Migadu vs RAIDBOXES Emails

Compare Migadu and RAIDBOXES Emails on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Google Workspace, Microsoft 365

Migadu

Switzerland· Email Services

Needs review

Shortlist Migadu when you need Swiss-operated, standards IMAP/SMTP hosting with unlimited addresses across many domains under flat account quotas—especially agencies and multi-domain SMEs. Skip when you need provider E2EE defaults, contractual SLA on the default offer, mailbox 2FA, or bulk/transactional sending; consider Proton Mail/Tuta for E2EE, or mailbox.org/Mailfence/Posteo/Runbox for other European professional-mail tradeoffs.

Swiss operatorUsage-priced multi-domainSMTP/IMAP/POP3Mail hosted in FranceMulti-admin + APINo ads / no tracking

View listing Visit Website

RAIDBOXES Emails

Germany· Email Services

Needs review

Shortlist when you already (or will) host the domain and WordPress stack at RAIDBOXES and need practical multi-mailbox domain email under a German operator with an online DPA. Skip when you need multi-domain density, default E2EE, or email fully independent of a hoster—consider Migadu, Tuta, Posteo, or mailbox.org instead.

German operatorIMAP / SMTPMail Hosting 2.0Online DPAWordPress-adjacentOptional PGP

View listing Visit Website

Highlighted rows differ between the two products.

Migadu vs RAIDBOXES Emails: Snapshot
Feature	Migadu	RAIDBOXES Emails
Country of origin	Switzerland	Germany
Category	Email Services	Email Services
Open source	No	No
Self-hosted	No	No
Headquarters	Switzerland	Germany
Legal entity	Migadu-Mail GmbH	Raidboxes GmbH, Hafenstraße 32, 48153 Münster (Amtsgericht Münster HRB 16184)
Governing law	Canton of Appenzell Ausserrhoden, Swiss Confederation (terms)	German law (company domicile Münster)
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Medium
Hosting / residency	Mail servers stated in France (EU). Payment subprocessors Stripe and PayPal (US) for billing data. Full mail infrastructure/backup subprocessor list not published by name on primary pages.	Email: vendor claims exclusive German data centres and first-party Mail Hosting 2.0 infrastructure (IMAP/SMTP on securemail.pro hostnames); privacy policy still names Heinlein Hosting/mailbox.org under paid email boxes (possible legacy lag). Platform/website: AWS EMEA SARL and DigitalOcean listed for web hosting of the online offer; US-group SaaS includes Intercom, Calendly, Chargebee, Sentry, Google analytics/ads, Mailgun, and others for support, billing, and marketing.
Summary	Swiss-operated, standards-based email hosting for custom domains: unlimited addresses and multi-domain accounts priced by usage quotas, not per mailbox.	German domain email hosting from Raidboxes GmbH (Münster): Mail Hosting 2.0 with IMAP/SMTP, multi-mailbox plans, optional PGP, and dashboard fit for WordPress agencies—domain must be hosted at RAIDBOXES.
Tags	privacy email-hosting saas api standards-based multi-domain	privacy email-hosting gdpr wordpress germany business-email imap

At a glance: Migadu vs RAIDBOXES Emails
At a glance	Migadu	RAIDBOXES Emails
HQ / entity	Migadu-Mail GmbH, Switzerland	Not listed
Founded	2014 (vendor About)	Not listed
Mail hosting	Data centers in France (vendor Pro/Cons)	Not listed
Commercial model	Flat per-account plans by daily message quotas + soft storage	Not listed
Open source product?	No — built on open-source stack; service is proprietary SaaS	Not listed
Self-host	No	Not listed
Ownership	Bootstrapped; no outside capital (vendor claim)	Not listed
HQ	Not listed	Münster, Germany
Legal entity	Not listed	Raidboxes GmbH (HRB 16184)
Group	Not listed	team.blue (Belgium) since 2022
Product	Not listed	Mail Hosting 2.0 domain email
Access	Not listed	IMAP / SMTP + webmail
Domain constraint	Not listed	Domain hosted at RAIDBOXES for new mailboxes
Open source	Not listed	No
Self-hosted	Not listed	No

Key capabilities: Migadu vs RAIDBOXES Emails
Key capabilities	Migadu	RAIDBOXES Emails
Swiss operator	Yes	Not listed
Usage-priced multi-domain	Yes	Not listed
SMTP/IMAP/POP3	Yes	Not listed
Mail hosted in France	Yes	Not listed
Multi-admin + API	Yes	Not listed
No ads / no tracking	Yes	Not listed
German operator	Not listed	Yes
IMAP / SMTP	Not listed	Yes
Mail Hosting 2.0	Not listed	Yes
Online DPA	Not listed	Yes
WordPress-adjacent	Not listed	Yes
Optional PGP	Not listed	Yes

Migadu

Usage-metered accounts with unlimited addresses
Plans are flat per Migadu account. Within daily in/out quotas and soft storage guidance, create large numbers of mailboxes and host many domains without per-address fees—useful for agencies and multi-project teams. Soft storage does not hard-bounce mail; sustained over-quota use can force upgrades or limits.
Standards SMTP, IMAP4, POP3, and webmail
No proprietary client protocol. Connect Thunderbird, Apple Mail, Outlook, mutt, and others over TLS (typical endpoints imap.migadu.com:993, smtp.migadu.com:465, pop.migadu.com:995). ManageSieve filtering, aliases, pattern rewrites, identities, footers, auto-responders, and optional catch-alls cover classic postmaster needs. Data remains portable via standard protocols.
Multi-domain admin, multi-admin, and beta API
Agencies can hold many client domains under one roof, open multiple administrators (domain-scoped on higher plans), set per-domain/mailbox limits, and monitor traffic. A REST API (documented as early beta) manages domains, mailboxes, identities, forwardings, aliases, and rewrites for automation. Domain deletion stays UI-only as a safety measure.
DNS helpers and postmaster-style support
Optional built-in DNS ships mail records preconfigured; Migadu also offers DNS setup help at no extra fee and publishes diagnostics/activation flows. Support is ticket-based from people who operate the mail stack—not outsourced chat—with plan-dependent urgency outside office hours.
No ads, no product analytics cookies
Vendor policy states no advertising, no tracking of mailbox content for ads, and no website analytics cookies beyond session needs. Processing is framed for service delivery, abuse prevention, and legal obligations. Payment data still goes to Stripe and PayPal under separate processor terms.

RAIDBOXES Emails

Mail Hosting 2.0 on RAIDBOXES infrastructure
IMAP/SMTP mailboxes on dedicated hostnames (mail-rb.securemail.pro / smtp-rb.securemail.pro) after the move off the prior mailbox.org cooperation. Vendor claims German data-centre locations and triple-redundant mail servers. Best for teams that want domain mail under the same German WordPress host rather than a separate privacy-mail brand.
Multi-mailbox plans with aliases, forwards, and catch-all
Tiered plans allocate a fixed number of mailboxes and a shared storage pool, plus per-mailbox alias and forwarding quotas, autoresponders, and catch-all (requires a dedicated catch-all mailbox). One connected domain per plan—confirm multi-domain needs before shortlisting.
Spam/virus filters, TLS, optional PGP, ad-free inboxes
All plans include spam and virus filtering, SSL/TLS for transfer, a blacklist checker, webmail, and ad-free inboxes. PGP is optional rather than default end-to-end encryption for every message—teams that need mandatory E2EE workflows should evaluate Tuta or a full mailbox.org stack instead.
Dashboard-adjacent domain and WordPress ops
Mailboxes are ordered from the RAIDBOXES dashboard and are intended to sit next to WordPress hosting and domain management. New RAIDBOXES mailboxes require the domain to be hosted with RAIDBOXES; legacy mailbox.org-linked domains follow a separate migration path documented in the help centre.
Online B2B DPA and German operator
Raidboxes GmbH (Münster) offers an online data processing agreement (AV contract) with technical-organisational measures. Useful for agencies that already sign a DPA for WordPress hosting and want the same counterparty for domain email—still review TOMs and subprocessor scope for mailbox vs platform tooling.

Assurance & compliance: Migadu vs RAIDBOXES Emails
Assurance & compliance	Migadu	RAIDBOXES Emails
Independent security / no-logs audit	Not found Vendor claims no ad scanning/sharing of mail content; no public third-party audit PDF located.	Not found No public third-party security or no-logs audit report found for RAIDBOXES Emails on primary pages.
ISO 27001	Not found Data centers described as internationally certified; no Migadu-organization ISO 27001 certificate found on primary pages.	Not found No company-wide ISO 27001 certificate for Raidboxes GmbH found on product/security pages; AWS region ISO mentions are not RAIDBOXES certs.
SOC 2 / SOC 3	Not found	Not found No public SOC 2/3 report located for RAIDBOXES Emails.
GDPR / EU data protection	Vendor claimed Privacy policy asserts GDPR and Swiss DPA compliance; mail hosted in France per vendor.	Vendor claimed German controller (Raidboxes GmbH); product claims DE server locations and GDPR-aligned deletion; online DPA available. Confirm active mail stack vs privacy-policy mailbox.org listing.
US CLOUD Act exposure (indicative)	Partial Swiss entity, no known US parent, mail in France; Stripe and PayPal process payments with US transfers. Infrastructure subprocessors not fully named. EuropeanStack assessment—not a vendor certification. Not legal advice.	Partial EU/German entity, no known US parent (team.blue BE group). Medium residual exposure via US-group platform subprocessors (AWS/DigitalOcean for online offer hosting; Intercom, Chargebee, Google tooling, Mailgun, etc.). Mail content path claimed DE-only. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Privacy page states it serves as privacy policy and DPA; confirm suitability with counsel.	Vendor claimed Online AV/DPA flow at raidboxes.io/en/dpa/ and DocuSign TOM path documented in help centre.
EU AI Act	Not applicable Email hosting product; not an AI system offering.	Not applicable Domain email hosting product, not an AI system offering.
B Corp certification	Not listed	Vendor claimed Raidboxes GmbH listed as Certified B Corporation on B Lab directory; impact certification, not an information-security audit.

Considerations & known limitations: Migadu vs RAIDBOXES Emails
Considerations & known limitations	Migadu	RAIDBOXES Emails
US payment subprocessors (Stripe, PayPal)	Medium Billing-related personal data can transfer to US processors under Migadu’s privacy policy. Mail content path is France/EU per vendor, but payment data is a separate CLOUD Act / transfer surface.	Not listed
Incomplete public infrastructure subprocessor list	Medium Primary pages name France hosting and certified DCs without a full vendor inventory for compute, storage, and backups. Procurement should request the current list and regions in writing.	Not listed
No E2EE product default; no classic mailbox 2FA	Medium Standards mail with TLS; vendor recommends user-side OpenPGP for strong content secrecy. IMAP 2FA is not offered; app-specific-style identities are not second-factor MFA.	Not listed
Daily quotas and human-mail policy	Medium Account-wide daily in/out caps and anti-bulk rules make Migadu unsuitable as a transactional/marketing ESP. Over-limit mail can be deferred or rejected after tolerance.	Not listed
No default SLA on standard plans	Low Vendor states standard offers lack SLAs; email is treated as asynchronous and occasionally disrupted. Enterprise SLA only via separate commercial discussion.	Not listed
No public independent security audit	Medium Privacy and no-ad-scanning claims are first-party. No independent audit report found for no-logs or security controls.	Not listed
Domain must be hosted at RAIDBOXES	Not listed	Medium New mailboxes require the domain on RAIDBOXES. That is convenient for WP customers and a lock-in factor if you only wanted independent mail.
One connected domain per plan	Not listed	Medium Multi-domain operators need multiple plans or another provider; not a Migadu-style multi-domain account model.
PGP optional, not default E2EE	Not listed	Medium Threat models that assume provider-side unreadability by default are a better fit for Tuta or similar products.
US-group platform subprocessors	Not listed	Medium Privacy policy discloses AWS EMEA, DigitalOcean, Intercom, Chargebee, Google tools, Mailgun, and others for website/support/billing/marketing—even while email marketing claims German mail servers. Scope diligence to mailbox vs platform data paths.
Privacy policy may lag Mail Hosting 2.0	Not listed	Low §Email box still lists mailbox.org/Heinlein while marketing claims first-party hosting—confirm live stack and subprocessor annex for your contract.
No public ISO/SOC/mail audit	Not listed	Medium B Corp is not a security certification. Enterprise security questionnaires may need NDA materials or alternative providers with published audits.

Fit

Migadu

Best fit when

Agencies and freelancers hosting many client domains under one account with multi-admin or API provisioning
Organizations that want custom-domain mail with standard clients and portable IMAP—not a proprietary suite lock-in
Teams tired of per-seat pricing for large address spaces with modest real traffic
Buyers who value a small bootstrapped Swiss operator that publishes blunt product limits
Setups that need aliases, rewrites, identities, SIEVE, and postmaster-style controls more than collab apps

Poor fit when

Primary need is end-to-end encrypted mail by default (Proton Mail, Tuta, or user-side OpenPGP workflows)
High-volume transactional, marketing, or bulk outbound mail
Requirement for default contractual SLA, phone support, or multi-language admin UI
Mandatory mailbox 2FA on every IMAP login
Want a free long-term plan or Migadu-branded @provider addresses without owning a domain

Consider instead when

When: You need provider-managed end-to-end encryption as the default product promise
Consider: Proton Mail or Tuta
Migadu is standards hosting with TLS; content secrecy against the operator is not the design center.
When: You want another European professional host with a different admin/encryption/residency package
Consider: mailbox.org, Mailfence, Posteo, or Runbox
Compare DPA detail, audit packaging, and whether multi-domain usage pricing still wins for your address sprawl.
When: You need full workspace suite (docs, meet, identity) rather than email hosting alone
Consider: Google Workspace, Microsoft 365, or Infomaniak-style European suites
Migadu deliberately stays postmaster-focused.
When: You need bulk or high-rate application email
Consider: A dedicated ESP (not Migadu); Amazon SES is the common Big Tech baseline—pair with EU ESPs if residency matters
Migadu rate-limits and bans intentional bulk use.

RAIDBOXES Emails

Best fit when

WordPress agencies and freelancers standardising on RAIDBOXES for sites, domains, and mail admin
SMEs wanting professional multi-mailbox domain email with standard IMAP clients—not a full Google/Microsoft suite
Teams that need catch-all, aliases, forwards, autoresponders, and ad-free inboxes on one domain
Buyers who require a German legal counterparty and an online B2B DPA for processor agreements
Operators migrating off legacy mailbox.org-linked RAIDBOXES mail toward first-party Mail Hosting 2.0

Poor fit when

Multi-domain mail estates that need many domains under one contract (one connected domain per plan)
Policies requiring default end-to-end encryption for all mail (PGP is optional only)
Buyers who refuse any coupling between mailbox service and domain/WordPress hosting
Teams seeking a full office suite (Drive, collaborative docs, built-in video) rather than domain mail
Procurement that demands public ISO 27001/SOC 2 or independent no-logs audit reports for the mail product

Consider instead when

When: You need multi-domain, usage-based professional mail without WordPress host lock-in
Consider: Migadu
Swiss-operated, standards-based hosting priced by quotas rather than per-domain WordPress adjacency
When: You need default E2EE and a privacy-first client model
Consider: Tuta
Different threat model; less IMAP flexibility than RAIDBOXES
When: You want privacy-oriented German personal/business mail without hosting coupling
Consider: Posteo or mailbox (formerly mailbox.org)
mailbox is also the former RAIDBOXES mail partner and a deeper digital-workplace option
When: You need Google/Microsoft suite collaboration, not just domain mailboxes
Consider: Google Workspace or Microsoft 365
US Big Tech residency and CLOUD Act profile differ sharply—use only if suite features dominate

Open questions for due diligence

Migadu

What are the current named mail hosting, backup, and ancillary subprocessors and their countries?
Can Migadu provide ISO/SOC evidence for the organization or only DC-level certifications?
Is an independent security or penetration-test summary available under NDA?
Does the privacy-page DPA meet your controller’s mandatory clauses without a separate signed agreement?
What encryption-at-rest and key-management practices apply today versus the older public pro/con narrative?

RAIDBOXES Emails

For a new Mail Hosting 2.0 mailbox, is mailbox.org/Heinlein still a subprocessor for mailbox content, or only a legacy path?
Which German data-centre operators and exact regions host mail storage and backups (primary + DR)?
Does the standard DPA/TOM annex explicitly cover email hosting subprocessors separately from WordPress hosting?
What are published RPO/RTO and restore procedures for mailbox backups?
Are there any upcoming multi-domain plan options or reseller mail SKUs?