Hostpoint E-Mail & Cloud Office vs Migadu

Compare Hostpoint E-Mail & Cloud Office and Migadu on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Google Workspace, Microsoft 365

Hostpoint E-Mail & Cloud Office

Switzerland· Email Services

Needs review

Shortlist Hostpoint E-Mail & Cloud Office when you need Swiss-hosted custom-domain IMAP mail plus Open-Xchange calendars, Drive, and optional browser docs under Hostpoint AG—with Swiss human support and free mailbox migration. Skip when you require end-to-end zero-access mail (consider Proton Mail) or a full Microsoft 365 / Google Workspace admin stack; for another Swiss multi-product cloud suite, compare Infomaniak kMail.

Swiss-hosted mailCustom domain IMAPOpen-Xchange Cloud OfficeDrive + CalDAV/CardDAV7-day Swiss supportB2B DPA (GTC annex)

View listing Visit Website

Migadu

Switzerland· Email Services

Needs review

Shortlist Migadu when you need Swiss-operated, standards IMAP/SMTP hosting with unlimited addresses across many domains under flat account quotas—especially agencies and multi-domain SMEs. Skip when you need provider E2EE defaults, contractual SLA on the default offer, mailbox 2FA, or bulk/transactional sending; consider Proton Mail/Tuta for E2EE, or mailbox.org/Mailfence/Posteo/Runbox for other European professional-mail tradeoffs.

Swiss operatorUsage-priced multi-domainSMTP/IMAP/POP3Mail hosted in FranceMulti-admin + APINo ads / no tracking

View listing Visit Website

Highlighted rows differ between the two products.

Hostpoint E-Mail & Cloud Office vs Migadu: Snapshot
Feature	Hostpoint E-Mail & Cloud Office	Migadu
Country of origin	Switzerland	Switzerland
Category	Email Services	Email Services
Open source	No	No
Self-hosted	No	No
Headquarters	Switzerland	Switzerland
Legal entity	Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland	Migadu-Mail GmbH
Governing law	Not listed	Canton of Appenzell Ausserrhoden, Swiss Confederation (terms)
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Low	Medium
Hosting / residency	Primary: Hostpoint-operated servers and NetApp storage at Digital Realty (ex-Interxion) Glattbrugg, CH; Swiss e-mail/Drive residency claimed, dual backups, hourly snapshots. swiss hosting label (rankingCoach exception). Migration: Audriga (DE). Full public Sub-Processor List not found—DPA references list. Site analytics: Google Analytics, reCAPTCHA, Hotjar (not mailbox storage).	Mail servers stated in France (EU). Payment subprocessors Stripe and PayPal (US) for billing data. Full mail infrastructure/backup subprocessor list not published by name on primary pages.
Summary	Swiss custom-domain email and Open-Xchange Cloud Office (calendar, Drive, docs) from Hostpoint AG, with mailboxes and data hosted in Switzerland.	Swiss-operated, standards-based email hosting for custom domains: unlimited addresses and multi-domain accounts priced by usage quotas, not per mailbox.
Tags	swiss-hosting email cloud-office open-xchange custom-domain sme imap groupware productivity fadp	privacy saas api email-hosting standards-based multi-domain

At a glance: Hostpoint E-Mail & Cloud Office vs Migadu
At a glance	Hostpoint E-Mail & Cloud Office	Migadu
HQ	Rapperswil-Jona, Switzerland	Not listed
Legal entity	Hostpoint AG (CHE-101.974.997)	Not listed
Product	Custom-domain email + Cloud Office (Open-Xchange)	Not listed
Hosting	Hostpoint servers, Digital Realty Glattbrugg (CH)	Not listed
Self-host / OSS	Neither (managed SaaS)	Not listed
Commercial model	Paid per-mailbox tiers; domain required; no free tier	Flat per-account plans by daily message quotas + soft storage
HQ / entity	Not listed	Migadu-Mail GmbH, Switzerland
Founded	Not listed	2014 (vendor About)
Mail hosting	Not listed	Data centers in France (vendor Pro/Cons)
Open source product?	Not listed	No — built on open-source stack; service is proprietary SaaS
Self-host	Not listed	No
Ownership	Not listed	Bootstrapped; no outside capital (vendor claim)

Key capabilities: Hostpoint E-Mail & Cloud Office vs Migadu
Key capabilities	Hostpoint E-Mail & Cloud Office	Migadu
Swiss-hosted mail	Yes	Not listed
Custom domain IMAP	Yes	Not listed
Open-Xchange Cloud Office	Yes	Not listed
Drive + CalDAV/CardDAV	Yes	Not listed
7-day Swiss support	Yes	Not listed
B2B DPA (GTC annex)	Yes	Not listed
Swiss operator	Not listed	Yes
Usage-priced multi-domain	Not listed	Yes
SMTP/IMAP/POP3	Not listed	Yes
Mail hosted in France	Not listed	Yes
Multi-admin + API	Not listed	Yes
No ads / no tracking	Not listed	Yes

Hostpoint E-Mail & Cloud Office

Custom-domain mailboxes with IMAP and free migration
Each plan is one inbox on a domain you control (new or external), with webmail plus IMAP/POP3/SMTP, unlimited forwards, aliases, out-of-office replies, server-side search, and spam/virus filters. Hostpoint’s free migration path (including Audriga-assisted moves from Gmail, GMX, Bluewin, Yahoo, and other hosts) is designed so teams keep historical mail when leaving FreeMail. Requires a domain; not a freemail brand address.
Open-Xchange Cloud Office: calendar, contacts, tasks
Browser suite for multi-calendar scheduling, shared address books, tasks, and appointment booking with free/busy style team scheduling. CalDAV/CardDAV sync targets Outlook, Thunderbird, Apple Calendar, and similar clients. Fits SMEs that want groupware next to IMAP without a full Microsoft 365 tenant.
Hostpoint Drive with desktop and mobile clients
Swiss-hosted file storage included per tier (upgradeable within product limits), with share links, e-mail shares, access controls, and local clients for Windows, macOS, iOS, and Android (Open-Xchange-powered). Business tier adds managing shared folders in teams. This is conventional cloud storage under Hostpoint—not zero-knowledge Drive.
Browser documents and real-time collaboration (Plus/Business)
From Cloud Office Plus upward, edit text, spreadsheets, and presentations in the browser with Microsoft Office file compatibility, real-time multi-user editing, and version history. Basic is mail-plus-calendar oriented; teams that live in shared docs should shortlist Plus or Business rather than Basic.
Swiss ops: dual backups, monitoring, seven-day support
Product pages claim Swiss data location, 24/7 monitoring, DDoS protection, hourly snapshots, daily mail backups with tiered retention (longer on higher tiers), and backup copies in two locations. Support is Swiss-based Mon–Sun daytime via phone, e-mail, WhatsApp, and form—useful for SMEs that need humans, not only tickets.

Migadu

Usage-metered accounts with unlimited addresses
Plans are flat per Migadu account. Within daily in/out quotas and soft storage guidance, create large numbers of mailboxes and host many domains without per-address fees—useful for agencies and multi-project teams. Soft storage does not hard-bounce mail; sustained over-quota use can force upgrades or limits.
Standards SMTP, IMAP4, POP3, and webmail
No proprietary client protocol. Connect Thunderbird, Apple Mail, Outlook, mutt, and others over TLS (typical endpoints imap.migadu.com:993, smtp.migadu.com:465, pop.migadu.com:995). ManageSieve filtering, aliases, pattern rewrites, identities, footers, auto-responders, and optional catch-alls cover classic postmaster needs. Data remains portable via standard protocols.
Multi-domain admin, multi-admin, and beta API
Agencies can hold many client domains under one roof, open multiple administrators (domain-scoped on higher plans), set per-domain/mailbox limits, and monitor traffic. A REST API (documented as early beta) manages domains, mailboxes, identities, forwardings, aliases, and rewrites for automation. Domain deletion stays UI-only as a safety measure.
DNS helpers and postmaster-style support
Optional built-in DNS ships mail records preconfigured; Migadu also offers DNS setup help at no extra fee and publishes diagnostics/activation flows. Support is ticket-based from people who operate the mail stack—not outsourced chat—with plan-dependent urgency outside office hours.
No ads, no product analytics cookies
Vendor policy states no advertising, no tracking of mailbox content for ads, and no website analytics cookies beyond session needs. Processing is framed for service delivery, abuse prevention, and legal obligations. Payment data still goes to Stripe and PayPal under separate processor terms.

Assurance & compliance: Hostpoint E-Mail & Cloud Office vs Migadu
Assurance & compliance	Hostpoint E-Mail & Cloud Office	Migadu
Independent security / no-logs audit	Not found No public third-party no-logs or product security audit PDF for Cloud Office located on official pages.	Not found Vendor claims no ad scanning/sharing of mail content; no public third-party audit PDF located.
ISO 27001	Not found Company page describes the Glattbrugg data center as ISO- and FINMA-certified (facility). No Hostpoint-organization ISO 27001 certificate page found in this pass.	Not found Data centers described as internationally certified; no Migadu-organization ISO 27001 certificate found on primary pages.
SOC 2 / SOC 3	Not found No public SOC 2/3 report for Hostpoint Cloud Office found.	Not found
GDPR / EU data protection	Vendor claimed Swiss FADP primary; privacy states GDPR may apply in some processing. EU representative: Hostpoint Limited, Malta. Swiss–EU adequacy eases transfers. Customer remains controller for hosted content.	Vendor claimed Privacy policy asserts GDPR and Swiss DPA compliance; mail hosted in France per vendor.
US CLOUD Act exposure (indicative)	Partial EuropeanStack assessment: Swiss AG, no known US parent, Swiss product residency claims → relatively low ownership exposure vs US SaaS mail. Residual factors: US-listed Digital Realty facility owner (colocation), possible US-group tools on full subprocessor/marketing stack, privacy exceptional-transfer language. Not a clean bill; not legal advice.	Partial Swiss entity, no known US parent, mail in France; Stripe and PayPal process payments with US transfers. Infrastructure subprocessors not fully named. EuropeanStack assessment—not a vendor certification. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Annex 2 DPA + TOMs published with web-hosting GTC PDF; sub-processor engagement rules and audit rights described. Confirm applicability to your E-Mail & Cloud Office order and obtain current Sub-Processor List.	Vendor claimed Privacy page states it serves as privacy policy and DPA; confirm suitability with counsel.
EU AI Act	Not applicable Not an AI product.	Not applicable Email hosting product; not an AI system offering.
swiss hosting label	Vendor claimed Company states Hostpoint bears the swiss hosting label (HQ + data location in Switzerland), with rankingCoach exceptions noted.	Not listed

Considerations & known limitations: Hostpoint E-Mail & Cloud Office vs Migadu
Considerations & known limitations	Hostpoint E-Mail & Cloud Office	Migadu
Not zero-access / E2E mail	Medium Standard hosted mail: provider can access mailbox content for operations, spam filtering, and legal process. Unsuitable if your threat model requires only client-held keys.	Not listed
Full subprocessor inventory not self-serve	Medium DPA references a Sub-Processor List and change notifications, but a complete public e-mail-path inventory was not found on the marketing site. Request it (and any US-group vendors) before procurement sign-off.	Not listed
Facility ISO/FINMA vs org certification	Low ISO/FINMA language on public pages refers to the data center facility. Do not treat that as a verified Hostpoint ISMS ISO 27001 without a certificate.	Not listed
Docs collaboration only on higher tiers	Low Browser Office documents and real-time collab start at Plus; team shared-folder management is Business-oriented. Basic is intentionally limited.	Not listed
Customer still owns backup duty	Low GTC state customers remain responsible for their own backups; Hostpoint packages are supplementary and do not guarantee zero data loss.	Not listed
US payment subprocessors (Stripe, PayPal)	Not listed	Medium Billing-related personal data can transfer to US processors under Migadu’s privacy policy. Mail content path is France/EU per vendor, but payment data is a separate CLOUD Act / transfer surface.
Incomplete public infrastructure subprocessor list	Not listed	Medium Primary pages name France hosting and certified DCs without a full vendor inventory for compute, storage, and backups. Procurement should request the current list and regions in writing.
No E2EE product default; no classic mailbox 2FA	Not listed	Medium Standards mail with TLS; vendor recommends user-side OpenPGP for strong content secrecy. IMAP 2FA is not offered; app-specific-style identities are not second-factor MFA.
Daily quotas and human-mail policy	Not listed	Medium Account-wide daily in/out caps and anti-bulk rules make Migadu unsuitable as a transactional/marketing ESP. Over-limit mail can be deferred or rejected after tolerance.
No default SLA on standard plans	Not listed	Low Vendor states standard offers lack SLAs; email is treated as asynchronous and occasionally disrupted. Enterprise SLA only via separate commercial discussion.
No public independent security audit	Not listed	Medium Privacy and no-ad-scanning claims are first-party. No independent audit report found for no-logs or security controls.

Fit

Hostpoint E-Mail & Cloud Office

Best fit when

Swiss SMEs and freelancers replacing FreeMail with branded @domain mailboxes
Teams that want IMAP mail plus shared calendars, contacts, and Drive in one Swiss panel
Buyers already using Hostpoint domains/hosting who want same-vendor mail and support
Organizations that prioritize Swiss data location messaging and Swiss daytime phone support
Migrators from Gmail/GMX/Bluewin who need an included mailbox migration path

Poor fit when

Security programs that require zero-access / E2E encrypted mail by default
Enterprises needing SSO/SCIM-centric identity and deep SaaS compliance tooling out of the box
Teams that only want free freemail without a domain or paid plan
Self-host or fully open-source groupware mandates
Buyers who need a published independent security audit report before shortlisting

Consider instead when

When: You need end-to-end encrypted, zero-access mail as the primary control
Consider: Proton Mail or Tuta
Hostpoint is conventional hosted Open-Xchange mail, not a zero-knowledge mailbox.
When: You want a broader Swiss cloud suite (kDrive, Swiss Meet, etc.) under one multi-product vendor
Consider: Infomaniak kMail
Compare suite breadth vs Hostpoint’s registrar/hosting + Cloud Office focus.
When: You need Microsoft/Google admin ecosystems, global collaboration defaults, or advanced DLP
Consider: Microsoft 365 or Google Workspace
Trade Swiss-operator simplicity for global SaaS depth and US-group jurisdiction.
When: You want German privacy-oriented hosted mail with OpenPGP-centric workflows
Consider: mailbox.org or Mailfence
Different legal HQ and crypto posture; Hostpoint is Swiss SME groupware-first.

Migadu

Best fit when

Agencies and freelancers hosting many client domains under one account with multi-admin or API provisioning
Organizations that want custom-domain mail with standard clients and portable IMAP—not a proprietary suite lock-in
Teams tired of per-seat pricing for large address spaces with modest real traffic
Buyers who value a small bootstrapped Swiss operator that publishes blunt product limits
Setups that need aliases, rewrites, identities, SIEVE, and postmaster-style controls more than collab apps

Poor fit when

Primary need is end-to-end encrypted mail by default (Proton Mail, Tuta, or user-side OpenPGP workflows)
High-volume transactional, marketing, or bulk outbound mail
Requirement for default contractual SLA, phone support, or multi-language admin UI
Mandatory mailbox 2FA on every IMAP login
Want a free long-term plan or Migadu-branded @provider addresses without owning a domain

Consider instead when

When: You need provider-managed end-to-end encryption as the default product promise
Consider: Proton Mail or Tuta
Migadu is standards hosting with TLS; content secrecy against the operator is not the design center.
When: You want another European professional host with a different admin/encryption/residency package
Consider: mailbox.org, Mailfence, Posteo, or Runbox
Compare DPA detail, audit packaging, and whether multi-domain usage pricing still wins for your address sprawl.
When: You need full workspace suite (docs, meet, identity) rather than email hosting alone
Consider: Google Workspace, Microsoft 365, or Infomaniak-style European suites
Migadu deliberately stays postmaster-focused.
When: You need bulk or high-rate application email
Consider: A dedicated ESP (not Migadu); Amazon SES is the common Big Tech baseline—pair with EU ESPs if residency matters
Migadu rate-limits and bans intentional bulk use.

Open questions for due diligence

Hostpoint E-Mail & Cloud Office

What is the current Sub-Processor List for E-Mail & Cloud Office (including spam/AV engines, backup tooling, Audriga, any CDN)?
Does your contract package explicitly attach the web-hosting DPA annex to standalone Cloud Office mailboxes?
Any US-group processors in the live list that would change a CLOUD Act or transfer assessment?
Is there a customer-facing ISO/SOC report for Hostpoint operations beyond data-center facility claims?
Data residency guarantees in writing for dual backup locations (both fully in Switzerland)?

Migadu

What are the current named mail hosting, backup, and ancillary subprocessors and their countries?
Can Migadu provide ISO/SOC evidence for the organization or only DC-level certifications?
Is an independent security or penetration-test summary available under NDA?
Does the privacy-page DPA meet your controller’s mandatory clauses without a separate signed agreement?
What encryption-at-rest and key-management practices apply today versus the older public pro/con narrative?