Migadu vs Swissnode

Compare Migadu and Swissnode on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail, Google Workspace, Microsoft 365

Migadu

Switzerland· Email Services

Needs review

Shortlist Migadu when you need Swiss-operated, standards IMAP/SMTP hosting with unlimited addresses across many domains under flat account quotas—especially agencies and multi-domain SMEs. Skip when you need provider E2EE defaults, contractual SLA on the default offer, mailbox 2FA, or bulk/transactional sending; consider Proton Mail/Tuta for E2EE, or mailbox.org/Mailfence/Posteo/Runbox for other European professional-mail tradeoffs.

Swiss operatorUsage-priced multi-domainSMTP/IMAP/POP3Mail hosted in FranceMulti-admin + APINo ads / no tracking

View listing Visit Website

Swissnode

Switzerland· Email Services

Needs review

Shortlist Swissnode for lean European cPanel domain email plus shared web or KVM VPS when Spain/EU residency is acceptable and you do not need enterprise compliance packs. Skip when you require live Swiss territorial hosting, E2EE mail, or published DPA/subprocessor inventories—consider Hostpoint, Infomaniak, or Proton Mail instead.

cPanel domain emailKVM VPSSpain data center (vendor)Optional Cloudflare CDNSMB hosting packages

View listing Visit Website

Highlighted rows differ between the two products.

Migadu vs Swissnode: Snapshot
Feature	Migadu	Swissnode
Country of origin	Switzerland	Switzerland
Category	Email Services	Email Services
Open source	No	No
Self-hosted	No	No
Headquarters	Switzerland	Switzerland
Legal entity	Migadu-Mail GmbH	Swissnode (legal form/registry name not clearly published on marketing site)
Governing law	Canton of Appenzell Ausserrhoden, Swiss Confederation (terms)	Not clearly stated on marketing pages; confirm in contract (CH contact vs ES ops)
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Medium
Hosting / residency	Mail servers stated in France (EU). Payment subprocessors Stripe and PayPal (US) for billing data. Full mail infrastructure/backup subprocessor list not published by name on primary pages.	Vendor states primary hosting moved to a Spain data center after Swiss DC closure; homepage cites Spanish privacy laws. Site IP geolocates to Spain (Ipcore Datacenters). Optional Cloudflare CDN on web plans (US-group). Off-site backup provider not named. No public subprocessor inventory.
Summary	Swiss-operated, standards-based email hosting for custom domains: unlimited addresses and multi-domain accounts priced by usage quotas, not per mailbox.	European cPanel email, shared web hosting, and KVM VPS under the Swissnode brand—vendor-stated Spain data center after Swiss DC closure, with optional Cloudflare CDN on web plans.
Tags	privacy saas api email-hosting standards-based multi-domain	hosting email vps cpanel spain-datacenter cloudflare smb reseller

At a glance: Migadu vs Swissnode
At a glance	Migadu	Swissnode
HQ / entity	Migadu-Mail GmbH, Switzerland	Not listed
Founded	2014 (vendor About)	Not listed
Mail hosting	Data centers in France (vendor Pro/Cons)	Not listed
Commercial model	Flat per-account plans by daily message quotas + soft storage	Package tiers (monthly/yearly); optional antispam add-on
Open source product?	No — built on open-source stack; service is proprietary SaaS	Not listed
Self-host	No	Not listed
Ownership	Bootstrapped; no outside capital (vendor claim)	Not listed
Contact address	Not listed	Binzallee 6, 8055 Zurich, CH (public contact page)
Footer / ops address	Not listed	Mutilva Baja, Navarra, Spain
Primary hosting (vendor)	Not listed	Spain data center after Swiss DC closure
Core products	Not listed	Domain email, cPanel web hosting, KVM VPS
Control panels	Not listed	cPanel (shared); Virtualizor (VPS)
Open source	Not listed	No
Self-hosted product	Not listed	No (provider-hosted; VPS gives root on rented VM)

Key capabilities: Migadu vs Swissnode
Key capabilities	Migadu	Swissnode
Swiss operator	Yes	Not listed
Usage-priced multi-domain	Yes	Not listed
SMTP/IMAP/POP3	Yes	Not listed
Mail hosted in France	Yes	Not listed
Multi-admin + API	Yes	Not listed
No ads / no tracking	Yes	Not listed
cPanel domain email	Not listed	Yes
KVM VPS	Not listed	Yes
Spain data center (vendor)	Not listed	Yes
Optional Cloudflare CDN	Not listed	Yes
SMB hosting packages	Not listed	Yes

Migadu

Usage-metered accounts with unlimited addresses
Plans are flat per Migadu account. Within daily in/out quotas and soft storage guidance, create large numbers of mailboxes and host many domains without per-address fees—useful for agencies and multi-project teams. Soft storage does not hard-bounce mail; sustained over-quota use can force upgrades or limits.
Standards SMTP, IMAP4, POP3, and webmail
No proprietary client protocol. Connect Thunderbird, Apple Mail, Outlook, mutt, and others over TLS (typical endpoints imap.migadu.com:993, smtp.migadu.com:465, pop.migadu.com:995). ManageSieve filtering, aliases, pattern rewrites, identities, footers, auto-responders, and optional catch-alls cover classic postmaster needs. Data remains portable via standard protocols.
Multi-domain admin, multi-admin, and beta API
Agencies can hold many client domains under one roof, open multiple administrators (domain-scoped on higher plans), set per-domain/mailbox limits, and monitor traffic. A REST API (documented as early beta) manages domains, mailboxes, identities, forwardings, aliases, and rewrites for automation. Domain deletion stays UI-only as a safety measure.
DNS helpers and postmaster-style support
Optional built-in DNS ships mail records preconfigured; Migadu also offers DNS setup help at no extra fee and publishes diagnostics/activation flows. Support is ticket-based from people who operate the mail stack—not outsourced chat—with plan-dependent urgency outside office hours.
No ads, no product analytics cookies
Vendor policy states no advertising, no tracking of mailbox content for ads, and no website analytics cookies beyond session needs. Processing is framed for service delivery, abuse prevention, and legal obligations. Payment data still goes to Stripe and PayPal under separate processor terms.

Swissnode

Domain email on cPanel (IMAP/POP/SMTP)
Business mailboxes on your domain with secure webmail, SpamAssassin-style spam control, virus filtering, DKIM, calendars/contacts, autoresponders, forwarders, filters, and mailing lists on mid-tier plans—protocol-compatible with Outlook, Apple Mail, and mobile clients.
cPanel web hosting with Softaculous and LiteSpeed PHP
Shared and reseller web plans with datacenter SSDs, free panel SSL, multi-PHP, SSH above entry tiers, and Softaculous one-click apps—aimed at brochure sites, WordPress, and small PHP apps rather than container platforms.
KVM VPS with RAID-10 enterprise SSDs
Root-level Linux VPS via KVM, enterprise SSDs, RAID-10 arrays, fixed per-VPS network allotments, and Virtualizor-style management for teams that outgrow shared hosting but still want package SKUs.
Optional Cloudflare CDN from the control panel
Web plans advertise easy Cloudflare integration to cache static assets near visitors—useful for performance, with the tradeoff that enabled CDN traffic can traverse a US-group network path.
Backup cadence for VPS (vendor-stated)
Marketing states daily on-site and weekly off-site VPS backups with rebuilds measured in minutes to an hour after failure—restore SLAs and off-site provider identity should be confirmed in the contract.

Assurance & compliance: Migadu vs Swissnode
Assurance & compliance	Migadu	Swissnode
Independent security / no-logs audit	Not found Vendor claims no ad scanning/sharing of mail content; no public third-party audit PDF located.	Not found No public independent audit report found on swissnode.ch.
ISO 27001	Not found Data centers described as internationally certified; no Migadu-organization ISO 27001 certificate found on primary pages.	Not found No ISO 27001 claim located on official product/security pages.
SOC 2 / SOC 3	Not found	Not found No SOC 2/3 claim found.
GDPR / EU data protection	Vendor claimed Privacy policy asserts GDPR and Swiss DPA compliance; mail hosted in France per vendor.	Partial Spain/EU hosting supports EU data-protection analysis, and homepage references Spanish privacy laws; usable privacy policy/DPA text not published on site. Customer remains controller for lawful basis.
US CLOUD Act exposure (indicative)	Partial Swiss entity, no known US parent, mail in France; Stripe and PayPal process payments with US transfers. Infrastructure subprocessors not fully named. EuropeanStack assessment—not a vendor certification. Not legal advice.	Partial No known US parent; primary host Spain/EU. Optional Cloudflare CDN is a US-group subprocessor for web static delivery; off-site backups and other SaaS paths not published. Not a clean low-exposure bill; not legal advice.
Data processing agreement (B2B)	Vendor claimed Privacy page states it serves as privacy policy and DPA; confirm suitability with counsel.	Not found No public DPA download or B2B processing terms found; request in writing.
EU AI Act	Not applicable Email hosting product; not an AI system offering.	Not applicable Commodity hosting/email/VPS, not an AI product.
Swiss territorial hosting	Not listed	Partial Vendor discloses Swiss DC closed; operations from Spain DC. Contact still Zurich. Do not treat as CH-only residency.

Considerations & known limitations: Migadu vs Swissnode
Considerations & known limitations	Migadu	Swissnode
US payment subprocessors (Stripe, PayPal)	Medium Billing-related personal data can transfer to US processors under Migadu’s privacy policy. Mail content path is France/EU per vendor, but payment data is a separate CLOUD Act / transfer surface.	Not listed
Incomplete public infrastructure subprocessor list	Medium Primary pages name France hosting and certified DCs without a full vendor inventory for compute, storage, and backups. Procurement should request the current list and regions in writing.	Not listed
No E2EE product default; no classic mailbox 2FA	Medium Standards mail with TLS; vendor recommends user-side OpenPGP for strong content secrecy. IMAP 2FA is not offered; app-specific-style identities are not second-factor MFA.	Not listed
Daily quotas and human-mail policy	Medium Account-wide daily in/out caps and anti-bulk rules make Migadu unsuitable as a transactional/marketing ESP. Over-limit mail can be deferred or rejected after tolerance.	Not listed
No default SLA on standard plans	Low Vendor states standard offers lack SLAs; email is treated as asynchronous and occasionally disrupted. Enterprise SLA only via separate commercial discussion.	Not listed
No public independent security audit	Medium Privacy and no-ad-scanning claims are first-party. No independent audit report found for no-logs or security controls.	Not listed
Swiss brand vs Spain hosting	Not listed	High Product pages state the Swiss data center closed and services run in Spain; homepage cites Spanish privacy laws. Buyers assuming Zurich colocation from the brand or older materials will mis-classify risk and contractual residency.
Empty privacy pages / no public DPA or certs	Not listed	High Privacy and cookie URLs do not present substantive policy text; ISO/SOC and DPA artifacts were not found. Regulated or enterprise buyers face a heavy offline diligence burden.
Optional Cloudflare CDN (US-group)	Not listed	Medium Web hosting markets Cloudflare integration from cPanel. Enabling CDN can place static content on a US-group network path even when origin is Spain—document this in transfer assessments.
Off-site backup provider not named	Not listed	Medium Daily on-site and weekly off-site backups are claimed for VPS, but the off-site location/provider is not published—ask before trusting disaster-recovery or residency narratives.
Aging marketing surface	Not listed	Low Public site still shows 2013–2018 copyright and sparse modern trust pages; may signal limited investment in public assurance UX even if infrastructure remains operational.

Fit

Migadu

Best fit when

Agencies and freelancers hosting many client domains under one account with multi-admin or API provisioning
Organizations that want custom-domain mail with standard clients and portable IMAP—not a proprietary suite lock-in
Teams tired of per-seat pricing for large address spaces with modest real traffic
Buyers who value a small bootstrapped Swiss operator that publishes blunt product limits
Setups that need aliases, rewrites, identities, SIEVE, and postmaster-style controls more than collab apps

Poor fit when

Primary need is end-to-end encrypted mail by default (Proton Mail, Tuta, or user-side OpenPGP workflows)
High-volume transactional, marketing, or bulk outbound mail
Requirement for default contractual SLA, phone support, or multi-language admin UI
Mandatory mailbox 2FA on every IMAP login
Want a free long-term plan or Migadu-branded @provider addresses without owning a domain

Consider instead when

When: You need provider-managed end-to-end encryption as the default product promise
Consider: Proton Mail or Tuta
Migadu is standards hosting with TLS; content secrecy against the operator is not the design center.
When: You want another European professional host with a different admin/encryption/residency package
Consider: mailbox.org, Mailfence, Posteo, or Runbox
Compare DPA detail, audit packaging, and whether multi-domain usage pricing still wins for your address sprawl.
When: You need full workspace suite (docs, meet, identity) rather than email hosting alone
Consider: Google Workspace, Microsoft 365, or Infomaniak-style European suites
Migadu deliberately stays postmaster-focused.
When: You need bulk or high-rate application email
Consider: A dedicated ESP (not Migadu); Amazon SES is the common Big Tech baseline—pair with EU ESPs if residency matters
Migadu rate-limits and bans intentional bulk use.

Swissnode

Best fit when

Freelancers and micro-SMBs wanting domain IMAP/POP mail with spam filtering and webmail on cPanel
Agencies/resellers needing simple shared web packages (Softaculous, multi-PHP, free panel SSL) plus optional VPS upgrade path
Teams that prefer standard mail protocols over migrating into Microsoft 365 or Google Workspace
Buyers comfortable with Spain/EU hosting under a .ch brand and Swiss contact details
Workloads where package-tier hosting and KVM root access matter more than published ISO/SOC packs

Poor fit when

Organizations that hard-require Swiss (CH) server residency or nFADP narratives assuming Zurich colocation
Procurement needing public DPA, full subprocessor lists, ISO 27001, or SOC 2 on the vendor site
Teams needing end-to-end encrypted mail or zero-access webmail (choose Proton-class products)
Enterprises expecting Microsoft 365-class collaboration, compliance archives, and admin tooling
Buyers who shortlisted the brand solely for “Swiss data center” marketing that product pages no longer support

Consider instead when

When: You need Swiss-resident email/office with a broader product catalog and clearer CH hosting claims
Consider: Hostpoint E-Mail & Cloud Office or Infomaniak kMail
Fuller Swiss platforms; better when territorial Switzerland is non-negotiable.
When: You need end-to-end encrypted mail and open-source clients rather than cPanel hosting
Consider: Proton Mail
Different product class: E2EE vs classic hosted IMAP.
When: You need full collaboration suites, admin compliance tooling, and ecosystem apps
Consider: Microsoft 365 or Google Workspace (US-group control planes)
Richer features; different jurisdiction/CLOUD Act profile.
When: You want a larger EU hosting group with broader cloud SKUs
Consider: IONOS or OVHcloud
Scale and catalog depth over niche Swissnode packaging.

Open questions for due diligence

Migadu

What are the current named mail hosting, backup, and ancillary subprocessors and their countries?
Can Migadu provide ISO/SOC evidence for the organization or only DC-level certifications?
Is an independent security or penetration-test summary available under NDA?
Does the privacy-page DPA meet your controller’s mandatory clauses without a separate signed agreement?
What encryption-at-rest and key-management practices apply today versus the older public pro/con narrative?

Swissnode

What is the exact legal entity (registry name, UID/CHE or Spanish NIF) and governing law on the customer contract?
Will Swissnode sign a B2B DPA and publish a current subprocessor list (spam filter, backups, payment, support tools)?
Exact Spain facility (Ipcore or other) and whether any secondary regions exist for mail, web, and VPS separately?
Where are weekly off-site backups stored, and under which provider’s control?
Is Cloudflare mandatory, optional, or default for web plans, and can customers disable it for pure Spain origin delivery?
What uptime SLA, restore RPO/RTO, and support hours are contractual vs marketing (99.5% backbone claim on homepage)?