Aller au contenu
Vérifié indépendamment · Ré-audit trimestriel
EU VETTED

AliasVault

VéRIFIé
Alias e-mail · Netherlands
Fondé en 2024 · aliasvault.com ↗

Dutch sole proprietorship (XIVISOFT / Leendert de Borst), open-source password manager with built-in receive-only email aliases; email aliases cannot send or reply, only receive. Free cloud tier hosted in Germany, AGPL-3.0 and fully self-hostable.

En bref

AliasVault, dans la catégorie Alias e-mail, est un service sous contrôle européen avec Germany comme lieu d’hébergement et aucune exposition identifiée au CLOUD Act.

Notes d’évaluation

AliasVault is a product of XIVISOFT, a Dutch sole proprietorship (eenmanszaak) operated by founder Leendert de Borst, KVK 51592193 (vendor-stated, not independently cross-checked against the Dutch register); the registered address is stated only as "available upon request". The official cloud offering runs on the operator's own servers in Germany, within the EU, and the AGPL-3.0 source is fully self-hostable via Docker. No third-party trackers or US sub-processors are named in the Privacy Policy (a self-hosted Plausible.io instance is the only named service, run on AliasVault's own servers), so CLOUD Act exposure is assessed as none. The determining factor holding compliance_score at 3/5 despite the clean eu_owned and hosting profile is that no DPA and no sub-processors list are published, which this directory's rubric caps at 3/5 regardless of an otherwise clean sovereignty profile; AliasVault is also a young (2024-founded), single-founder operation without a formal customer-facing data-processing contract yet.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 aucun divulgué
Signaux vérifiés
Juridiction
  • Hébergement UE / adéquation
  • Opérateur UE / adéquation
  • Aucune exposition au CLOUD Act
Transparence
  • DPA public
  • Sous-traitants divulgués
  • Clients open source
  • Certification tierce
JUMP TO
OVERVIEW

À propos de AliasVault

AliasVault is a product of XIVISOFT, a Dutch sole proprietorship (eenmanszaak) operated by founder Leendert de Borst, KVK (Dutch Chamber of Commerce) number 51592193; the registered address is stated as "available upon request" rather than published, and no VAT number is stated. It combines a zero-knowledge password manager with built-in email-alias generation: every saved identity gets its own alias inbox inside the app. The official cloud offering (app.aliasvault.com) runs on the operator's own servers in Germany, within the EU; the Privacy Policy states this is "fully compliant with GDPR". The single most important buying fact is a structural limitation stated on AliasVault's own homepage: "Email aliases are receive-only, meaning you cannot send or reply to emails from your aliases", with a 10MB size limit on incoming mail. The core product is free and the vendor states it "will always remain that way"; Premium and Family tiers (higher limits, VIP alias domains, custom domains, automatic backups) are announced but not yet live as of this review. The client and server are open source under AGPL-3.0 (github.com/aliasvault/aliasvault, most recent release 0.30.0 on 2026-07-02) and fully self-hostable via Docker, which is also the only way to get a custom domain today, since none is available on the free cloud tier. No DPA or sub-processors list is published; the only named third party in the Privacy Policy is a self-hosted instance of Plausible.io analytics, run on AliasVault's own servers rather than Plausible's own hosted service.

SUB-PROCESSORS

Carte des sous-traitants · aucun divulgué

Source ↗
L'éditeur déclare zéro sous-traitant. Tout le traitement des données se fait en interne.
CERTIFICATIONS

Référentiels & certifications · aucune répertoriée

Nous avons vérifié le site de l'éditeur et les registres des organismes de certification. Aucune certification active trouvée à la date du dernier audit (2026-07-09).
FEATURES

Matrice de fonctionnalités

Domaine personnalisé Non
Réponse depuis l'alias Non
Transfert chiffré par PGP Non
Domaine catch-all Non
INTéGRATION & ACCèS
REST API No
SSO (SAML / OIDC) No
CONFORMITé & GOUVERNANCE
Audit log No
Self-host / on-prem option Yes
PRICING

Tarifs & paliers

GRATUIT
Tarifs sur mesure

Contactez l’éditeur pour les tarifs par palier ou volume.

Voir la page tarifs ↗
PUBLIC DOCUMENTS

Documents publics

L'éditeur ne publie pas de DPA public. Sans contrat de sous-traitance accessible publiquement, les petits clients européens ne peuvent pas signer eux-mêmes l'accord : cela est consigné comme absence de DPA publique (voir Notre méthode).
  • Contrat de sous-traitance (DPA)
    — manquant
    manquant
  • Liste des sous-traitants
    www.aliasvault.com/privacy-policy…
    Ouvrir ↗
  • Conditions d'utilisation
    www.aliasvault.com/terms-and-conditions…
    Ouvrir ↗
ALTERNATIVES

Alternatives dans cette catégorie

SimpleLogin
Switzerland · Fondé en 2019
BASé UE

Paris-founded (2019) email-alias service acquired by Proton AG in 2022; unlimited aliases, custom domains, PGP forwarding and catch-all on Premium, hosted across Proton/UpCloud data centres in DE, CH, NL and FR.

DPA public Sous-traitants Open source
FROM
€3.5/mois
CLOUD ACT
MINOR
addy.io
United Kingdom · Fondé en 2019
BASé UE

England-and-Wales-governed email-alias service (formerly AnonAddy), hosted in the Netherlands; unlimited aliases, PGP-encrypted forwarding and reply-from-alias on paid tiers, open-source and self-hostable. Its operating legal entity is not named in its own Terms or Privacy Policy.

DPA public Sous-traitants Open source
FROM
€0.87/mois
facturé annuellement
CLOUD ACT
MINOR
AdGuard Mail
Cyprus · Fondé en 2024
HéBERGé UE

Cyprus-registered (AdGuard Software Ltd) free/paid email-alias and temp-mail service that reached general availability (v1.0) in June 2025; core forwarding runs on Amazon SES (US), and no DPA is published.

DPA public Sous-traitants Open source
FROM
€2.99/mois
CLOUD ACT
MATERIAL