app
  • Buyers who accept freemium ads on free tier or low-cost Premium rather than pure prepaid anonymity mail

Poor fit when

  • Orgs that require default end-to-end encryption with zero-access provider architecture
  • Buyers that need open-source server code or official self-hosting
  • Enterprises needing SOC 2 / ISO 27001 evidence already published on a trust centre
  • Heavy Google Workspace / Microsoft 365 collaboration suites (docs/drive ecosystem depth)

Consider instead when

  • When: You need zero-knowledge / default E2EE webmail

    Consider: Tuta or Proton Mail

    Mailo PGP is optional and server-side trusted third party

  • When: You want German privacy mail with different encryption/product posture

    Consider: Posteo or mailbox.org

    Compare protocols, storage bundles, and business features side by side

  • When: You need Swiss multi-product cloud with mail plus broader suite

    Consider: Infomaniak kMail

    Different country stack and product breadth

  • When: You need US Big Tech ecosystem integration at any cost

    Consider: Gmail or Microsoft 365 / Outlook.com

    Trade EU entity and France residency claims for ecosystem depth

Open questions for due diligence

Hostpoint E-Mail & Cloud Office

  • What is the current Sub-Processor List for E-Mail & Cloud Office (including spam/AV engines, backup tooling, Audriga, any CDN)?
  • Does your contract package explicitly attach the web-hosting DPA annex to standalone Cloud Office mailboxes?
  • Any US-group processors in the live list that would change a CLOUD Act or transfer assessment?
  • Is there a customer-facing ISO/SOC report for Hostpoint operations beyond data-center facility claims?
  • Data residency guarantees in writing for dual backup locations (both fully in Switzerland)?

Mailo

  • Will Mailo sign a GDPR Article 28 DPA with a full subprocessor and transfer annex for Pro customers?
  • What is the named primary data-centre operator and backup/DR location beyond the France and Ecritel website-host statements?
  • Is there an independent penetration test, ISO 27001 roadmap, or customer-available security whitepaper?
  • Where is Rainbow (video) and OnlyOffice data processed relative to the France mail claim?
  • Current UGAP / public procurement listing status for French public buyers?