Zum Inhalt springen
Unabhängig verifiziert · Quartalsweises Re-Audit
EU VETTED

StartMail

VERIFIZIERT
Privates E-Mail · Netherlands
Gegründet 2014 · startmail.com ↗

Dutch private email (StartMail B.V., est. ~2014, by Startpage founders), NL-hosted, one-click PGP, unlimited aliases, USD-priced from $4.99/mo annual.

Kurzfassung

StartMail aus der Kategorie Privates E-Mail ist ein europäischer Dienst mit Netherlands als Hosting-Standort und höchstens geringfügigem, vorübergehendem US-Bezug nach dem CLOUD Act.

Bewertungsnotizen

StartMail is operated by StartMail B.V. in the Netherlands, founded around 2014 by Robert E.G. Beens and David Bodnick (the same founders behind the Startpage privacy search engine) with servers physically located in the Netherlands under Dutch privacy law and GDPR, PGP encryption support including one-click encryption and password-protected encrypted messages, unlimited disposable email aliases, and a published transparency report. Notable open questions: (a) the broader Startpage group has had US ad-tech investor exposure historically (the 2019 Privacy One Group / System1 investment was widely covered and triggered community concern. Current 2026 ownership status needs human verification before publishing; ownership_signal: eu_owned is provisional), (b) pricing is published in USD rather than EUR (unusual for a Dutch company), and (c) DPA and sub-processors URLs were not captured at audit.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 keine offengelegt
Geprüfte Signale
Jurisdiktion
  • EU-/Angemessenheits-Hosting
  • EU-/Angemessenheits-Betreiber
  • Keine US-CLOUD-Act-Exposition
Datenschutz
  • Ende-zu-Ende-Verschlüsselung
    Integriertes PGP verfügbar; E-Mails sind standardmäßig nicht zugriffsfrei verschlüsselt.
Transparenz
  • Öffentlicher AVV
  • Unterauftragsverarbeiter offengelegt
  • Open-Source-Clients
  • Zertifizierung durch Dritte
JUMP TO
OVERVIEW

Über StartMail

StartMail is a privacy-focused email service operated by StartMail B.V. in the Netherlands. It was founded around 2014 by Robert E.G. Beens and David Bodnick (the same founders behind the Startpage privacy-focused search engine) and the two products share the broader Startpage / Surfboard Holding group history. The product positioning is straightforward: encrypted email under Dutch privacy legislation and GDPR, with one-click PGP encryption support, password-protected encrypted messages for recipients without PGP, unlimited disposable / alias email addresses, no advertising and no tracking, and IMAP/SMTP compatibility with standard email clients.

The infrastructure side is clean: StartMail explicitly states that "our servers are located here as well" (referring to the Netherlands) meaning email storage stays under Dutch and EU law. PGP support is a real differentiator versus Gmail / Outlook / iCloud Mail (none of which offer first-class PGP) and against some other privacy-email vendors. A transparency report and a separate data-processing whitepaper are published.

For an EU-sovereignty audit, two open questions are worth noting. First, the Startpage group ownership history: in 2019 Startpage announced a strategic investment from Privacy One Group, a subsidiary of US ad-tech company System1. The deal triggered significant community concern at the time about a US ad-tech investor's relationship to a privacy product. The 2026 status of that investor relationship needs human verification before this listing publishes; ownership_signal: eu_owned is provisional pending that check. Second, StartMail's own pricing page is denominated in USD (Personal $4.99/month annual = $59.88/year; Business $6.99/month annual = $83.88/year), an unusual choice for a Dutch B.V. and a real signal worth surfacing. DPA and sub-processors URLs were not directly captured at audit.

Best fit: privacy-conscious EU users who want PGP-capable email under Dutch law with unlimited aliases, and who are willing to weigh the Startpage-group US-investor history. Buyers who want the strongest possible EU-sovereignty posture should prefer Tuta (DE, founder-owned, post-quantum), Mailbox.org (DE, BSI C5), Posteo (DE, anonymous signup) or Proton Mail (CH, Foundation-controlled), all elsewhere in this directory.

SUB-PROCESSORS

Unterauftragsverarbeiter-Karte · keine offengelegt

Quelle ↗
Anbieter gibt null Unterauftragsverarbeiter an. Die gesamte Datenverarbeitung erfolgt im eigenen Haus.
CERTIFICATIONS

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-05-15).
FEATURES

Funktionsmatrix

Verschlüsselung TLS
Postfachspeicher 20 GB
E-Mail-Aliase Unbegrenzt
Eigene Domain Ja
IMAP / SMTP Ja
Kontakte Ja
INTEGRATION & ZUGRIFF
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Preise & Tarife

KOSTENPFLICHTIG
ab €5/Monat
Preisseite ansehen ↗
PUBLIC DOCUMENTS

Öffentliche Dokumente

Anbieter veröffentlicht keinen öffentlichen AVV. Ohne öffentlich zugänglichen Auftragsverarbeitungsvertrag können kleine EU-Kunden den Verarbeitervertrag nicht selbst abschließen. Dies wird als fehlender öffentlicher AVV vermerkt (siehe So prüfen wir).
  • Auftragsverarbeitungsvertrag (AVV)
    — fehlt
    fehlt
  • Liste der Unterauftragsverarbeiter
    www.startmail.com/privacy…
    Öffnen ↗
  • Nutzungsbedingungen
    www.startmail.com/terms-of-service…
    Öffnen ↗
ALTERNATIVES

Alternativen in dieser Kategorie

Proton Mail
Switzerland · Gegründet 2014
EU-SOUVERäN

Swiss end-to-end encrypted email by Proton AG (Geneva); 100M+ users, Foundation-controlled since June 2024.

E2E Öffentl. AVV Subprozessoren Open Source
FROM
€4/Mt.
CLOUD ACT
NONE
Tuta
Germany · Gegründet 2011
EU-SOUVERäN

Hannover-based end-to-end encrypted mail (formerly Tutanota); post-quantum crypto, own DE data centre, ISO 27001.

E2E Öffentl. AVV Subprozessoren Open Source
FROM
€3/Mt.
CLOUD ACT
NONE
Mailbox.org
Germany · Gegründet 2014
EU-SOUVERäN

Berlin-based private email + drive + meet + office bundle (Heinlein Support GmbH); ISO 27001 + BSI C5, €1/mo entry.

E2E Öffentl. AVV Subprozessoren Open Source
FROM
€1/Mt.
CLOUD ACT
NONE