Hostpoint E-Mail & Cloud Office vs Proton Mail

Compare Hostpoint E-Mail & Cloud Office and Proton Mail on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Google Workspace, Microsoft 365, Outlook.com

Hostpoint E-Mail & Cloud Office

Switzerland· Email Services

Needs review

Shortlist Hostpoint E-Mail & Cloud Office when you need Swiss-hosted custom-domain IMAP mail plus Open-Xchange calendars, Drive, and optional browser docs under Hostpoint AG—with Swiss human support and free mailbox migration. Skip when you require end-to-end zero-access mail (consider Proton Mail) or a full Microsoft 365 / Google Workspace admin stack; for another Swiss multi-product cloud suite, compare Infomaniak kMail.

Swiss-hosted mailCustom domain IMAPOpen-Xchange Cloud OfficeDrive + CalDAV/CardDAV7-day Swiss supportB2B DPA (GTC annex)

View listing Visit Website

Proton Mail

Switzerland· Email Services

Needs review

Shortlist Proton Mail when you want Swiss-jurisdiction, zero-access encrypted email with open-source clients, custom domains, Bridge for desktop mailers, and a public DPA. Skip when you need free-tier IMAP Bridge, fully self-hosted FOSS mail on your own servers, or Workspace-class collaboration depth—consider Tuta, Posteo, or Mailfence among EU peers, or stay on Google/Microsoft if suite lock-in wins.

E2EE + zero-accessSwiss-operatedBridge (IMAP/SMTP)Open-source clientsISO 27001 & SOC 2 (claimed)Public B2B DPA

View listing Visit Website

Highlighted rows differ between the two products.

Hostpoint E-Mail & Cloud Office vs Proton Mail: Snapshot
Feature	Hostpoint E-Mail & Cloud Office	Proton Mail
Country of origin	Switzerland	Switzerland
Category	Email Services	Email Services
Open source	No	No
Self-hosted	No	No
Headquarters	Switzerland	Switzerland
Legal entity	Hostpoint AG, Neue Jonastrasse 60, 8640 Rapperswil-Jona, Switzerland	Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland (EU representative: Proton Europe sàrl, Luxembourg)
Governing law	Not listed	Swiss law (Terms; Geneva courts for business/non-US consumer disputes as stated in Terms)
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Low	Medium
Hosting / residency	Primary: Hostpoint-operated servers and NetApp storage at Digital Realty (ex-Interxion) Glattbrugg, CH; Swiss e-mail/Drive residency claimed, dual backups, hourly snapshots. swiss hosting label (rankingCoach exception). Migration: Audriga (DE). Full public Sub-Processor List not found—DPA references list. Site analytics: Google Analytics, reCAPTCHA, Hotjar (not mailbox storage).	Primary mail storage on Proton-owned servers in Switzerland (vendor security pages). Not marketed as AWS/GCP/Azure inbox hosting. Public privacy policy lists US-group processors for support and payments (Zendesk; Chargebee, Stripe, PayPal) and group support processing in North Macedonia and Taiwan; HubSpot noted for business sales inquiries.
Summary	Swiss custom-domain email and Open-Xchange Cloud Office (calendar, Drive, docs) from Hostpoint AG, with mailboxes and data hosted in Switzerland.	Swiss end-to-end encrypted email from Proton AG: zero-access inbox storage, open-source clients, custom domains, and Bridge for desktop IMAP clients.
Tags	swiss-hosting email cloud-office open-xchange custom-domain sme imap groupware productivity fadp	privacy encryption e2ee switzerland business free-tier saas open-source-clients

At a glance: Hostpoint E-Mail & Cloud Office vs Proton Mail
At a glance	Hostpoint E-Mail & Cloud Office	Proton Mail
HQ	Rapperswil-Jona, Switzerland	Plan-les-Ouates (Geneva), Switzerland
Legal entity	Hostpoint AG (CHE-101.974.997)	Proton AG (CHE-354.686.492); Proton Foundation supervision
Product	Custom-domain email + Cloud Office (Open-Xchange)	Not listed
Hosting	Hostpoint servers, Digital Realty Glattbrugg (CH)	Not listed
Self-host / OSS	Neither (managed SaaS)	Not listed
Commercial model	Paid per-mailbox tiers; domain required; no free tier	Freemium + paid consumer and business seats
Hosting model	Not listed	Proton-owned hardware in Switzerland (vendor claim)
Self-host	Not listed	No (SaaS); clients open source
Bridge	Not listed	Paid plans that include Mail

Key capabilities: Hostpoint E-Mail & Cloud Office vs Proton Mail
Key capabilities	Hostpoint E-Mail & Cloud Office	Proton Mail
Swiss-hosted mail	Yes	Not listed
Custom domain IMAP	Yes	Not listed
Open-Xchange Cloud Office	Yes	Not listed
Drive + CalDAV/CardDAV	Yes	Not listed
7-day Swiss support	Yes	Not listed
B2B DPA (GTC annex)	Yes	Not listed
E2EE + zero-access	Not listed	Yes
Swiss-operated	Not listed	Yes
Bridge (IMAP/SMTP)	Not listed	Yes
Open-source clients	Not listed	Yes
ISO 27001 & SOC 2 (claimed)	Not listed	Yes
Public B2B DPA	Not listed	Yes

Hostpoint E-Mail & Cloud Office

Custom-domain mailboxes with IMAP and free migration
Each plan is one inbox on a domain you control (new or external), with webmail plus IMAP/POP3/SMTP, unlimited forwards, aliases, out-of-office replies, server-side search, and spam/virus filters. Hostpoint’s free migration path (including Audriga-assisted moves from Gmail, GMX, Bluewin, Yahoo, and other hosts) is designed so teams keep historical mail when leaving FreeMail. Requires a domain; not a freemail brand address.
Open-Xchange Cloud Office: calendar, contacts, tasks
Browser suite for multi-calendar scheduling, shared address books, tasks, and appointment booking with free/busy style team scheduling. CalDAV/CardDAV sync targets Outlook, Thunderbird, Apple Calendar, and similar clients. Fits SMEs that want groupware next to IMAP without a full Microsoft 365 tenant.
Hostpoint Drive with desktop and mobile clients
Swiss-hosted file storage included per tier (upgradeable within product limits), with share links, e-mail shares, access controls, and local clients for Windows, macOS, iOS, and Android (Open-Xchange-powered). Business tier adds managing shared folders in teams. This is conventional cloud storage under Hostpoint—not zero-knowledge Drive.
Browser documents and real-time collaboration (Plus/Business)
From Cloud Office Plus upward, edit text, spreadsheets, and presentations in the browser with Microsoft Office file compatibility, real-time multi-user editing, and version history. Basic is mail-plus-calendar oriented; teams that live in shared docs should shortlist Plus or Business rather than Basic.
Swiss ops: dual backups, monitoring, seven-day support
Product pages claim Swiss data location, 24/7 monitoring, DDoS protection, hourly snapshots, daily mail backups with tiered retention (longer on higher tiers), and backup copies in two locations. Support is Swiss-based Mon–Sun daytime via phone, e-mail, WhatsApp, and form—useful for SMEs that need humans, not only tickets.

Proton Mail

Zero-access inbox encryption by default
Bodies and attachments are encrypted so Proton states it lacks keys to read stored mail. Proton-to-Proton traffic is end-to-end encrypted automatically; external recipients need password-protected messages or PGP/WKD for comparable content protection. Subject lines are not fully E2EE under OpenPGP header rules.
Proton Mail Bridge for desktop IMAP clients
Paid plans that include Mail can run Bridge locally to connect Outlook, Thunderbird, or Apple Mail over IMAP/SMTP while encrypting and decrypting on the device. Free accounts use official web/mobile/desktop apps instead of Bridge.
Custom domains, aliases, and business admin
Paid and business tiers support custom domains, extra addresses, catch-all and groups, hide-my-email aliases, and org admin for seats, storage, and retention policies. Suits teams leaving Google/Microsoft who still need branded addresses.
Open-source clients with published audits
Web, mobile, and desktop clients are published on GitHub with third-party audit reports linked from Proton’s open-source page. The hosted mail backend is not offered as self-hosted FOSS—audit client trust, not full server reproducibility.
Tracker blocking, PhishGuard, and Sentinel
Built-in tracker protection, phishing heuristics, link confirmation, SPF/DKIM/DMARC for custom domains, hardware-key 2FA, and optional Proton Sentinel monitoring for high-risk accounts. Complements encryption with everyday abuse defenses.

Assurance & compliance: Hostpoint E-Mail & Cloud Office vs Proton Mail
Assurance & compliance	Hostpoint E-Mail & Cloud Office	Proton Mail
Independent security / no-logs audit	Not found No public third-party no-logs or product security audit PDF for Cloud Office located on official pages.	Vendor claimed Open-source clients with published third-party audit reports (web/desktop links on open-source page). Not a classic VPN no-logs court test; transparency report covers legal orders for accessible account data.
ISO 27001	Not found Company page describes the Glattbrugg data center as ISO- and FINMA-certified (facility). No Hostpoint-organization ISO 27001 certificate page found in this pass.	Vendor claimed Vendor announces ISO 27001 certification after external audit completed 2 May 2024; Trust Center links a certificate download. Confirm scope and validity at procurement time.
SOC 2 / SOC 3	Not found No public SOC 2/3 report for Hostpoint Cloud Office found.	Vendor claimed Vendor announces first SOC 2 Type II attestation (July 2025 blog). Report typically under NDA—request from vendor for diligence files.
GDPR / EU data protection	Vendor claimed Swiss FADP primary; privacy states GDPR may apply in some processing. EU representative: Hostpoint Limited, Malta. Swiss–EU adequacy eases transfers. Customer remains controller for hosted content.	Vendor claimed Swiss controller/processor with EU representative; public DPA; GDPR materials for business. Adequacy/transfer mechanisms documented for non-adequate destinations.
US CLOUD Act exposure (indicative)	Partial EuropeanStack assessment: Swiss AG, no known US parent, Swiss product residency claims → relatively low ownership exposure vs US SaaS mail. Residual factors: US-listed Digital Realty facility owner (colocation), possible US-group tools on full subprocessor/marketing stack, privacy exceptional-transfer language. Not a clean bill; not legal advice.	Partial Swiss entity / no known US parent; inbox content on Proton-owned Swiss hardware with zero-access design. Partial exposure remains via US SaaS subprocessors (Zendesk support; Stripe/Chargebee/PayPal payments) and any account metadata Proton can access under Swiss process. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Annex 2 DPA + TOMs published with web-hosting GTC PDF; sub-processor engagement rules and audit rights described. Confirm applicability to your E-Mail & Cloud Office order and obtain current Sub-Processor List.	Vendor claimed Public DPA at proton.me/legal/dpa forms part of terms when Proton acts as processor; Swiss law, Geneva jurisdiction; general authorization for listed subprocessors.
EU AI Act	Not applicable Not an AI product.	Not applicable Core product is encrypted email. Optional Scribe assistant is ancillary; not an AI-centric offering for this catalog entry.
swiss hosting label	Vendor claimed Company states Hostpoint bears the swiss hosting label (HQ + data location in Switzerland), with rankingCoach exceptions noted.	Not listed

Considerations & known limitations: Hostpoint E-Mail & Cloud Office vs Proton Mail
Considerations & known limitations	Hostpoint E-Mail & Cloud Office	Proton Mail
Not zero-access / E2E mail	Medium Standard hosted mail: provider can access mailbox content for operations, spam filtering, and legal process. Unsuitable if your threat model requires only client-held keys.	Not listed
Full subprocessor inventory not self-serve	Medium DPA references a Sub-Processor List and change notifications, but a complete public e-mail-path inventory was not found on the marketing site. Request it (and any US-group vendors) before procurement sign-off.	Not listed
Facility ISO/FINMA vs org certification	Low ISO/FINMA language on public pages refers to the data center facility. Do not treat that as a verified Hostpoint ISMS ISO 27001 without a certificate.	Not listed
Docs collaboration only on higher tiers	Low Browser Office documents and real-time collab start at Plus; team shared-folder management is Business-oriented. Basic is intentionally limited.	Not listed
Customer still owns backup duty	Low GTC state customers remain responsible for their own backups; Hostpoint packages are supplementary and do not guarantee zero data loss.	Not listed
Weaker defaults outside Proton	Not listed	Medium Mail to Gmail/Outlook/others is not E2EE unless password-protected or PGP/WKD is used. Subject lines are not fully E2EE. Train users or you only protect the Proton-stored copy.
US support and payment processors	Not listed	Medium Zendesk, Chargebee, Stripe, and PayPal appear in the public processor list. They should not see zero-access message bodies, but support content and billing data can touch US-group services—document this in DPIAs.
Bridge requires paid Mail	Not listed	Low Desktop IMAP/SMTP via Bridge is not available on free accounts. Budget seats for users who refuse the official apps.
Hosted service, not self-hosted FOSS mail	Not listed	Medium Open-source clients improve inspectability but you still depend on Proton’s operated backend, uptime, and Swiss legal process. Unsuitable if policy mandates customer-operated mail servers.
Swiss legal orders on accessible data	Not listed	Low Transparency reports show thousands of yearly legal orders for Mail with many complied. Bodies stay encrypted; recovery emails, IPs (when retained for abuse), and similar metadata may still be in scope. Align expectations with counsel.

Fit

Hostpoint E-Mail & Cloud Office

Best fit when

Swiss SMEs and freelancers replacing FreeMail with branded @domain mailboxes
Teams that want IMAP mail plus shared calendars, contacts, and Drive in one Swiss panel
Buyers already using Hostpoint domains/hosting who want same-vendor mail and support
Organizations that prioritize Swiss data location messaging and Swiss daytime phone support
Migrators from Gmail/GMX/Bluewin who need an included mailbox migration path

Poor fit when

Security programs that require zero-access / E2E encrypted mail by default
Enterprises needing SSO/SCIM-centric identity and deep SaaS compliance tooling out of the box
Teams that only want free freemail without a domain or paid plan
Self-host or fully open-source groupware mandates
Buyers who need a published independent security audit report before shortlisting

Consider instead when

When: You need end-to-end encrypted, zero-access mail as the primary control
Consider: Proton Mail or Tuta
Hostpoint is conventional hosted Open-Xchange mail, not a zero-knowledge mailbox.
When: You want a broader Swiss cloud suite (kDrive, Swiss Meet, etc.) under one multi-product vendor
Consider: Infomaniak kMail
Compare suite breadth vs Hostpoint’s registrar/hosting + Cloud Office focus.
When: You need Microsoft/Google admin ecosystems, global collaboration defaults, or advanced DLP
Consider: Microsoft 365 or Google Workspace
Trade Swiss-operator simplicity for global SaaS depth and US-group jurisdiction.
When: You want German privacy-oriented hosted mail with OpenPGP-centric workflows
Consider: mailbox.org or Mailfence
Different legal HQ and crypto posture; Hostpoint is Swiss SME groupware-first.

Proton Mail

Best fit when

Teams that need default end-to-end / zero-access encryption without running their own mail stack
Orgs that want Swiss legal venue and documented resistance to direct foreign data demands
Businesses migrating branded domains off Gmail/Outlook with Easy Switch and Bridge for desktop holdouts
Security-conscious professionals who value open-source clients, published audits, and hardware-key 2FA
Buyers who need a public DPA plus vendor-claimed ISO 27001 / SOC 2 Type II for questionnaires

Poor fit when

Fully self-hosted requirements (Proton Mail is SaaS; clients are open source, not a full on-prem mail server)
Desktop IMAP on free accounts only—Bridge needs a paid plan that includes Mail
Workflows that depend on unencrypted-looking mail to external parties who will not use password links or PGP
Teams that primarily need full Microsoft 365 / Google Workspace collaboration depth rather than encrypted mail first

Consider instead when

When: You want German E2EE email with a different crypto product surface and may not need Proton’s full ecosystem
Consider: Tuta
Compare desktop interoperability and business admin maturity side by side.
When: You want ad-free European mail with strong transport privacy but do not require zero-access E2EE for all stored content
Consider: Posteo
Different threat model: Posteo is privacy-forward without Proton’s zero-access default.
When: You need OpenPGP-centric mail with classic collaboration extras under Belgian operation
Consider: Mailfence
Weigh automatic Proton-to-Proton E2EE UX versus Mailfence’s model.
When: Collaboration suite depth and ecosystem lock-in outweigh encryption defaults
Consider: Google Workspace or Microsoft 365
Accept US-provider jurisdiction and scanning/processing models as tradeoffs.

Open questions for due diligence

Hostpoint E-Mail & Cloud Office

What is the current Sub-Processor List for E-Mail & Cloud Office (including spam/AV engines, backup tooling, Audriga, any CDN)?
Does your contract package explicitly attach the web-hosting DPA annex to standalone Cloud Office mailboxes?
Any US-group processors in the live list that would change a CLOUD Act or transfer assessment?
Is there a customer-facing ISO/SOC report for Hostpoint operations beyond data-center facility claims?
Data residency guarantees in writing for dual backup locations (both fully in Switzerland)?

Proton Mail

What exact data-center sites and any non-Swiss regions apply to your tenant’s mailbox replicas today?
Will Proton provide the full SOC 2 Type II report under NDA and confirm ISO 27001 certificate scope/expiry for your questionnaire?
For business orgs: which users will be private vs non-private, and how will admin recovery work with zero-access constraints?
Which external partners must receive E2EE content, and will they accept password-protected messages or PGP?