Infomaniak Mail (kSuite)
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Swiss email + groupware (Infomaniak Group SA, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, free tier with @ik.me address.
Infomaniak Mail (kSuite) is an EU-owned service hosted in Switzerland, with no identified CLOUD Act exposure. It is listed under Private email.
Assessment notes
Infomaniak Mail is the email pillar of kSuite, the Google-Workspace-style bundle (Mail, Drive, Calendar, Contacts, kMeet, kPaste, kChat, Office) operated by Infomaniak Group SA (Geneva, Switzerland; founded 1994 by Boris Siegenthaler and Fabian Lucchi; still independent, privately held, founder-led with no VC/PE on record), built on Infomaniak's own Swiss data centres (which kDrive runs on too, full ownership cross-reference in the kdrive listing), ISO 27001 + ISO 9001 + ISO 14001 + ISO 50001 + B Corp 2025 certified, with a free 'My kSuite' tier offering 20 GB at @ik.me / @etik.com addresses; founder-owned, own Swiss data centres, no CLOUD Act exposure, public DPA available, the strongest broad-stack Swiss collaboration pick alongside Proton Mail.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned EU-incorporated and EU-controlled; no significant US ownership.
-
European This listing Swiss/EEA-owned, with no significant US ownership; treated as European.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
End-to-end encryption: NoTLS in transit; no native end-to-end encryption.
-
Public DPA: Yes
-
Sub-processors disclosed: No
-
Open-source clients: No
-
Third-party certification: Yes
Jump to
About Infomaniak Mail (kSuite)
Infomaniak Mail is the email and groupware product within kSuite: Infomaniak Group SA's integrated Workspace-style bundle that pairs email with Drive, Calendar, Contacts, kMeet (video conferencing), kPaste (encrypted notes/snippets), kChat (team messaging) and an Office Suite. The vendor is Infomaniak Group SA in Geneva, founded in 1994 by Boris Siegenthaler and Fabian Lucchi (growing out of a 1990 user group), one of the longest-running independent European hosting companies, privately held, founder-led, with no venture-capital or private-equity investors anywhere on the cap table. The kDrive listing in this directory documents the same vendor in full; this entry mirrors that ownership and infrastructure context.
For an EU-sovereignty audit Infomaniak is among the strongest Swiss listings in this directory. The compliance footprint is unusually broad: ISO/IEC 27001 since June 2018, plus ISO 9001 (quality), ISO 14001 (environmental), ISO 50001 (energy), and B Corp certification in 2025. Switzerland holds an EU adequacy decision under Art. 45 GDPR, so transfers EU↔CH are SCC-free. All customer data is stored exclusively on Swiss-located infrastructure operated by Infomaniak itself; the latest data centre is built into the basement of a participatory housing cooperative and recycles 100% of consumed electricity as heat into a local district-heating network warming approximately 6,000 homes per year, among the most genuinely sustainable hosting operations in Europe.
Pricing is freemium and notably generous at the entry tier. My kSuite is a free tier offering 20 GB of email + Drive storage at an @ik.me or @etik.com address, with kMeet, kChat, kPaste and Office included, one of the most complete free privacy-email-and-collaboration offers in the European market. Paid kSuite tiers add custom-domain support, larger storage, admin controls, and SLA, scaling by user count and storage; Standard is in the rough region of €5-6/user/month and Pro around €11/user/month (per the public pricing page; pricing page rendered partially to automated fetching at audit, so EUR figures are approximate). Best fit: every Swiss-jurisdiction-aware EU user who wants email + a full collaboration stack from a single founder-led independent provider, and any procurement-grade buyer wanting an integrated Workspace alternative to Google/Microsoft. Together with Proton Mail, kSuite completes the directory's two-pillar Swiss-sovereignty email shortlist.
Sub-processor map · not disclosed
Frameworks & certifications
Capability matrix
Table 1Capabilities of Infomaniak Mail (kSuite)
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
Switzerland · €4/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
E2E: Yes Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €3/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
E2E: Yes Public DPA: No Sub-processors: Yes Open source: No -
-
Germany · €1/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
E2E: No Public DPA: Not assessed Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Proton Mail
Switzerland
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
E2E: Yes
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€4/mo |
Tuta
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
E2E: Yes
Public DPA: No
Sub-processors: Yes
Open source: No
|
€3/mo |
Mailbox.org
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
E2E: No
Public DPA: Not assessed
Sub-processors: Yes
Open source: No
|
€1/mo |