Paris-founded (2019) email-alias service acquired by Proton AG in 2022; unlimited aliases, custom domains, PGP forwarding and catch-all on Premium, hosted across Proton/UpCloud data centres in DE, CH, NL and FR.
- FROM
- €3.5/mo
- CLOUD ACT
- MINOR
A single roll-up of ownership and CLOUD Act exposure.
England-and-Wales-governed email-alias service (formerly AnonAddy), hosted in the Netherlands; unlimited aliases, PGP-encrypted forwarding and reply-from-alias on paid tiers, open-source and self-hostable. Its operating legal entity is not named in its own Terms or Privacy Policy.
addy.io, in the Email aliasing category, is a European service with Netherlands as its hosting location and at most minor, transient US exposure under the CLOUD Act.
addy.io's own Terms of Use state governing law as "the law of England and Wales", but neither the Terms nor the Privacy Policy name an operating legal entity, company number, or registered address anywhere on the site. Public sources disagree on who actually operates the service (a comparison repository says "Netherlands", other web results say "Addy Pty Ltd" in Geelong, Australia), and neither claim is corroborated by any addy.io primary source, so country_iso is left null and ownership_signal is other. Mailbox/alias data at rest sits on servers in the Netherlands (UpCloud); Stripe and NOWPayments handle payments, Amazon SES sends the newsletter, and Cloudflare Turnstile is a login captcha, none of which are the primary data-at-rest path, so CLOUD Act exposure is assessed as minor rather than material. The determining factor for compliance_score is that no DPA is published anywhere on the site, which caps this listing at 3/5 regardless of the otherwise reasonable EU hosting posture.
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Where ultimate control over the operating company sits.
Exposure depends on how you run this product.
Vendor-operated: the sub-processors below apply.
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Deploy on your own EU infrastructure and you control hosting and every sub-processor.
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
addy.io (renamed from AnonAddy in 2024) was created in 2019 by developer Will Browning and offers open-source email aliasing under AGPL-3.0, self-hostable via Docker (github.com/anonaddy/anonaddy) or usable as a hosted service. Neither the Terms of Use nor the Privacy Policy on addy.io names an operating legal entity, company number, or registered address; the Terms state only that they "shall be governed by and construed in accordance with the law of England and Wales". Public sources disagree on who operates the service: a public comparison repository lists the jurisdiction as "Netherlands", while other web results describe the operator as "Addy Pty Ltd" in Geelong, Australia; neither claim is corroborated by any addy.io primary source, so this listing records the legal entity and country_iso as not established. The Privacy Policy states servers are located in the Netherlands (UpCloud); named third parties are Stripe and NOWPayments for payments, Amazon SES for newsletter delivery, and Cloudflare Turnstile for captcha. Free, Lite ($1/month billed yearly) and Pro ($3/month billed annually, or $4/month billed monthly) tiers scale from 10 to unlimited aliases; Lite and Pro add custom domains, catch-all (enabled by default on custom domains), PGP-encrypted forwarding (bring-your-own GPG/OpenPGP key), and reply-from-alias, the last of which is deliberately withheld from the Free plan to curb spam and abuse. addy.io passed an independent security audit by Securitum in September 2023 with no significant vulnerabilities found, though this is a one-off audit rather than a recurring certification.
Newsletter delivery
Captcha / bot protection on login and registration
Card payment processing
Cryptocurrency payment processing (yearly plans)
Hosting of alias and forwarded-email data at rest (servers located in the Netherlands)
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Amazon Simple Email Service (SES) | United States | Newsletter delivery | US |
| Cloudflare Turnstile | United States | Captcha / bot protection on login and registration | US |
| Stripe | United States | Card payment processing | US |
| NOWPayments | Netherlands | Cryptocurrency payment processing (yearly plans) | EU |
| UpCloud | Finland | Hosting of alias and forwarded-email data at rest (servers located in the Netherlands) | EU |
Paris-founded (2019) email-alias service acquired by Proton AG in 2022; unlimited aliases, custom domains, PGP forwarding and catch-all on Premium, hosted across Proton/UpCloud data centres in DE, CH, NL and FR.
Cyprus-registered (AdGuard Software Ltd) free/paid email-alias and temp-mail service that reached general availability (v1.0) in June 2025; core forwarding runs on Amazon SES (US), and no DPA is published.
Dutch sole proprietorship (XIVISOFT / Leendert de Borst), open-source password manager with built-in receive-only email aliases; email aliases cannot send or reply, only receive. Free cloud tier hosted in Germany, AGPL-3.0 and fully self-hostable.