← Back to Directory
Logo: Soverin

Soverin

Dutch privacy-first email hosting: custom domains, open IMAP/SMTP/CalDAV, 25 GB mailboxes, no ads or content scanning, servers operated in the Netherlands.

privacyemailgdprnetherlandscustom-domainimapsaas
Visit WebsiteAsk an EU migration specialistFeedback & corrections

Soverin is a paid email hosting service operated by Soverin B.V. in Amsterdam. It sells standard-protocol mailboxes (IMAP, SMTP, CalDAV, and CardDAV) so users keep the desktop, mobile, or webmail client they already use.

It exists as a Dutch privacy-first alternative to advertising-funded webmail. The product is built around domain ownership: bring or register a domain, create addresses, and keep unlimited aliases that deliver into a single mailbox. There is no free tier.

The concrete differentiator is that no-ads, no-content-scanning stance plus a stated 25 GB mailbox on servers operated in the Netherlands.

NL / EU operatedCustom domainsIMAP / CalDAVNo ads / no trackingISO 27001 (claimed)DANE / DNSSEC

Shortlist Soverin when you want Dutch-operated, paid IMAP email with custom domains, unlimited aliases, and strong mail-auth standards without Google/Microsoft ads. Skip when you need zero-knowledge E2EE—consider Proton Mail or Tuta instead—or a full productivity suite (mailbox.org / Microsoft 365).

Key capabilities

Host mail on your own domain (bring existing or register through Soverin). Unlimited aliases—plus-addressing or domain names—deliver into one mailbox, plus optional random @sinenomine.email private aliases that hide the real address. Suits freelancers and SMEs who need brandable addresses without per-alias fees.

Use any standards-based client or device for mail, calendar, and contacts—no proprietary app required. Dashboard import helps migrate from other providers. Ideal when IT wants Thunderbird, Apple Mail, or Outlook without locking into a closed webmail ecosystem; not a zero-knowledge E2EE product by default.

Outbound and inbound paths use TLS; Soverin publishes and honours DANE/TLSA, signs with DKIM, publishes SPF/DMARC, enables DNSSEC on managed domains, and strips personal IP addresses from outbound headers. 2FA is available and can be admin-mandated. Buyers still need their own OpenPGP setup for end-to-end content secrecy with external parties.

Each mailbox includes a stated 25 GB quota covering mail, calendar, and contacts. Nightly backups use individually generated keys; Soverin states that emptying trash permanently deletes data and that leaving the service removes backups when the key is destroyed. Extra mailboxes can share storage for small teams.

Purchase and assign additional mailboxes on a domain, with admin tooling for teams. Soverin markets to hosters, ISPs, MSPs, and independent professionals for multi-mailbox and white-label scenarios—useful when you want Dutch-operated email without building your own mail stack.

At a glance

HQ
Amsterdam, Netherlands (Soverin B.V.)
Group
The Sharing Group / TSG Online (acq. Sep 2025)
Hosting
Dutch data centres; vendor claims self-operated, no hyperscaler
Protocols
IMAP, SMTP, CalDAV, CardDAV
Storage
25 GB per mailbox (vendor-stated)
Self-host / OSS
No / No
Commercial model
Annual prepaid; 30-day mailbox money-back; no free tier

Best fit when

  • Individuals and freelancers who want a paid European mailbox on their own domain with any standard mail client
  • SMEs needing several mailboxes, aliases, and CalDAV/CardDAV without adopting Google Workspace or Microsoft 365
  • Teams prioritising Dutch jurisdiction and claimed no-hyperscaler hosting over zero-knowledge E2EE
  • Hosters/ISPs/MSPs evaluating white-label or multi-mailbox Dutch email
  • Buyers who value DANE, DKIM/DMARC, DNSSEC, and IP-header stripping on an open-standards stack

Poor fit when

  • Organisations that require default zero-access / E2EE mail against the provider (use Proton Mail or Tuta)
  • Users seeking a free tier, anonymous cash-only signup, or purely self-hosted open-source mail servers
  • Enterprises needing SSO, eDiscovery archives, phone support SLAs, or a full office suite in one vendor
  • Workloads that depend on US-region mailbox hosting or hyperscale global PoPs

Consider instead when

  • When: You need zero-knowledge E2EE and a privacy-first mobile/web ecosystem

    Consider: Proton Mail or Tuta

    Trade open IMAP convenience for stronger default content secrecy vs the provider.

  • When: You want German-hosted paid mail with broader office-style add-ons

    Consider: mailbox.org or Posteo

    Compare storage, admin features, and payment anonymity (Posteo) against Soverin’s domain/alias model.

  • When: You need Google- or Microsoft-class collaboration and global free consumer mail

    Consider: Gmail or Microsoft 365 / Outlook.com

    Different risk and advertising model; not EU-sovereignty substitutes.

Jurisdiction & ownership

Legal entity
Soverin B.V. (Amsterdam); owned by The Sharing Group / TSG Online (Dutch) as of September 2025 acquisition announcement
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Low
Hosting / residency
Vendor: EU-only processing; data in NL; self-operated Dutch DCs, no hyperscaler. TechRadar: 3 NL DCs. Core mail hosts on Soverin B.V. AS211993. External first-line support partner under DPA/NDA (country unpublished). HIBP k-anon password checks; Let’s Encrypt; domain DNSSEC partner. No AWS/GCP/Azure as primary mailbox hosts in public materials.

Indicative only — not legal advice. Dutch entity + Dutch group owner + claimed self-operated NL hosting support low CLOUD Act exposure relative to US webmail; residual risk from any undisclosed US-group tools and the unnamed support partner. Re-verify subprocessors after the 2025 group acquisition.

  • Independent security / no-logs auditNot found
  • ISO 27001Vendor claimed
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +6

Considerations & known limitations

  • MediumNot zero-knowledge E2EE by default

    Unlike Proton/Tuta, Soverin is a classic IMAP host. Provider infrastructure can process content for delivery and spam filtering. Practical impact: unsuitable as a drop-in for policies that require provider-blind encryption without extra client crypto.

  • MediumUnnamed external support partner

    Privacy statement discloses a first-line support partner with limited account data under DPA/NDA, but does not publish the partner name or country. Practical impact: add an open diligence item for any regulated workload.

  • LowISO certificates not self-serve public

    ISO 27001/9001/14001 are claimed with certificates via support rather than a public PDF registry link found in research. Practical impact: procurement should request current attestations before treating certs as verified.

  • Low2025 group acquisition

    The Sharing Group acquisition may change subprocessors, tooling, or brand packaging over time even if continuity is promised. Practical impact: re-check DPA and hosting annex annually.

  • LowEmail-centric support

    Public materials emphasise human Dutch-team email support; TechRadar notes no live chat or phone. Practical impact: large orgs needing 24/7 phone SLAs may find coverage thin.

Open questions for due diligence

  • What is the legal name and country of the first-line support partner, and is a current subprocessor list available under NDA?
  • Can Soverin provide the latest ISO 27001/9001/14001 certificates and scope statements without delay?
  • After The Sharing Group acquisition, are any new group companies (e.g. Mijndomein, Greenhost, Leafcloud tooling) in the mailbox data path?
  • Is NEN 7510 certification complete for healthcare use cases, or still in progress?
  • Which domain registrar(s) handle customer DNSSEC, and where are registry data stored?
Request vendor DPA / enterprise contact
Ask an EU migration specialist
Visit WebsiteCompare similar toolsView alternativesFeedback & corrections

Frequently Asked Questions

No. Soverin is a standards-based IMAP/SMTP host: transport is encrypted (TLS), servers use disc encryption, and backups are described as encrypted with per-user keys Soverin cannot read after account deletion. Message content is still processed on provider infrastructure for delivery and spam filtering. For OpenPGP-style E2EE to external recipients, you must add client-side crypto yourself. Choose Proton Mail or Tuta if zero-access E2EE is a hard requirement.

Soverin states that personal data is processed only within the EU, that all data stays in the Netherlands, and that infrastructure is fully owned and operated by Soverin in Dutch data centres without hyperscaler dependency. Third-party coverage reports three Dutch data centres; mail hostnames resolve under Soverin B.V.’s AS. Ask for the current subprocessor list—including the external first-line support partner named in the privacy statement—before signing enterprise contracts.

There is no free tier. Billing is annual (prepaid). Soverin offers a 30-day money-back guarantee on the mailbox if you cancel early; domain purchases are typically non-refundable because you keep the domain. Confirm current packaging on soverin.com—this page does not list retail prices.

In September 2025, Dutch group The Sharing Group (TSG Online; Mijndomein and other brands) announced it acquired Soverin. Public statements say the name, team, and services continue, with customers gaining access to sister-company advantages over time. Soverin had already been integrated into Mijndomein’s email offering since 2022. Treat ownership diligence as ongoing: re-check group structure and any new subprocessors after corporate changes.

The public privacy statement is written to qualify as an Article 28 processing agreement under the Dutch AVG/GDPR framing, and Soverin processes as processor/sub-processor for customer mail data. ISO 27001, 9001, and 14001 are vendor-claimed with certificates available on request (not independently re-verified here). NEN 7510 is described as in progress. Request current certificates, a signed DPA/annex, and subprocessors for formal procurement.