Logo: eclipso Mail Europe

eclipso Mail Europe

Owner-operated German email and cloud suite with IMAP, optional OpenPGP/S/MIME, prepaid freemium, Drive/organizer, and hybrid SMS/fax/post—hosted in Germany.

eclipso Mail Europe is an owner-managed German email and cloud suite operated by founder Claus-Peter Beringer from Bayreuth, Bavaria. Founded in 2003, it combines webmail, IMAP/POP3/SMTP, a cloud drive, calendar and contacts, and optional hybrid channels such as SMS, fax, and physical post.

It exists as a privacy-first European alternative to Gmail and Outlook, rather than a pure end-to-end encrypted silo. The service is hosted in Germany and sold as prepaid freemium.

The concrete differentiator is native OpenPGP and S/MIME support in every tariff, including the free Freemail tier, with in-browser key generation or import from existing clients.

Germany-hosted (claimed)OpenPGP + S/MIMEIMAP/SMTP nativePrepaid freemiumOwner-operated DEBusiness DPA (Art. 28)

Shortlist when you want German-hosted mail with direct IMAP/SMTP, optional OpenPGP/S/MIME free on all tiers, prepaid freemium cost control, and a small business suite (drive, calendar, hybrid SMS/fax/post). Skip when you need zero-access defaults, published ISO/SOC audits, or large-enterprise identity—consider Posteo, Tuta, Proton Mail, or mailbox.org instead.

Key capabilities

OpenPGP (RFC 4880/9580) key wizard and import work in webmail and apps, free from Freemail upward; S/MIME accepts user-supplied X.509 certificates for business clients. E2EE only applies when both sides use it—plain IMAP mail is not zero-access by default. Private keys for webmail PGP are held in the account under a passphrase for multi-device use.

Direct protocol access for Thunderbird, Outlook, Apple Mail, and mobile clients without a bridge product. Calendar and contacts sync via CalDAV/CardDAV; Premium and Business add WebDAV for the cloud drive. Suits teams that refuse locked-in web-only mail.

One account covers webmail, eclipso Drive file storage with link sharing, Media Center, calendar, address book, notes, and tasks. Vendor claims exclusive Germany data centres (privacy policy names Speedloc Datacenter, Görlitz). Storage and address limits scale by prepaid tariff; WebDAV and higher quotas need paid tiers.

Freemail signs up without credit card or phone number and is ad-supported; paid Connect/Premium/Business terms are prepaid and end automatically after a reminder. Credits enable SMS, fax, and hybrid physical post through named German gateways—useful for crafts and SMEs still on those channels.

Business includes a custom mail domain option, higher alias counts, daily send limits suitable for small campaigns, and an in-product Art. 28 GDPR DPA download per vendor docs. Not a full enterprise workspace: no public SCIM/SSO pack or multi-org admin model documented.

At a glance

HQ
Bayreuth, Germany
Legal entity
Claus-Peter Beringer (owner-operated)
Founded
2003 (vendor)
Hosting
Germany; Speedloc Datacenter (Görlitz) named in privacy policy
Open source
No
Self-hosted
No (SaaS)
Commercial model
Freemail (ad-supported) + prepaid paid tiers
Encryption
Optional OpenPGP + S/MIME; TLS in transit

Best fit when

  • Individuals and freelancers who want German mail with Thunderbird/Outlook IMAP and optional OpenPGP without a bridge
  • SMEs needing a custom domain, German server claims, and an Art. 28 DPA on the Business plan
  • Buyers who prefer prepaid terms that end automatically over auto-renewing Big Tech suites
  • Users who still send SMS, fax, or hybrid physical post from the same account
  • Teams migrating from Gmail/Outlook that value CalDAV/CardDAV and a bundled drive/organizer

Poor fit when

  • Orgs that require zero-access architecture where the provider never stores decryptable mailbox keys by default
  • Enterprises needing public ISO 27001/SOC 2 reports, SCIM/SSO, or multi-tenant admin
  • Buyers who refuse any US-group payment or website tooling (Stripe, PayPal, Google reCAPTCHA/ads)
  • Users seeking open-source or self-hosted mail only

Consider instead when

  • When: You want a simple paid-only German privacy mailbox without freemium advertising

    Consider: Posteo

    Posteo is ad-free paid; eclipso differentiates with freemail and hybrid channels

  • When: You prioritise always-on encryption over standard IMAP clients

    Consider: Tuta or Proton Mail

    Tuta uses proprietary E2EE clients; Proton needs Bridge for full IMAP-style access

  • When: You need a broader paid German workplace suite with stronger enterprise packaging

    Consider: mailbox (formerly mailbox.org)

    Compare admin, audit, and collaboration depth on current vendor docs

  • When: You need Google/Microsoft collaboration depth more than EU operator control

    Consider: Gmail or Microsoft 365

    Different jurisdiction and data-use models

Jurisdiction & ownership

Legal entity
Claus-Peter Beringer (eclipso Mail Europe), Grubstr. 9b, 95445 Bayreuth
Governing law
German / EU law (GDPR, BDSG); BayLDA supervisory authority named in privacy notice
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Medium
Hosting / residency
Primary hosting claimed exclusively in Germany; privacy policy names Speedloc Datacenter (Görlitz) with AVV. Optional SMS/fax/post: Commify Germany, CM.com Germany, letterei.de (all DE). Payments: Stripe Payments Europe and PayPal (Europe). Site: Google reCAPTCHA; marketing ad partners documented; Matomo self-hosted analytics.

No known US corporate parent; mailbox hosts are not described as AWS/GCP/Azure. Residual medium CLOUD Act exposure is indicative due to US-group payment and Google site tooling—not legal advice. Vendor marketing that says 'no CLOUD Act' refers to the German operator/DE centres, not every subprocessor path.

  • Independent security / no-logs auditNot found
  • ISO 27001Not found
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumNot zero-access by default

    Without OpenPGP/S/MIME, mailbox content is accessible to the operator like traditional IMAP hosts. Webmail PGP private keys are stored in-account under a passphrase—review threat model vs pure local keys.

  • MediumUS-group payment and site tooling

    Stripe, PayPal, Google reCAPTCHA, and documented ad partners process personal data outside pure DE mailbox hosting. Material for CLOUD Act and transfer diligence even if mail servers stay in Germany.

  • MediumNo public ISO/SOC or independent audit

    Security assurance is first-party documentation only. Regulated buyers will need questionnaires, AVVs, and possibly on-request evidence.

  • LowFreemail is ad-supported

    Free tier includes advertising as a service component. Paid tiers are marketed as ad-free; verify current footer/banner behaviour on the live product.

  • LowOwner-operated scale limits

    Independent DE operator (not VC-backed hyperscale). Expect SME-grade support hours and product depth rather than global enterprise SLAs.

Open questions for due diligence

  • Can non-Business tariffs obtain a signed Art. 28 DPA and full subprocessor list on request?
  • Is Speedloc the sole host for mailbox content (not only the marketing site), and are backup/DR locations exclusively in Germany?
  • Are independent penetration tests or ISO plans available under NDA for enterprise buyers?
  • What exact data minimisation applies to freemail advertising versus paid ad-free tiers (inbox content vs account metadata)?
  • How are OpenPGP private keys encrypted at rest in the account store, and is export/deletion documented for offboarding?

Frequently Asked Questions

Yes. Official docs advertise direct POP3, IMAP, and SMTP plus CalDAV/CardDAV. OpenPGP uses the standard format, so the same key material can be used in Thunderbird or Outlook+Gpg4win. This differs from Proton Mail, which requires Bridge for full IMAP-style clients.

No. Without OpenPGP or S/MIME, eclipso operates as a conventional German IMAP host: the provider can access mailbox contents under the same operational model as traditional hosts. End-to-end confidentiality requires enabling encryption with corresponding parties. Webmail PGP keys are stored in-account under a user passphrase for multi-device access—not a pure local-only key model.

Mailbox and site hosting are described as Germany-only; the privacy policy names Speedloc Datacenter (Görlitz) as host. Optional SMS/fax/post use German gateways (Commify, CM.com Germany, letterei.de). Stripe and PayPal process payments; Google reCAPTCHA and documented ad partners touch website/marketing data. EuropeanStack rates residual US CLOUD Act exposure as medium (indicative) despite no known US parent for the operator.

The vendor states an Art. 28 GDPR DPA (with TOMs) is included and downloadable in-account on the Business plan. Availability for lower tiers is not clearly documented on public pages—confirm in writing if you process personal data as a controller on Freemail/Connect/Premium.

Freemail is free and ad-supported. Paid plans use prepaid periods that expire automatically rather than silent auto-renewal; the vendor emails a renewal reminder before term end. SMS, fax, and letter sending consume separately topped-up credits. Always verify current terms on the official tariff pages.

Posteo if you want a simple paid-only German privacy mailbox without freemium ads. Tuta if always-on proprietary encryption and a different client model matter more than IMAP. Proton Mail if zero-access defaults and a larger encrypted ecosystem outweigh needing a bridge for standard clients. Choose eclipso when German hosting plus direct protocols and optional PGP/S/MIME are the priority.