← Back to Directory
Logo: Mailo

Mailo

French freemium webmail and Mail&Cloud suite (MAILO SAS): email, calendar, cloud disk, Mailo Junior for children, and Pro custom domains—hosted in France, proprietary SaaS.

privacyfreemiumsaasfamilyfrenchwebmailproductivity
Visit WebsiteAsk an EU migration specialistFeedback & corrections

Mailo is a French webmail and personal productivity suite operated by MAILO SAS. It provides email, calendar, contacts, a virtual disk, sharing tools, and optional chat or video. The line covers consumer accounts, Mailo Junior for children, Family and Edu spaces, and Mailo Pro for custom domains.

It exists as a French-hosted alternative to US consumer webmail. The service lineage runs from Francemail (1998) through NetCourrier to the Mailo brand (2019). Platform technology is proprietary MailObject SaaS, not an open-source mail stack.

The concrete differentiator is that France-hosted Mail&Cloud suite plus Mailo Junior, with IMAP and ActiveSync access rather than a zero-access encryption product.

France-hosted (claimed)Freemium webmailMailo JuniorIMAP / ActiveSyncPro custom domainsOptional PGP (server-side)

Shortlist Mailo when you want French-entity freemium webmail with classic IMAP/EAS clients, integrated calendar/cloud, supervised Mailo Junior for kids, or Pro custom domains for SMEs—without US Big Tech accounts. Skip when you need default zero-knowledge E2EE, open-source/self-host, or a full Workspace-class suite; consider Tuta, Proton Mail, or Infomaniak kMail instead.

Key capabilities

Webmail plus IMAP4 for clients, Exchange ActiveSync for mobile sync, and POP3 on paid tiers; SMTP relay with account credentials. Vendor states mail and content stay on servers in France. Free tier is ad-supported with lower quotas; Premium unlocks POP3, more aliases, and larger mail/cloud caps. Suits teams that need standard desktop/mobile clients rather than a closed proprietary app only.

Child accounts (about ages 6–14) only exchange mail with contacts a parent or teacher validates. Age-adapted mini/junior UIs, no ads on Junior, optional promotion to a standard account while keeping the address. Separate Junior mobile apps. Unique fit for families and schools versus generic consumer mail.

Shared calendars and tasks, address book, photo albums, and a virtual disk for files with WebDAV/FTP access. CalDAV and CardDAV for external clients. Premium+ can unlock OnlyOffice in-browser editing. Better as an all-in-one Mail&Cloud for SMEs/families than bare IMAP-only privacy mail.

Pro Start/5/Modulo style plans share mail+cloud quota across accounts, support custom domains (register, transfer, or declare external), distribution lists, mailbox sharing, resource calendars, and manager tooling. Priority Pro hotline with documented acknowledgement and restoration targets for Pro subscriptions. Aimed at TPE/PME, associations, and municipalities—not a full Google Workspace clone.

Built-in PGP/MIME encrypt and sign in the webmail as a trusted third party (keys managed on Mailo for multi-device convenience). Two-factor authentication, application passwords, connection history, and guardianship-style access options. Not zero-knowledge E2EE by default—use external client crypto if the provider must never hold keys.

At a glance

HQ / entity
MAILO SAS, France (RCS Créteil 851585547)
Hosting (claimed)
Servers in France; website host Ecritel (FR)
Model
Freemium SaaS (Free / Premium / Pro / Junior / Edu)
Open source
No (proprietary MailObject®)
Self-host
No
Encryption default
TLS + optional server-side PGP (not ZK E2EE)

Best fit when

  • EU individuals and families wanting French-hosted mail with calendar and cloud disk in one account
  • Parents/schools needing supervised child email (Mailo Junior) with contact allow-lists
  • French SMEs, associations, and municipalities needing custom domains and mutualised Pro storage
  • Teams that depend on IMAP, EAS, CalDAV, CardDAV, or WebDAV rather than a locked-in app
  • Buyers who accept freemium ads on free tier or low-cost Premium rather than pure prepaid anonymity mail

Poor fit when

  • Orgs that require default end-to-end encryption with zero-access provider architecture
  • Buyers that need open-source server code or official self-hosting
  • Enterprises needing SOC 2 / ISO 27001 evidence already published on a trust centre
  • Heavy Google Workspace / Microsoft 365 collaboration suites (docs/drive ecosystem depth)

Consider instead when

  • When: You need zero-knowledge / default E2EE webmail

    Consider: Tuta or Proton Mail

    Mailo PGP is optional and server-side trusted third party

  • When: You want German privacy mail with different encryption/product posture

    Consider: Posteo or mailbox.org

    Compare protocols, storage bundles, and business features side by side

  • When: You need Swiss multi-product cloud with mail plus broader suite

    Consider: Infomaniak kMail

    Different country stack and product breadth

  • When: You need US Big Tech ecosystem integration at any cost

    Consider: Gmail or Microsoft 365 / Outlook.com

    Trade EU entity and France residency claims for ecosystem depth

Jurisdiction & ownership

Legal entity
MAILO SAS (capital €75,000; RCS Créteil 851585547; VAT FR44851585547)
Governing law
French law (terms of use)
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Medium
Hosting / residency
Vendor states user personal data and content are stored/processed on servers in France; specialised French host centre (who-we-are); website hosted by Ecritel, Arradon, France. Named third parties: Verifone/Paybox (payment email), PayPal option, Gandi/Netim (domains), Sirdata + ad agencies (free-tier ads), optional Rainbow video and OnlyOffice. Full mail DC/backup subprocessor list not published.

No known US parent. Indicative CLOUD Act medium due to US-group payment processors (Verifone, PayPal) and incomplete public infrastructure subprocessor inventory—not because of a US HQ. France-claimed mail residency is first-party claim; independent audit of hosting not found. Not legal advice.

  • Independent security / no-logs auditNot found
  • ISO 27001Not found
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumPGP is server-side trusted third party

    Webmail PGP holds keys on Mailo for multi-device use. Provider-access risk differs from zero-knowledge E2EE defaults at Tuta/Proton. Use external crypto if that is a hard requirement.

  • MediumIncomplete public subprocessor inventory

    Privacy rules name payments, domains, and free-tier ads, but not a full list of mail storage, backup, or anti-spam infrastructure vendors. Request annex for B2B risk review.

  • LowUS-group payment processors

    Checkout shares email with Verifone/Paybox; PayPal is also offered. Limited to billing path per privacy rules, but relevant to CLOUD Act diligence.

  • LowFree tier third-party advertising

    Mailo Free shows ad banners via agencies under IAB TCF consent (Sirdata CMP). Premium removes ads. Ad cookies stated as not tied to Mailo profile.

  • MediumNo public ISO/SOC or independent security audit

    Security posture relies on first-party statements and internal measures. Procurement teams may need questionnaires or NDA evidence.

  • LowFree accounts deleted after inactivity

    Mailo Free unused for 365 days can be deleted with content loss. Premium/Pro have different retention rules—plan backups and renewals.

Open questions for due diligence

  • Will Mailo sign a GDPR Article 28 DPA with a full subprocessor and transfer annex for Pro customers?
  • What is the named primary data-centre operator and backup/DR location beyond the France and Ecritel website-host statements?
  • Is there an independent penetration test, ISO 27001 roadmap, or customer-available security whitepaper?
  • Where is Rainbow (video) and OnlyOffice data processed relative to the France mail claim?
  • Current UGAP / public procurement listing status for French public buyers?
Request vendor DPA / enterprise contact
Ask an EU migration specialist
Visit WebsiteCompare similar toolsView alternativesFeedback & corrections

Frequently Asked Questions

No. Mailo stores mail on its servers and can run antivirus/antispam scanning on messages (disableable in options). PGP is available as an optional, server-side trusted-third-party integration for encrypt/sign in the webmail. If you need zero-access architecture where the provider cannot decrypt content, evaluate Tuta or Proton Mail instead (or enforce client-side crypto yourself).

Yes on Mailo Pro spaces: create/manage multiple Pro accounts, mutualise Mail&Cloud storage, attach custom domains, and use distribution lists and mailbox sharing. Pro also adds OnlyOffice and priority support channels. Consumer Free/Premium accounts are for individuals and families; terms forbid professional use of individual account types.

A parent or teacher creates a Junior account inside a Family or Edu space. The child can only send to and receive from contacts the manager has approved; new contacts trigger manager validation. Interfaces are age-tiered (mini vs junior). Ads are not shown on Junior. The manager can later convert the account to a standard Mailo account while keeping the address.

Privacy rules state personal data and content are stored and processed on servers in France. Public pages name Ecritel as website host; payment flows share email with Verifone/Paybox (and support PayPal); domain purchases involve Gandi or Netim; free-tier ads use Sirdata CMP plus ad agencies. A full mail-infrastructure subprocessor and backup inventory is not published—request it under NDA or DPA for B2B use.

No. The stack is proprietary MailObject® technology from Mail Object / Mailo, delivered only as multi-tenant SaaS. There is no official self-hosted server product. Open protocols (IMAP, CalDAV, CardDAV, WebDAV) still let you use third-party clients against the hosted service.