Logo: Infomaniak kMail

Infomaniak kMail

Swiss-hosted professional email, contacts and calendars from Infomaniak Network SA—custom domains, open protocols, optional encryption, part of kSuite.

Open source

Infomaniak kMail is the email, contacts, and calendar stack from Infomaniak Network SA, a Swiss cloud operator based in Geneva. It is the messaging layer of kSuite: webmail, IMAP/SMTP and CalDAV/CardDAV for desktop clients, and native iOS and Android apps whose client code is published under GPL-3.0.

It exists for professionals who want custom-domain Swiss-hosted mail with open protocols and optional encryption, without running their own mail servers. The backend is Infomaniak-hosted SaaS only.

The concrete differentiator is that Swiss data-centre operation plus daily backups and restores typically available for about 30 days, inside the wider kSuite account.

Swiss-hosted mailCustom domainsIMAP / CalDAVOSS mobile clientsISO 27001 (claimed)Optional send encryption

Shortlist when you need Swiss-hosted professional email with custom domains, IMAP/CalDAV, suite bundling (kSuite), and operator-owned DCs. Skip when zero-access client-side E2EE or full self-host is mandatory—consider Proton Mail (E2EE) or a self-hosted stack instead.

Key capabilities

Host name@your-domain addresses with standard IMAP/SMTP plus CalDAV/CardDAV so Thunderbird, Apple Mail, Outlook and other clients stay usable. Paid kSuite/Mail Service tiers add multi-mailbox management, aliases/categories, signatures and team admin; free my kSuite is limited to one address without aliases.

Optional encryption at send uses OpenPGP, ECC and AES-256-GCM; Infomaniak-to-Infomaniak is automatic after auth, while external recipients often open a password-protected secure page. Private keys stay on Infomaniak infrastructure—useful for sensitive sends, but not zero-access client-side E2EE with user-held keys.

Official iOS and Android mail apps are published on GitHub under GPL-3.0 for local inspection and contribution. The hosted mail backend remains Infomaniak SaaS only—there is no supported self-hosted server stack for kMail.

Mailboxes are backed up across Swiss data centres with vendor-stated restore windows around 30 days; anti-spam/antivirus plus domain authentication (SPF, DKIM, DMARC) are standard. Availability claims (e.g. high uptime for essential services) should be checked against the current SLA for your plan.

In-product AI can help draft, correct, translate and process mail context; Infomaniak states messages sent to its AI are processed in Switzerland and not stored for other purposes. Treat AI features as operator-side processing of content you choose to submit—not as end-to-end private AI.

At a glance

HQ
Geneva, Switzerland (Les Acacias)
Legal entity
Infomaniak Network SA
Hosting
Own Swiss data centres; dual-site mailbox backups
Open source
Mobile clients GPL-3.0; backend SaaS
Self-host
No (hosted only)
Commercial model
Free my kSuite tier; paid kSuite / Mail Service seats

Best fit when

  • SMEs and associations wanting Swiss-hosted name@domain email with standard IMAP clients
  • Teams that prefer an integrated kSuite workspace (mail + drive + meet) under one Swiss operator
  • Orgs that need a published B2B DPA, dual-site Swiss backups, and SPF/DKIM/DMARC on domains
  • Buyers who value open-source mobile clients even if the mail backend is SaaS-only
  • Individuals in OECD countries open to free my kSuite with known feature and residency limits

Poor fit when

  • Requirements for default zero-access E2EE with user-held keys on every message
  • Need to self-host the mail server stack (kMail is SaaS-only)
  • French HDS health-data hosting (vendor states HDS certification is not planned)
  • Free-tier signup outside OECD residency / without mobile verification
  • Very large estates that need more than kSuite's published per-offer user ceiling without a custom deal

Consider instead when

  • When: You need zero-access end-to-end encryption as the default mail model

    Consider: Proton Mail

    Different trust model: client-side E2EE vs Infomaniak operator-held keys for optional encryption

  • When: You want European hosted mail with a different encryption or non-profit posture

    Consider: Mailfence or Posteo

    Compare encryption UX, storage model, and commercial terms on each vendor site

  • When: You need full control of the MTA and storage stack

    Consider: Self-hosted mail (e.g. mailcow/Stalwart) or a host that publishes server software

    Infomaniak mobile apps are OSS; the hosted service is not self-hostable

Jurisdiction & ownership

Legal entity
Infomaniak Network SA (Rue Eugène Marziano 25, 1227 Les Acacias, Geneva; CH-660.0.059.996-1; IDE CHE-103.167.648)
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Low
Hosting / residency
Primary mail hosting on Infomaniak-operated Swiss data centres (Geneva/Zurich region; Swiss Hosting label claimed); dual-DC backups in Switzerland. Confidentiality policy names payment partners (e.g. PayPal, Checkout) and other ancillary third parties for account/billing/measurement—not AWS/GCP/Azure as primary mail hosts in public materials.

No known US corporate parent; foundation/employee ownership narrative on About pages. CLOUD Act score is indicative for mailbox content under Swiss operator + own DCs; billing and marketing subprocessors still create third-party surfaces. Not legal advice.

  • Independent security / no-logs auditNot found
  • ISO 27001Vendor claimed
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumEncryption is not zero-access by default

    Optional send encryption keeps private keys on Infomaniak infrastructure. Operators with warrant or insider access to the platform may still access unencrypted stored mail. Practical impact: do not treat kMail as a zero-knowledge vault for all messages.

  • LowSaaS-only mail backend

    No official self-host for the mail service; exit means IMAP export/migration. OSS clients do not equal portable server stack.

  • LowFree tier residency and feature caps

    my kSuite requires OECD residency and phone verification; no aliases, limited storage, enforced free signature. Unsuitable as free global professional mail.

  • LowLimited public mail-path subprocessor table

    Hosting is own Swiss DCs per vendor docs; confidentiality policy lists payment and marketing-class third parties. Procurement should request a current subprocessor list for mailbox content paths.

  • MediumNo HDS health-hosting cert

    Vendor FAQ states French HDS certification is not planned—material for French health-sector workloads.

Open questions for due diligence

  • Request the current subprocessor list scoped to Infomaniak Mail mailbox content (not only account billing).
  • Confirm whether optional encryption is fully rolled out on mobile apps for your required clients.
  • Validate seat ceilings, SLA, and restore RPO/RTO against your RTO targets for the chosen kSuite/Mail plan.
  • For regulated sectors: map FADP/GDPR DPA clauses and any sector addenda (FINMA mapping exists; HDS does not).

Frequently Asked Questions

Not by default. Standard mail is hosted on Infomaniak's Swiss infrastructure with optional one-click encryption at send (OpenPGP/ECC/AES). Infomaniak states private keys remain on its systems; external recipients may use a passworded secure reading page. Choose Proton Mail or similar if zero-access client-side E2EE with user-controlled keys is a hard requirement.

SaaS only for the mail service. Mobile clients are open source (GPL-3.0), but Infomaniak does not offer an official self-hosted kMail server. If you need full control of the MTA stack, look at self-hosted stacks or providers that publish server software.

Infomaniak Network SA (Geneva) states customer service data is hosted on its own Swiss data centres with dual-site backups in Switzerland and Swiss Hosting labelling. A downloadable B2B Data Processing Agreement is published from the trust centre. Confirm current DPA terms and any plan-specific subprocessors in procurement.

Free my kSuite is aimed at individuals: limited email storage (vendor documents 20 GB for mail on free), one address per account, no aliases, enforced free-tier signature branding, OECD residency, and mobile number verification—among other daily send and feature caps. Paid kSuite or Mail Service is the path for custom domains, multi-user admin and higher limits.

Gmail/Google Workspace wins on global ecosystem integrations and familiarity; Infomaniak competes on Swiss data residency, operator-owned infrastructure, ad-free business model, standard protocols, and optional suite tools (kDrive, kMeet) under Swiss/FADP-GDPR framing. Encryption models and admin tooling differ—run a pilot migration before cutting over MX records.