← Back to Directory
Logo: Inbox.eu

Inbox.eu

Latvia-based hosted email from SIA INBOKSS with ad-free personal and business mailboxes, custom domains, large integrated file storage, calendar/contacts, and mobile apps.

privacyemailsaasgdprbusiness-emaillatviaimap
Visit WebsiteAsk an EU migration specialistFeedback & corrections

Inbox.eu is a hosted email and light collaboration stack operated by SIA INBOKSS in Riga, Latvia. The product targets individuals and organisations that want professional mailbox hosting: webmail, IMAP/POP3/SMTP, calendar and contacts, file storage with WebDAV, and native mobile apps.

It exists as an ad-free Baltic operator alternative to US consumer webmail. Inbokss dates to 1998 and expanded from Baltic free-mail portals to the Inbox.eu brand for domain and international users. Business accounts add custom domains, catch-all addresses, and optional SAML 2.0 or LDAP single sign-on.

The concrete differentiator is that Latvian-hosted paid mail plus large integrated file storage, without ads in the mailbox or mobile app according to the operator.

EU-operated (Latvia)100 GB mail + filesCustom domainsIMAP / SMTPSAML / LDAP SSOTLS, not ZK E2E

Shortlist Inbox.eu when you need Latvia-hosted, ad-free SME email with large included storage, custom domains, IMAP clients, and business SSO under an EU operator. Skip when you require zero-knowledge E2E crypto or published ISO/SOC audits—consider Proton Mail, Tuta, Posteo, or mailbox.org instead.

Key capabilities

Premium accounts include a large combined email-and-files quota (business adds domain-level shared storage). Files supports multi-gigabyte uploads, share links, parallel downloads, and WebDAV mounting on desktop—useful for SMEs that want drive-like sharing without a separate vendor.

Business email lets you host unlimited domain mailboxes after DNS/MX validation, with admin controls for users, aliases, catch-all, and domain settings. A public demo of the admin experience is available for evaluation before signup.

Full IMAP, POP3, and SMTP (with TLS) for Thunderbird, Outlook, and other clients; calendar and contacts sync; official apps on iOS and Android. Fits teams that refuse webmail lock-in.

Transport encryption with TLS 1.2+, optional two-factor authentication, multi-filter spam/malware scanning, and Business SSO via SAML 2.0 or LDAP (including common IdPs such as Azure AD and Google Workspace). This is hosted-email security, not zero-knowledge E2E.

Documented IMAP/CSV migration paths from Gmail and other providers, plus real-person support in English and Baltic languages rather than chatbot-only queues—material for SMEs without a dedicated mail ops team.

At a glance

HQ
Riga, Latvia (EU)
Legal entity
SIA INBOKSS (reg. 40003560720)
Product since
Inbokss 1998; Inbox.eu brand from 2011
Hosting
Vendor-claimed own servers in Latvia; multi-server backups
Open source
No
Self-host
No
Commercial model
Prepaid personal/business premium; time-limited trial

Best fit when

  • SMEs wanting branded domain email without Google Workspace or Microsoft 365 suite lock-in
  • Teams that standardise on Thunderbird, Outlook, or other IMAP/SMTP clients
  • Buyers prioritising large included mailbox and file quotas plus WebDAV sharing
  • Organisations that need business SSO (SAML 2.0 or LDAP) without a separate SSO SKU
  • Users seeking an ad-free paid European mailbox with human support in English and Baltic languages

Poor fit when

  • RFPs that require published ISO 27001, SOC 2, or independent security/no-logs audit reports
  • Threat models that assume the provider cannot access plaintext mail (zero-knowledge E2E)
  • Buyers needing a downloadable public DPA and full mail-path subprocessor register before any sales contact
  • Teams that need a full office suite (docs, sheets, meetings) rather than email-plus-files

Consider instead when

  • When: You need open or heavily audited zero-knowledge end-to-end encrypted mail

    Consider: Proton Mail or Tuta

    Different crypto posture than TLS-hosted conventional mail

  • When: You prefer German jurisdiction and a long-standing privacy-host reputation

    Consider: Posteo or mailbox.org

    Often leaner storage; strong EU privacy positioning

  • When: You already depend on Docs/Drive/Meet or full Microsoft 365 collaboration

    Consider: Google Workspace or Microsoft 365

    Inbox.eu is not a suite replacement

  • When: You want Belgian dual-key / open-source-oriented secure mail

    Consider: Mailfence

    Different feature and crypto tradeoffs

Jurisdiction & ownership

Legal entity
SIA INBOKSS (Inbokss Ltd), reg. no. 40003560720, Matrozu street 15-2, Riga, LV-1048
Governing law
Republic of Latvia / EU GDPR
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Medium
Hosting / residency
Mailbox/file data: vendor claims own servers in Latvia (Riga DC, EN 50600-3) with live multi-copy backups and no EU exit. Web property privacy policy lists Google Analytics, Meta Pixel, Gemius, AdBox, InMobi CMP, and hCaptcha—US/global SaaS for analytics, ads, consent, and bot defence. No public full mail-path subprocessor register found.

No known US corporate parent. CLOUD Act exposure scored medium because of named US-group website subprocessors, not because mail is marketed as US-hosted. Indicative only—not legal advice.

  • Independent security / no-logs auditNot found
  • ISO 27001Not found
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumNo public ISO/SOC or independent audit

    Enterprise RFPs that require cert packs will stall until the vendor supplies private assurance materials.

  • MediumNot zero-knowledge E2E mail

    Operator-controlled storage with TLS in transit; legal-process access is acknowledged. Do not shortlist as a Proton/Tuta crypto peer.

  • MediumUS-group tools on website privacy path

    Google Analytics, Meta Pixel, hCaptcha, and InMobi appear in the privacy policy even while mail is marketed as Latvia-only—align transfer assessments and cookies consent with this split.

  • MediumPublic DPA / subprocessor list gap

    Processor language exists in TOS, but buyers still need a signed DPA and current subprocessors for regulated personal data.

  • LowOperator also runs ad-supported portals

    Inbokss group products include advertising-supported regional portals; verify contractually that paid Inbox.eu mailboxes stay ad-free and outside portal ad profiling.

Open questions for due diligence

  • Will SIA INBOKSS sign your organisation's DPA and provide a current subprocessor list limited to production mail/file paths?
  • Are there private ISO, SOC, or penetration-test reports available under NDA?
  • Which backup media/locations and any non-EU operational tooling (support remote access, payments) process personal data?
  • Does business SSO support your exact IdP configuration (SAML attributes / LDAP schema) without custom engineering fees?
Request vendor DPA / enterprise contact
Ask an EU migration specialist
Visit WebsiteCompare similar toolsView alternativesFeedback & corrections

Frequently Asked Questions

No. Public security pages describe TLS 1.2+ in transit, hashed passwords, optional 2FA, and operator-controlled storage with backups in Latvia. Staff access for valid legal process is acknowledged. If your RFP requires open, audited zero-knowledge mail cryptography, evaluate Proton Mail or Tuta instead.

The vendor states mail and files live on its own servers in Latvia (EU), with multi-server live backups and no intentional EU exit for mailbox data. The website privacy policy still lists Google Analytics, Meta Pixel, Gemius, AdBox, InMobi CMP, and hCaptcha for portal analytics, ads measurement, consent, and bot protection—ask for a current subprocessor list covering production mail paths before treating residual US SaaS risk as zero.

Yes for Business: custom domains after ownership validation, admin panel user management, and SSO with SAML 2.0 or LDAP without a separate SSO fee according to the vendor. SAML suits cloud IdPs; LDAP suits directory-centric environments. Plan IT time for certificate and endpoint exchange.

Production use is a paid personal or business premium model. A time-limited trial exists with restricted outbound sending (for example, low daily send caps on trial). There is no unlimited free production mailbox comparable to consumer Gmail. Confirm current trial limits and money-back terms on the official pricing page.

Terms describe a controller/processor split when customers store third-party personal data, but a standalone public DPA download, ISO 27001 certificate, or SOC 2 report was not found on the site during research. Treat formal DPA, audit reports, and a named subprocessor schedule as open diligence items before regulated workloads.