Infomaniak kMail vs Swissnode

Compare Infomaniak kMail and Swissnode on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail

Logo: Infomaniak kMail

Infomaniak kMail

Switzerland· Email Services

Needs review

Shortlist when you need Swiss-hosted professional email with custom domains, IMAP/CalDAV, suite bundling (kSuite), and operator-owned DCs. Skip when zero-access client-side E2EE or full self-host is mandatory—consider Proton Mail (E2EE) or a self-hosted stack instead.

Swiss-hosted mailCustom domainsIMAP / CalDAVOSS mobile clientsISO 27001 (claimed)Optional send encryption
Logo: Swissnode

Swissnode

Switzerland· Email Services

Needs review

Shortlist Swissnode for lean European cPanel domain email plus shared web or KVM VPS when Spain/EU residency is acceptable and you do not need enterprise compliance packs. Skip when you require live Swiss territorial hosting, E2EE mail, or published DPA/subprocessor inventories—consider Hostpoint, Infomaniak, or Proton Mail instead.

cPanel domain emailKVM VPSSpain data center (vendor)Optional Cloudflare CDNSMB hosting packages
Infomaniak kMail vs Swissnode: Snapshot
FeatureLogo: Infomaniak kMailInfomaniak kMailLogo: SwissnodeSwissnode
Country of originSwitzerlandSwitzerland
CategoryEmail ServicesEmail Services
Open sourceYesNo
Self-hostedNoNo
HeadquartersSwitzerlandSwitzerland
Legal entityInfomaniak Network SA (Rue Eugène Marziano 25, 1227 Les Acacias, Geneva; CH-660.0.059.996-1; IDE CHE-103.167.648)Swissnode (legal form/registry name not clearly published on marketing site)
Governing lawNot listedNot clearly stated on marketing pages; confirm in contract (CH contact vs ES ops)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)LowMedium
Hosting / residencyPrimary mail hosting on Infomaniak-operated Swiss data centres (Geneva/Zurich region; Swiss Hosting label claimed); dual-DC backups in Switzerland. Confidentiality policy names payment partners (e.g. PayPal, Checkout) and other ancillary third parties for account/billing/measurement—not AWS/GCP/Azure as primary mail hosts in public materials.Vendor states primary hosting moved to a Spain data center after Swiss DC closure; homepage cites Spanish privacy laws. Site IP geolocates to Spain (Ipcore Datacenters). Optional Cloudflare CDN on web plans (US-group). Off-site backup provider not named. No public subprocessor inventory.
Summary

Swiss-hosted professional email, contacts and calendars from Infomaniak Network SA—custom domains, open protocols, optional encryption, part of kSuite.

European cPanel email, shared web hosting, and KVM VPS under the Swissnode brand—vendor-stated Spain data center after Swiss DC closure, with optional Cloudflare CDN on web plans.

Tags
At a glance: Infomaniak kMail vs Swissnode
At a glanceLogo: Infomaniak kMailInfomaniak kMailLogo: SwissnodeSwissnode
HQGeneva, Switzerland (Les Acacias)Not listed
Legal entityInfomaniak Network SANot listed
HostingOwn Swiss data centres; dual-site mailbox backupsNot listed
Open sourceMobile clients GPL-3.0; backend SaaSNo
Self-hostNo (hosted only)Not listed
Commercial modelFree my kSuite tier; paid kSuite / Mail Service seatsPackage tiers (monthly/yearly); optional antispam add-on
Contact addressNot listedBinzallee 6, 8055 Zurich, CH (public contact page)
Footer / ops addressNot listedMutilva Baja, Navarra, Spain
Primary hosting (vendor)Not listedSpain data center after Swiss DC closure
Core productsNot listedDomain email, cPanel web hosting, KVM VPS
Control panelsNot listedcPanel (shared); Virtualizor (VPS)
Self-hosted productNot listedNo (provider-hosted; VPS gives root on rented VM)
Key capabilities: Infomaniak kMail vs Swissnode
Key capabilitiesLogo: Infomaniak kMailInfomaniak kMailLogo: SwissnodeSwissnode
Swiss-hosted mailYesNot listed
Custom domainsYesNot listed
IMAP / CalDAVYesNot listed
OSS mobile clientsYesNot listed
ISO 27001 (claimed)YesNot listed
Optional send encryptionYesNot listed
cPanel domain emailNot listedYes
KVM VPSNot listedYes
Spain data center (vendor)Not listedYes
Optional Cloudflare CDNNot listedYes
SMB hosting packagesNot listedYes

Infomaniak kMail

  • Custom-domain mail with IMAP, CalDAV and CardDAV

    Host name@your-domain addresses with standard IMAP/SMTP plus CalDAV/CardDAV so Thunderbird, Apple Mail, Outlook and other clients stay usable. Paid kSuite/Mail Service tiers add multi-mailbox management, aliases/categories, signatures and team admin; free my kSuite is limited to one address without aliases.

  • One-click send-time encryption (OpenPGP / ECC / AES)

    Optional encryption at send uses OpenPGP, ECC and AES-256-GCM; Infomaniak-to-Infomaniak is automatic after auth, while external recipients often open a password-protected secure page. Private keys stay on Infomaniak infrastructure—useful for sensitive sends, but not zero-access client-side E2EE with user-held keys.

  • Open-source Infomaniak Mail mobile clients

    Official iOS and Android mail apps are published on GitHub under GPL-3.0 for local inspection and contribution. The hosted mail backend remains Infomaniak SaaS only—there is no supported self-hosted server stack for kMail.

  • Swiss dual-DC backups, SPF/DKIM/DMARC and antivirus

    Mailboxes are backed up across Swiss data centres with vendor-stated restore windows around 30 days; anti-spam/antivirus plus domain authentication (SPF, DKIM, DMARC) are standard. Availability claims (e.g. high uptime for essential services) should be checked against the current SLA for your plan.

  • Sovereign AI assist (Euria) inside the mailbox

    In-product AI can help draft, correct, translate and process mail context; Infomaniak states messages sent to its AI are processed in Switzerland and not stored for other purposes. Treat AI features as operator-side processing of content you choose to submit—not as end-to-end private AI.

Swissnode

  • Domain email on cPanel (IMAP/POP/SMTP)

    Business mailboxes on your domain with secure webmail, SpamAssassin-style spam control, virus filtering, DKIM, calendars/contacts, autoresponders, forwarders, filters, and mailing lists on mid-tier plans—protocol-compatible with Outlook, Apple Mail, and mobile clients.

  • cPanel web hosting with Softaculous and LiteSpeed PHP

    Shared and reseller web plans with datacenter SSDs, free panel SSL, multi-PHP, SSH above entry tiers, and Softaculous one-click apps—aimed at brochure sites, WordPress, and small PHP apps rather than container platforms.

  • KVM VPS with RAID-10 enterprise SSDs

    Root-level Linux VPS via KVM, enterprise SSDs, RAID-10 arrays, fixed per-VPS network allotments, and Virtualizor-style management for teams that outgrow shared hosting but still want package SKUs.

  • Optional Cloudflare CDN from the control panel

    Web plans advertise easy Cloudflare integration to cache static assets near visitors—useful for performance, with the tradeoff that enabled CDN traffic can traverse a US-group network path.

  • Backup cadence for VPS (vendor-stated)

    Marketing states daily on-site and weekly off-site VPS backups with rebuilds measured in minutes to an hour after failure—restore SLAs and off-site provider identity should be confirmed in the contract.

Assurance & compliance: Infomaniak kMail vs Swissnode
Assurance & complianceLogo: Infomaniak kMailInfomaniak kMailLogo: SwissnodeSwissnode
Independent security / no-logs audit
Not found

Bug bounty and ISO ISMS claimed; no public independent no-logs audit of mailbox content found. Encryption is optional and keys remain with Infomaniak.

Not found

No public independent audit report found on swissnode.ch.

ISO 27001
Vendor claimed

Vendor publishes ISO 27001:2022 certificate (certified since 2018 per certifications page); downloadable PDF and SoA references.

Not found

No ISO 27001 claim located on official product/security pages.

SOC 2 / SOC 3
Not found

Not listed among published certifications (ISO 27001/9001/14001/50001, B Corp, Swiss labels).

Not found

No SOC 2/3 claim found.

GDPR / EU data protection
Vendor claimed

Swiss entity; GDPR and Swiss FADP commitments on legal pages; DPO listed; Swiss hosting of service data claimed.

Partial

Spain/EU hosting supports EU data-protection analysis, and homepage references Spanish privacy laws; usable privacy policy/DPA text not published on site. Customer remains controller for lawful basis.

US CLOUD Act exposure (indicative)
Partial

Swiss Infomaniak Network SA, no known US parent, own Swiss DCs for mail—not a claimed clean bill. Account payments via partners such as PayPal/Checkout (US-group) per confidentiality policy. Indicative only; not legal advice.

Partial

No known US parent; primary host Spain/EU. Optional Cloudflare CDN is a US-group subprocessor for web static delivery; off-site backups and other SaaS paths not published. Not a clean low-exposure bill; not legal advice.

Data processing agreement (B2B)
Vendor claimed

Downloadable DPA linked from trust centre (Data_Processing_Agreement (DPA).pdf).

Not found

No public DPA download or B2B processing terms found; request in writing.

EU AI Act
Not applicable

Euria AI assist exists inside mail; product is primarily email/hosting, not an AI-system vendor offering.

Not applicable

Commodity hosting/email/VPS, not an AI product.

Swiss territorial hostingNot listed
Partial

Vendor discloses Swiss DC closed; operations from Spain DC. Contact still Zurich. Do not treat as CH-only residency.

Considerations & known limitations: Infomaniak kMail vs Swissnode
Considerations & known limitationsLogo: Infomaniak kMailInfomaniak kMailLogo: SwissnodeSwissnode
Encryption is not zero-access by default
Medium

Optional send encryption keeps private keys on Infomaniak infrastructure. Operators with warrant or insider access to the platform may still access unencrypted stored mail. Practical impact: do not treat kMail as a zero-knowledge vault for all messages.

Not listed
SaaS-only mail backend
Low

No official self-host for the mail service; exit means IMAP export/migration. OSS clients do not equal portable server stack.

Not listed
Free tier residency and feature caps
Low

my kSuite requires OECD residency and phone verification; no aliases, limited storage, enforced free signature. Unsuitable as free global professional mail.

Not listed
Limited public mail-path subprocessor table
Low

Hosting is own Swiss DCs per vendor docs; confidentiality policy lists payment and marketing-class third parties. Procurement should request a current subprocessor list for mailbox content paths.

Not listed
No HDS health-hosting cert
Medium

Vendor FAQ states French HDS certification is not planned—material for French health-sector workloads.

Not listed
Swiss brand vs Spain hostingNot listed
High

Product pages state the Swiss data center closed and services run in Spain; homepage cites Spanish privacy laws. Buyers assuming Zurich colocation from the brand or older materials will mis-classify risk and contractual residency.

Empty privacy pages / no public DPA or certsNot listed
High

Privacy and cookie URLs do not present substantive policy text; ISO/SOC and DPA artifacts were not found. Regulated or enterprise buyers face a heavy offline diligence burden.

Optional Cloudflare CDN (US-group)Not listed
Medium

Web hosting markets Cloudflare integration from cPanel. Enabling CDN can place static content on a US-group network path even when origin is Spain—document this in transfer assessments.

Off-site backup provider not namedNot listed
Medium

Daily on-site and weekly off-site backups are claimed for VPS, but the off-site location/provider is not published—ask before trusting disaster-recovery or residency narratives.

Aging marketing surfaceNot listed
Low

Public site still shows 2013–2018 copyright and sparse modern trust pages; may signal limited investment in public assurance UX even if infrastructure remains operational.

Fit

Infomaniak kMail

Best fit when

  • SMEs and associations wanting Swiss-hosted name@domain email with standard IMAP clients
  • Teams that prefer an integrated kSuite workspace (mail + drive + meet) under one Swiss operator
  • Orgs that need a published B2B DPA, dual-site Swiss backups, and SPF/DKIM/DMARC on domains
  • Buyers who value open-source mobile clients even if the mail backend is SaaS-only
  • Individuals in OECD countries open to free my kSuite with known feature and residency limits

Poor fit when

  • Requirements for default zero-access E2EE with user-held keys on every message
  • Need to self-host the mail server stack (kMail is SaaS-only)
  • French HDS health-data hosting (vendor states HDS certification is not planned)
  • Free-tier signup outside OECD residency / without mobile verification
  • Very large estates that need more than kSuite's published per-offer user ceiling without a custom deal

Consider instead when

  • When: You need zero-access end-to-end encryption as the default mail model

    Consider: Proton Mail

    Different trust model: client-side E2EE vs Infomaniak operator-held keys for optional encryption

  • When: You want European hosted mail with a different encryption or non-profit posture

    Consider: Mailfence or Posteo

    Compare encryption UX, storage model, and commercial terms on each vendor site

  • When: You need full control of the MTA and storage stack

    Consider: Self-hosted mail (e.g. mailcow/Stalwart) or a host that publishes server software

    Infomaniak mobile apps are OSS; the hosted service is not self-hostable

Swissnode

Best fit when

  • Freelancers and micro-SMBs wanting domain IMAP/POP mail with spam filtering and webmail on cPanel
  • Agencies/resellers needing simple shared web packages (Softaculous, multi-PHP, free panel SSL) plus optional VPS upgrade path
  • Teams that prefer standard mail protocols over migrating into Microsoft 365 or Google Workspace
  • Buyers comfortable with Spain/EU hosting under a .ch brand and Swiss contact details
  • Workloads where package-tier hosting and KVM root access matter more than published ISO/SOC packs

Poor fit when

  • Organizations that hard-require Swiss (CH) server residency or nFADP narratives assuming Zurich colocation
  • Procurement needing public DPA, full subprocessor lists, ISO 27001, or SOC 2 on the vendor site
  • Teams needing end-to-end encrypted mail or zero-access webmail (choose Proton-class products)
  • Enterprises expecting Microsoft 365-class collaboration, compliance archives, and admin tooling
  • Buyers who shortlisted the brand solely for “Swiss data center” marketing that product pages no longer support

Consider instead when

  • When: You need Swiss-resident email/office with a broader product catalog and clearer CH hosting claims

    Consider: Hostpoint E-Mail & Cloud Office or Infomaniak kMail

    Fuller Swiss platforms; better when territorial Switzerland is non-negotiable.

  • When: You need end-to-end encrypted mail and open-source clients rather than cPanel hosting

    Consider: Proton Mail

    Different product class: E2EE vs classic hosted IMAP.

  • When: You need full collaboration suites, admin compliance tooling, and ecosystem apps

    Consider: Microsoft 365 or Google Workspace (US-group control planes)

    Richer features; different jurisdiction/CLOUD Act profile.

  • When: You want a larger EU hosting group with broader cloud SKUs

    Consider: IONOS or OVHcloud

    Scale and catalog depth over niche Swissnode packaging.

Open questions for due diligence

Infomaniak kMail

  • Request the current subprocessor list scoped to Infomaniak Mail mailbox content (not only account billing).
  • Confirm whether optional encryption is fully rolled out on mobile apps for your required clients.
  • Validate seat ceilings, SLA, and restore RPO/RTO against your RTO targets for the chosen kSuite/Mail plan.
  • For regulated sectors: map FADP/GDPR DPA clauses and any sector addenda (FINMA mapping exists; HDS does not).

Swissnode

  • What is the exact legal entity (registry name, UID/CHE or Spanish NIF) and governing law on the customer contract?
  • Will Swissnode sign a B2B DPA and publish a current subprocessor list (spam filter, backups, payment, support tools)?
  • Exact Spain facility (Ipcore or other) and whether any secondary regions exist for mail, web, and VPS separately?
  • Where are weekly off-site backups stored, and under which provider’s control?
  • Is Cloudflare mandatory, optional, or default for web plans, and can customers disable it for pure Spain origin delivery?
  • What uptime SLA, restore RPO/RTO, and support hours are contractual vs marketing (99.5% backbone claim on homepage)?