Compare LibreOffice and mailbox (formerly mailbox.org) on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Microsoft 365
Germany· Office Productivity Suite
Needs review
Shortlist LibreOffice when you need a full offline, open-source office suite with ODF as default and no TDF subscription tax. Skip as a drop-in Microsoft 365/Google Workspace replacement when real-time cloud co-authoring is non-negotiable—add Collabora Online or stay on Microsoft 365 / Google Workspace instead.
Germany· Office Productivity Suite
Needs review
Shortlist mailbox when you need a German-operated email-plus-collaboration suite (Mail, Drive, Office, Meet, Admin/API) on dual Berlin sites with published BSI C5 Type 1 and ISO 27001 claims. Skip when you require free forever mail or default zero-knowledge for all messages—consider Proton Mail or Tuta instead.
Highlighted rows differ between the two products.
| Feature | LibreOffice | mailbox (formerly mailbox.org) |
|---|---|---|
| Country of origin | Germany | Germany |
| Category | Office Productivity Suite | Office Productivity Suite |
| Open source | Yes | No |
| Self-hosted | No | No |
| Headquarters | Germany | Germany |
| Legal entity | The Document Foundation (gemeinnützige rechtsfähige Stiftung des bürgerlichen Rechts), Winterfeldtstraße 52, 10781 Berlin | Heinlein Hosting GmbH (Berlin; CEO Peer Heinlein) |
| Governing law | German law (Stiftungsrecht / Berlin foundation supervision) | Not listed |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Low | Low |
| Hosting / residency | Desktop Community LibreOffice processes documents on user-controlled endpoints; TDF does not operate a multi-tenant document SaaS. Optional crash reports go to TDF (no user documents). Website uses self-hosted Matomo; site embeds (reCAPTCHA/maps/etc.) are web-only. Partner cloud/Online products have separate hosting stacks. | Core mailbox, Drive, and Meet on Heinlein-operated servers in German data centres in Berlin (two independent locations). Website analytics: self-hosted Matomo. Marketing site may embed Vimeo/YouTube. No public AWS/GCP/Azure product hosting region found for customer mail data. |
| Summary | Free open-source desktop office suite from The Document Foundation (Berlin): Writer, Calc, Impress, Draw, Base, and Math, with native ODF and strong OOXML interoperability. | German paid digital workplace from Heinlein Hosting GmbH: secure email with PGP/S/MIME, Drive, browser Office, Meet, and business Admin on dual Berlin data centres. |
| Tags |
| At a glance | LibreOffice | mailbox (formerly mailbox.org) |
|---|---|---|
| HQ | Berlin, Germany (TDF) | Berlin, Germany |
| Legal form | German charitable foundation (Stiftung) | Not listed |
| License | MPL 2.0 (primary); dual-license contributions | Not listed |
| Apps | Writer, Calc, Impress, Draw, Base, Math | Not listed |
| Default formats | ODF (ISO); OOXML import/export | Not listed |
| Deployment | Local desktop install; Online via partners | Not listed |
| Commercial model | Free Community builds; paid partner Enterprise/LTS | Not listed |
| Legal entity | Not listed | Heinlein Hosting GmbH |
| Hosting | Not listed | Own servers, dual independent Berlin sites |
| Model | Not listed | Paid subscription SaaS; trial available; no permanent free tier |
| Self-host | Not listed | No (managed SaaS) |
| Open standards | Not listed | IMAP/SMTP, CalDAV/CardDAV, WebDAV, PGP, S/MIME |
| Key capabilities | LibreOffice | mailbox (formerly mailbox.org) |
|---|---|---|
| Open source (MPL) | Yes | Not listed |
| ODF native | Yes | Not listed |
| Local-first desktop | Yes | Not listed |
| Windows · macOS · Linux | Yes | Not listed |
| German foundation (TDF) | Yes | Not listed |
| Six-app suite | Yes | Not listed |
| German-operated | Not listed | Yes |
| Berlin dual-site hosting | Not listed | Yes |
| PGP + S/MIME | Not listed | Yes |
| BSI C5 Type 1 (claimed) | Not listed | Yes |
| ISO 27001 (claimed) | Not listed | Yes |
| Mail + Drive + Meet + Office | Not listed | Yes |
Six-app desktop suite (Writer through Math)
Writer, Calc, Impress, Draw, Base, and Math cover documents, spreadsheets, slides, vector drawing, databases, and formulas in one install. Suited to fleets that need a full offline office stack rather than a single web app.
Native ODF with OOXML and legacy filters
Default formats follow the ISO Open Document Format; DOCX/XLSX/PPTX and many legacy types import and export for mixed Microsoft environments. Complex macros and edge-case layouts may still need QA during migration.
Cross-platform Windows, macOS, and Linux builds
Official installers cover major desktop OSes including ARM variants where published. Fits heterogeneous EU public-sector and education fleets without a single-vendor OS mandate.
Local-first editing without a TDF document cloud
Documents are processed on user-controlled hardware by default—no mandatory file sync to The Document Foundation. Optional crash reports send technical dumps only and can be turned off; cloud collab requires separate partner products.
MPL-licensed source with public security advisories
Community builds are free/open source under MPL 2.0 (with dual-license contribution policy). TDF publishes CVE-linked advisories and fix versions so IT can track patch baselines alongside partner LTS backports.
PGP Guard, S/MIME, and hardened mail transport
Webmail Guard for PGP without extra software (or Mailvelope with local keys), S/MIME for sign/encrypt, 2FA and app passwords, multi-stage spam/virus rejection, plus public transport controls (DNSSEC, DANE, MTA-STS, DMARC/DKIM/SPF, TLS checker, @secure.mailbox.org aliases). Benefits security-minded teams that still need interoperable IMAP/SMTP; content is not zero-knowledge by default unless you encrypt.
Drive on dual independent Berlin sites
Cloud files on the provider's own German infrastructure with two independent Berlin locations, WebDAV, mobile apps, guest share links, expandable quota, and optional client-side OpenPGP encryption of stored files. Fits teams replacing consumer cloud drives while keeping residency claims concrete; confirm plan quotas on the official site.
Browser Office with CalDAV and CardDAV
Edit common office formats in the browser, share calendars and contacts via open CalDAV/CardDAV standards, plus tasks, notes, polls, and TLS-secured XMPP chat. Aimed at SMEs and schools that want collaboration without a full Microsoft desktop stack; advanced Excel macros and deep Office add-ins are not the target.
Meet video hosted in German data centres
Browser-based conferencing integrated with calendar and mail: link invites for external guests, breakout rooms, screen share, chat, surveys, and moderator controls. Privacy documentation references the OpenTalk stack; sessions run through mailbox's German data centres. Evaluate E2EE defaults and recording policies against your meeting compliance needs.
Business Admin console and automation API
Central management of domains, mailboxes, quotas, spam/virus settings, IP allowlists, and backups, with an HTTP API for larger orgs and resellers (api.mailbox.org). Supports onboarding help and partner-assisted migration. Better for multi-seat German operations than pure consumer inboxes; not a full IdP replacement without SSO design work.
| Assurance & compliance | LibreOffice | mailbox (formerly mailbox.org) |
|---|---|---|
| Independent security / no-logs audit | Not applicable Not a network/VPN product. Security posture is desktop code + public CVE advisories rather than a no-logs SaaS audit. | Not found No public independent no-logs audit PDF found; operational transparency reports and BSI/ISO artefacts instead |
| ISO 27001 | Not found No public ISO 27001 certificate for TDF/LibreOffice Community found on official security/trust pages. | Vendor claimed Vendor states ISO/IEC 27001:2022 on certified-quality and press pages; request current certificate in diligence |
| SOC 2 / SOC 3 | Not found Not marketed as a SOC-attested SaaS; Community product is downloadable desktop software. | Not found No SOC 2/3 claim found on primary security/cert pages |
| GDPR / EU data protection | Vendor claimed TDF is a German foundation publishing a GDPR-oriented privacy policy as controller for website/project services; desktop document processing is local by default. | Vendor claimed German controller Heinlein Hosting GmbH; DE hosting; detailed privacy notice; DPO privacy@mailbox.org |
| US CLOUD Act exposure (indicative) | Partial EuropeanStack assessment: German foundation, no known US parent, no TDF document cloud. Exposure for standard desktop installs is low (local files). Partner Online/cloud hosting and optional crash reporting to TDF are separate paths—not a clean 'CLOUD Act free forever' claim for every deployment topology. Not legal advice. | Partial EU/German entity, no known US parent, self-operated Berlin hosting for core data—no AWS/GCP/Azure product region found. Residual: marketing embeds (Vimeo/YouTube) and possible external payment services. Indicative assessment only, not legal advice. |
| Data processing agreement (B2B) | Not applicable TDF Community desktop is not a B2B SaaS where TDF processes customer documents. Enterprise Online partners may offer DPAs for their hosted services—confirm with the chosen vendor. | Vendor claimed Business knowledge base: customers can conclude a DPA online; historic AVV portal for business accounts |
| EU AI Act | Not applicable General office suite, not an AI-centric product offering under typical AI Act high-risk framing. | Not applicable Email/collaboration suite, not an AI product core |
| BSI C5 | Not listed | Vendor claimed Vendor press (7 Jan 2026): BSI C5 Type 1 attestation for mailbox; confirm type, scope, and period |
| Considerations & known limitations | LibreOffice | mailbox (formerly mailbox.org) |
|---|---|---|
| OOXML / Microsoft feature parity gaps | Medium Interoperability is strong but not bit-perfect with every Microsoft 365 layout, VBA macro, or review workflow. Plan pilots and regression tests before mandating LibreOffice as the only editor for complex templates. | Not listed |
| No foundation-operated enterprise SLA | Medium TDF does not sell end-user SLAs for Community builds. Large organisations must contract ecosystem partners for LTS, security backports, and migration consulting—or accept community support channels. | Not listed |
| No built-in real-time cloud co-authoring | Medium Simultaneous browser editing requires separate products (e.g. Collabora Online) and their hosting/jurisdiction diligence. Desktop LibreOffice alone will not replace Teams/Drive co-authoring. | Not listed |
| Security patch ownership on self-managed desktops | Low CVEs are published with fixed versions, but you own endpoint update cadence. Stale community installs lag partner LTS backports—treat patch management as part of deployment design. | Not listed |
| Partner Online hosting is out of TDF desktop scope | Low If you move files into third-party Online/cloud LibreOffice stacks, residency and US-cloud subprocessor risk follow that operator, not the offline Community desktop model described here. | Not listed |
| Mail is not zero-knowledge by default | Not listed | Medium Without PGP/S/MIME, stored message content remains operator-accessible under legal process. Practical impact: train users or mandate Guard/S/MIME for confidential traffic. |
| C5 Type 1 is point-in-time | Not listed | Low Type 1 attestations describe design/implementation at a point in time. Re-check type (1 vs 2), scope, and renewal dates for public-sector RFPs. |
| Payment and edge processors need confirmation | Not listed | Low Core hosting is self-operated DE, but privacy text references external payment services; marketing embeds US video hosts. Ask for the current processor list with the DPA. |
| Not a full Microsoft 365 ecosystem substitute | Not listed | Medium Browser Office and Meet cover common collaboration; deep desktop macros, Graph automations, and third-party M365 marketplaces will not map 1:1. |
| No customer self-host option | Not listed | Low Organisations that must operate mail on their own iron need another stack; mailbox is multi-tenant SaaS. |
When: You need Microsoft-centric cloud collaboration, Outlook/Exchange, and Power Platform in one contract
Consider: Microsoft 365
LibreOffice remains useful as an offline ODF client, not a full M365 substitute.
When: Browser-first simultaneous editing and zero desktop install are mandatory
Consider: Google Workspace / Google Docs, or a hosted Collabora Online / OnlyOffice stack
Evaluate those products’ hosting regions and subprocessors separately.
When: You want LibreOffice Technology with commercial online editing and SLAs
Consider: Collabora Online or other certified LibreOffice Enterprise partners
TDF’s business page points large deployments to ecosystem Enterprise offerings.
When: You need default end-to-end encrypted mail as the primary product
Consider: Proton Mail or Tuta
Stronger E2EE-first posture; lighter full workplace suite than mailbox
When: You want minimal German privacy email without Drive/Office/Meet
Consider: Posteo
Leaner mailbox; fewer collaboration modules
When: You need full desktop Office parity and global SaaS integrations
Consider: Microsoft 365 (incumbent) with separate residency controls
Different risk and ecosystem tradeoff—not an EU peer