European email providers compared: encryption or standards support
By the EU Alternatives team Published
The choice between European email providers splits on one question: do you want end-to-end encryption by default, or compatibility with the standard protocols every mail client speaks? Proton Mail and Tuta encrypt everything but tie you to their own apps (Tuta) or a local bridge program (Proton), while mailbox.org, Posteo, StartMail and Mailfence work with any IMAP client and any standard calendar, storing mail conventionally with encryption as an option. Decide which side of that line you are on and the shortlist mostly picks itself.
Two models of private email
The end-to-end camp encrypts mail so that the provider itself cannot read it. Proton Mail uses OpenPGP with zero-access storage: message bodies and attachments are encrypted with keys only you control, so even a subpoena served on Proton yields ciphertext. The cost is compatibility. Outlook, Apple Mail and Thunderbird cannot connect directly; you need Proton Mail Bridge, a small local program that translates between your client and Proton’s encryption, and Bridge is only available on paid plans.
Tuta Mail goes further still. It encrypts subject lines, contacts and calendar entries, the metadata most encrypted services leave readable, and it has already deployed post-quantum algorithms against future decryption attacks. It also offers no IMAP at all, on any plan. You read your mail in Tuta’s own web, desktop and mobile apps or not at all, which is the purest version of the trade-off.
The standards camp treats compatibility as the feature. mailbox.org, Posteo, StartMail and Mailfence speak IMAP and SMTP plus standard calendar and contact protocols, so the clients you already use work without adapters. Mail is stored conventionally, which means the provider could technically read it, and each offers optional encryption on top: PGP and S/MIME built into the webmail at mailbox.org and Posteo, one-click PGP at StartMail, browser-side OpenPGP at Mailfence. mailbox.org and Posteo can also encrypt the whole mailbox at rest, switched on by the user.
Neither model is simply more private. End-to-end encryption protects you from the provider and from anyone who compromises its servers; standards support gives you client freedom and a clean exit path. The question is which protection you actually need.
The six providers compared
All six are listed in our email and communication category, and the countries below come straight from our directory data.
| Provider | Country | Custom domain | IMAP | End-to-end encryption |
|---|---|---|---|---|
| Proton Mail | Switzerland | Yes, paid plans | Via Bridge, paid plans | Yes, by default |
| Tuta Mail | Germany | Yes, paid plans | No | Yes, by default |
| mailbox.org | Germany | Yes | Yes | Optional, PGP and S/MIME |
| Posteo | Germany | No | Yes | Optional, PGP and S/MIME |
| StartMail | Netherlands | Yes | Yes | Optional, one-click PGP |
| Mailfence | Belgium | Yes, paid plans | Yes, paid plans | Optional, OpenPGP |
A fair sentence on each. Proton Mail is the most complete Gmail replacement of the encrypted pair, with polished apps, hide-my-email aliases and tracker blocking; our Proton Mail vs Gmail page covers that switch directly. Tuta Mail encrypts more than anything else on this list and includes a permanent free plan, with the app lock-in described above; Tuta Mail vs Gmail has the direct comparison. mailbox.org bundles mail with cloud storage, video meetings and an office suite, which makes it less a Gmail replacement than a Google Workspace replacement. Posteo is the minimalist: anonymous signup, renewable energy, serious optional crypto, and deliberately no custom domains. StartMail comes from the team behind the Startpage search engine and keeps its scope to mail done well, with unlimited disposable aliases and ordinary IMAP; StartMail vs Gmail has the details. Mailfence pairs interoperable OpenPGP with calendars, documents and groups, though IMAP access and custom domains sit on its paid tiers.
The jurisdiction detail worth getting right
Proton Mail is Swiss, and Switzerland is not in the EU. That is not a weakness, but it is a different legal position and worth stating precisely. Proton operates under the Swiss Federal Act on Data Protection, revised in 2023, and Switzerland holds an EU adequacy decision, so personal data can flow between the EU and Switzerland lawfully. What you do not get is a company answerable to an EU supervisory authority in the first instance. For a strict EU-only requirement, in public procurement for example, Proton needs a footnote where the other five do not.
The other five are EU companies. Tuta, mailbox.org and Posteo are German, which stacks the Federal Data Protection Act on top of GDPR, and the German providers tend to collect certifications: mailbox.org holds ISO 27001 with BSI C5 oversight, and Posteo is certified under BSI TR-03108 for secure mail transport. StartMail is Dutch, with mailboxes on Dutch-owned servers in the Netherlands. Mailfence is Belgian, where the law requires a Belgian judicial order before any data disclosure.
Which one to pick
- A business on its own domain that wants drop-in Outlook or Apple Mail support: mailbox.org or StartMail. Take mailbox.org if you want calendars, storage and documents in the same account, a case our mailbox.org vs Microsoft Outlook page walks through; take StartMail if you only want mail, done simply.
- Maximum encryption: Proton Mail or Tuta. Proton if you want to keep a desktop client through Bridge; Tuta if you want subject lines and the calendar encrypted too and are happy living in its apps. Tuta Mail vs Fastmail shows how that model stacks up against a standards-first provider outside Europe.
- A personal address at minimal cost: Posteo or mailbox.org, both with entry plans at one euro a month; take Posteo only if you never need your own domain.
- Interoperable PGP with groupware: Mailfence, which wraps encrypted calendars, documents and groups around the inbox.
If none of these fit, the wider lists of European alternatives to Gmail and European alternatives to Google Workspace cover the rest of the field.
Frequently asked questions
Which European email providers work with Outlook or Apple Mail?
mailbox.org, Posteo and StartMail work with Outlook, Apple Mail and any other IMAP client out of the box, and Mailfence does too on its paid plans. Proton Mail connects through Proton Mail Bridge, a local program included with paid plans. Tuta does not work with any external client; you use its own apps on desktop and mobile.
Can I use my own domain with these providers?
Five of the six support custom domains: mailbox.org, StartMail, Mailfence, Proton Mail and Tuta all offer them, generally on paid tiers. Posteo does not, a deliberate consequence of its data minimisation policy, since domains must be registered to a name and address it refuses to store. If a custom domain is a requirement, Posteo is out.
Is Proton Mail covered by GDPR?
Not directly, because Proton is a Swiss company and Switzerland is not an EU member. It operates under the revised Swiss Federal Act on Data Protection, the EU recognises Swiss law as adequate for data transfers, and Proton states it complies with GDPR for its European users. In practice the protection is comparable; the difference matters mainly when a contract or tender demands an EU-established provider.
Which European email provider is best for a small company?
mailbox.org, for most small companies: custom domains, standard protocols for whatever clients staff already use, and calendars, storage and an office suite in one German account. StartMail is the simpler pick if you only need mail on your own domain. If the whole team accepts working in dedicated apps, Tuta’s paid tiers add end-to-end encryption across mail and calendar with shared inboxes and admin controls.