Swissnode vs web.de

Compare Swissnode and web.de on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Gmail

Logo: Swissnode

Swissnode

Switzerland· Email Services

Needs review

Shortlist Swissnode for lean European cPanel domain email plus shared web or KVM VPS when Spain/EU residency is acceptable and you do not need enterprise compliance packs. Skip when you require live Swiss territorial hosting, E2EE mail, or published DPA/subprocessor inventories—consider Hostpoint, Infomaniak, or Proton Mail instead.

cPanel domain emailKVM VPSSpain data center (vendor)Optional Cloudflare CDNSMB hosting packages
Logo: web.de

web.de

Germany· Email Services

Needs review

Shortlist web.de when you need mass-market German freemail with DE-sited mail/cloud, E-Mail made in Germany TLS alliance markers, optional PGP/2FA, and a familiar DACH portal. Skip when you need default E2EE, no advertising data path, self-host, or enterprise admin—consider Posteo, mailbox.org, Tuta, or Proton Mail instead.

DE-operated freemailE-Mail made in GermanyGermany data centers (claimed)Optional PGPFreeMail + paid upgradesSaaS only
Swissnode vs web.de: Snapshot
FeatureLogo: SwissnodeSwissnodeLogo: web.deweb.de
Country of originSwitzerlandGermany
CategoryEmail ServicesEmail Services
Open sourceNoNo
Self-hostedNoNo
HeadquartersSwitzerlandGermany
Legal entitySwissnode (legal form/registry name not clearly published on marketing site)1&1 Mail & Media GmbH (United Internet AG group)
Governing lawNot clearly stated on marketing pages; confirm in contract (CH contact vs ES ops)Germany / EU GDPR
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumLow
Hosting / residencyVendor states primary hosting moved to a Spain data center after Swiss DC closure; homepage cites Spanish privacy laws. Site IP geolocates to Spain (Ipcore Datacenters). Optional Cloudflare CDN on web plans (US-group). Off-site backup provider not named. No public subprocessor inventory.Vendor claims email and Online-Speicher stored exclusively in Germany in company-owned data centers (E-Mail/Cloud made in Germany). FreeMail monetized via advertising and IAB TCF consent partners; privacy notice allows EEA third-country transfers with Chapter V safeguards. Portal/optional features use additional processors (e.g. search partners, embeds, homepage builder DUDA Inc., ID vendors). No exhaustive public mail-stack subprocessor list found.
Summary

European cPanel email, shared web hosting, and KVM VPS under the Swissnode brand—vendor-stated Spain data center after Swiss DC closure, with optional Cloudflare CDN on web plans.

German freemail and portal from United Internet’s 1&1 Mail & Media GmbH: FreeMail with DE-sited mail and cloud, E-Mail made in Germany TLS alliance, optional PGP—consumer SaaS, not default-E2EE privacy mail.

Tags
At a glance: Swissnode vs web.de
At a glanceLogo: SwissnodeSwissnodeLogo: web.deweb.de
Contact addressBinzallee 6, 8055 Zurich, CH (public contact page)Not listed
Footer / ops addressMutilva Baja, Navarra, SpainNot listed
Primary hosting (vendor)Spain data center after Swiss DC closureNot listed
Core productsDomain email, cPanel web hosting, KVM VPSNot listed
Control panelscPanel (shared); Virtualizor (VPS)Not listed
Open sourceNoNo
Self-hosted productNo (provider-hosted; VPS gives root on rented VM)Not listed
Commercial modelPackage tiers (monthly/yearly); optional antispam add-onAd-supported FreeMail; paid mailbox/cloud upgrades; Consent or Pay
HQ / operatorNot listed1&1 Mail & Media GmbH, Montabaur/Karlsruhe, Germany
Parent groupNot listedUnited Internet AG (Germany)
Product typeNot listedConsumer freemail + portal + cloud (SaaS)
Hosting (vendor claim)Not listedCompany-owned data centers in Germany
Self-hostNot listedNo
Key capabilities: Swissnode vs web.de
Key capabilitiesLogo: SwissnodeSwissnodeLogo: web.deweb.de
cPanel domain emailYesNot listed
KVM VPSYesNot listed
Spain data center (vendor)YesNot listed
Optional Cloudflare CDNYesNot listed
SMB hosting packagesYesNot listed
DE-operated freemailNot listedYes
E-Mail made in GermanyNot listedYes
Germany data centers (claimed)Not listedYes
Optional PGPNot listedYes
FreeMail + paid upgradesNot listedYes
SaaS onlyNot listedYes

Swissnode

  • Domain email on cPanel (IMAP/POP/SMTP)

    Business mailboxes on your domain with secure webmail, SpamAssassin-style spam control, virus filtering, DKIM, calendars/contacts, autoresponders, forwarders, filters, and mailing lists on mid-tier plans—protocol-compatible with Outlook, Apple Mail, and mobile clients.

  • cPanel web hosting with Softaculous and LiteSpeed PHP

    Shared and reseller web plans with datacenter SSDs, free panel SSL, multi-PHP, SSH above entry tiers, and Softaculous one-click apps—aimed at brochure sites, WordPress, and small PHP apps rather than container platforms.

  • KVM VPS with RAID-10 enterprise SSDs

    Root-level Linux VPS via KVM, enterprise SSDs, RAID-10 arrays, fixed per-VPS network allotments, and Virtualizor-style management for teams that outgrow shared hosting but still want package SKUs.

  • Optional Cloudflare CDN from the control panel

    Web plans advertise easy Cloudflare integration to cache static assets near visitors—useful for performance, with the tradeoff that enabled CDN traffic can traverse a US-group network path.

  • Backup cadence for VPS (vendor-stated)

    Marketing states daily on-site and weekly off-site VPS backups with rebuilds measured in minutes to an hour after failure—restore SLAs and off-site provider identity should be confirmed in the contract.

web.de

  • E-Mail made in Germany alliance transport

    Founding member of the German provider alliance (WEB.DE, GMX, 1&1, STRATO, T-Online, freenet). TLS on paths inside the alliance, mail stored in Germany, and green checkmarks on alliance addresses in the compose UI. Does not encrypt content to non-alliance or non-PGP recipients end-to-end by default.

  • FreeMail + paid upgrades with intelligent inbox

    Ad-supported FreeMail with integrated calendar, contacts, and Online-Speicher. Intelligent inbox categorizes newsletters, orders, social, and contracts/subscriptions without duplicating messages; optional package tracking via DHL, DPD, and GLS when consented. Paid tiers expand quotas and reduce ad/tracking friction under Consent or Pay.

  • Optional PGP and free 2FA

    Optional PGP end-to-end encryption for sensitive mail (both parties need keys/compatible clients). Optional free two-factor authentication for account login. Baseline mailbox protection relies on account credentials, spam/virus filters, and TLS—not default E2EE for every message.

  • Cloud made in Germany Online-Speicher

    Mailbox-integrated cloud with browser, app, and desktop access; link sharing and Online Office for documents. Vendor claims exclusive German data-center storage and TLS in transit under Cloud made in Germany. Free tier includes a starter cloud quota; larger capacities are paid add-ons. Not a full Google Drive/OneDrive collab suite.

  • German consumer portal on the same identity

    News, services, WEB.Cent cashback, and optional Deutsche Post letter preview sit beside mail. Useful for personal DACH users; increases advertising and partner surface versus a pure mailbox product. Portal embeds and partners are consent-gated where required.

Assurance & compliance: Swissnode vs web.de
Assurance & complianceLogo: SwissnodeSwissnodeLogo: web.deweb.de
Independent security / no-logs audit
Not found

No public independent audit report found on swissnode.ch.

Not found

No public independent no-logs or full security audit package found for FreeMail; alliance pages claim oversight by data-protection function and independent Prüfstellen at a high level only.

ISO 27001
Not found

No ISO 27001 claim located on official product/security pages.

Not found

No public ISO 27001 certificate page located for the web.de freemail product during research.

SOC 2 / SOC 3
Not found

No SOC 2/3 claim found.

Not found

No public SOC 2/3 report found for web.de FreeMail.

GDPR / EU data protection
Partial

Spain/EU hosting supports EU data-protection analysis, and homepage references Spanish privacy laws; usable privacy policy/DPA text not published on site. Customer remains controller for lawful basis.

Vendor claimed

German controller (1&1 Mail & Media GmbH); detailed GDPR privacy notice; DE storage claims for mail/cloud. Not a legal certification.

US CLOUD Act exposure (indicative)
Partial

No known US parent; primary host Spain/EU. Optional Cloudflare CDN is a US-group subprocessor for web static delivery; off-site backups and other SaaS paths not published. Not a clean low-exposure bill; not legal advice.

Partial

EU/German entity and parent; no known US parent; mail/cloud claimed on company-owned DE data centers. Partial because privacy notice allows third-country transfers with safeguards, FreeMail uses ad/TCF partners, and no exhaustive public subprocessor inventory. Not legal advice.

Data processing agreement (B2B)
Not found

No public DPA download or B2B processing terms found; request in writing.

Not found

Consumer freemail focus; no clear self-serve public B2B DPA for FreeMail found. Request under contract if treating as processor for an organization.

EU AI Act
Not applicable

Commodity hosting/email/VPS, not an AI product.

Not applicable

Consumer mail/portal with limited in-product assistants; not an AI-centric product for this checklist.

Swiss territorial hosting
Partial

Vendor discloses Swiss DC closed; operations from Spain DC. Contact still Zurich. Do not treat as CH-only residency.

Not listed
Considerations & known limitations: Swissnode vs web.de
Considerations & known limitationsLogo: SwissnodeSwissnodeLogo: web.deweb.de
Swiss brand vs Spain hosting
High

Product pages state the Swiss data center closed and services run in Spain; homepage cites Spanish privacy laws. Buyers assuming Zurich colocation from the brand or older materials will mis-classify risk and contractual residency.

Not listed
Empty privacy pages / no public DPA or certs
High

Privacy and cookie URLs do not present substantive policy text; ISO/SOC and DPA artifacts were not found. Regulated or enterprise buyers face a heavy offline diligence burden.

Not listed
Optional Cloudflare CDN (US-group)
Medium

Web hosting markets Cloudflare integration from cPanel. Enabling CDN can place static content on a US-group network path even when origin is Spain—document this in transfer assessments.

Not listed
Off-site backup provider not named
Medium

Daily on-site and weekly off-site backups are claimed for VPS, but the off-site location/provider is not published—ask before trusting disaster-recovery or residency narratives.

Not listed
Aging marketing surface
Low

Public site still shows 2013–2018 copyright and sparse modern trust pages; may signal limited investment in public assurance UX even if infrastructure remains operational.

Not listed
Ad-financed FreeMail and consent surfaceNot listed
Medium

FreeMail uses advertising and Consent or Pay. With consent, content may feed interest profiles; FreeMail users cannot drop WEB.DE informiert like paid tiers. Unsuitable where ad-tech processors are banned.

No default end-to-end encryptionNot listed
Medium

TLS and alliance transport protection are not content E2EE. Optional PGP only covers willing counterparties. Operator can process plaintext for spam, intelligent inbox, and consented ad analysis.

Limited public audit/cert artifactsNot listed
Medium

ISO 27001, SOC 2, and independent no-logs audits not found on public product pages. Trust rests on German entity, DE hosting claims, and first-party security copy.

Third-country transfers and portal partnersNot listed
Low

Privacy notice contemplates non-EEA recipients under Chapter V safeguards. Portal/search/ID/ad features introduce extra processors beyond the mailbox DC story—review consent layer and purpose before sensitive use.

FreeMail inactivity content deletionNot listed
Low

Privacy notice: FreeMail email content may be deleted after more than 180 days without login. Not a durable archive without activity or export.

Fit

Swissnode

Best fit when

  • Freelancers and micro-SMBs wanting domain IMAP/POP mail with spam filtering and webmail on cPanel
  • Agencies/resellers needing simple shared web packages (Softaculous, multi-PHP, free panel SSL) plus optional VPS upgrade path
  • Teams that prefer standard mail protocols over migrating into Microsoft 365 or Google Workspace
  • Buyers comfortable with Spain/EU hosting under a .ch brand and Swiss contact details
  • Workloads where package-tier hosting and KVM root access matter more than published ISO/SOC packs

Poor fit when

  • Organizations that hard-require Swiss (CH) server residency or nFADP narratives assuming Zurich colocation
  • Procurement needing public DPA, full subprocessor lists, ISO 27001, or SOC 2 on the vendor site
  • Teams needing end-to-end encrypted mail or zero-access webmail (choose Proton-class products)
  • Enterprises expecting Microsoft 365-class collaboration, compliance archives, and admin tooling
  • Buyers who shortlisted the brand solely for “Swiss data center” marketing that product pages no longer support

Consider instead when

  • When: You need Swiss-resident email/office with a broader product catalog and clearer CH hosting claims

    Consider: Hostpoint E-Mail & Cloud Office or Infomaniak kMail

    Fuller Swiss platforms; better when territorial Switzerland is non-negotiable.

  • When: You need end-to-end encrypted mail and open-source clients rather than cPanel hosting

    Consider: Proton Mail

    Different product class: E2EE vs classic hosted IMAP.

  • When: You need full collaboration suites, admin compliance tooling, and ecosystem apps

    Consider: Microsoft 365 or Google Workspace (US-group control planes)

    Richer features; different jurisdiction/CLOUD Act profile.

  • When: You want a larger EU hosting group with broader cloud SKUs

    Consider: IONOS or OVHcloud

    Scale and catalog depth over niche Swissnode packaging.

web.de

Best fit when

  • German consumers who want a familiar .de freemail address with portal news and everyday cloud storage
  • Secondary personal or family mail where DE operator and DE storage matter more than default E2EE
  • Users who value intelligent inbox sorting, package tracking, and mobile/desktop access over privacy-maximalist design
  • Teams comparing Gmail/Outlook.com alternatives on jurisdiction while accepting consumer freemail trade-offs
  • Buyers already in the United Internet ecosystem (WEB.DE / GMX) who need a consistent DACH brand

Poor fit when

  • Organizations needing primary business mail with admin console, SSO, and signed B2B DPA as standard
  • Hard requirements for default end-to-end encryption or zero advertising/tracking surface
  • Self-hosted or open-source mail stacks you operate yourself
  • Long-term cold archives on FreeMail (inactivity deletion policy)
  • Procurement policies that forbid ad-tech partners or third-country transfer language without contract exhibits

Consider instead when

  • When: You need default E2EE and a privacy-first paid mailbox

    Consider: Tuta or Proton Mail

    web.de PGP is optional and counterpart-dependent; FreeMail is ad-financed.

  • When: You want ad-free German/EU mail with strong consumer privacy posture and paid model only

    Consider: Posteo or mailbox.org

    Less portal monetization; clearer privacy-first product framing than mass freemail.

  • When: You prefer the same United Internet Mail & Media stack under another brand

    Consider: GMX Mail

    Nearly aligned trust and capability story; brand and portal mix differ.

  • When: You need Google/Microsoft-class workspace collab and enterprise compliance packs

    Consider: Gmail (Google Workspace) or Outlook.com / Microsoft 365

    Trade DE freemail residency story for US-group platforms and deeper admin tooling.

Open questions for due diligence

Swissnode

  • What is the exact legal entity (registry name, UID/CHE or Spanish NIF) and governing law on the customer contract?
  • Will Swissnode sign a B2B DPA and publish a current subprocessor list (spam filter, backups, payment, support tools)?
  • Exact Spain facility (Ipcore or other) and whether any secondary regions exist for mail, web, and VPS separately?
  • Where are weekly off-site backups stored, and under which provider’s control?
  • Is Cloudflare mandatory, optional, or default for web plans, and can customers disable it for pure Spain origin delivery?
  • What uptime SLA, restore RPO/RTO, and support hours are contractual vs marketing (99.5% backbone claim on homepage)?

web.de

  • Will 1&1 Mail & Media sign a B2B DPA and provide a current subprocessor list for mailbox and cloud processing?
  • Are there ISO 27001, C5, or independent penetration-test summaries available under NDA for Mail & Media freemail infrastructure?
  • For your use case, is FreeMail with ads acceptable, or must you force paid TrackFree/premium paths and refuse intelligent-inbox/ad consents?
  • Confirm whether any non-DE backup, support, or analytics processors touch mailbox content beyond the public privacy notice.