Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Kolab Now

VERIFIED
Private email · Switzerland
Founded 2013 · kolabnow.com ↗

Swiss open-source Kolab groupware SaaS (Apheleia IT AG, Bern; Kolab Systems since 2010, Kolab Now since 2013), board incl. FSF Europe founder Georg Greve.

In short

Kolab Now, in the Private email category, is an EU-owned service with Switzerland as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Kolab Now is operated by Apheleia IT AG in Bern, Switzerland (formerly Kolab Systems, founded 2010 in Zürich; Kolab Now launched as public beta in January 2013 and as a paid GA service on 1 August 2013), built on the fully open-source Kolab groupware that Apheleia maintains, with a board of directors that includes Georg Greve (founding president of Free Software Foundation Europe), Michael Moser (co-founder of Adfinis, Switzerland''s leading open-source integrator) and Philipp Koch (co-founder of Swiss hosting company Nine.ch); exceptionally strong open-source-Swiss governance and pedigree, Swiss data centres, no US ties, no CLOUD Act exposure. Gap: Kolab Now does not publish a publicly accessible DPA (customers are directed to a DPO contact rather than a self-serve document); no public sub-processors list and no formal ISO 27001 attestation surfaced at audit.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Privacy
  • End-to-end encryption
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Kolab Now

Kolab Now is operated by Apheleia IT AG, a Swiss software-freedom company headquartered in Bern. The legal entity was originally founded as Kolab Systems in Zürich in 2010 and was later renamed Apheleia IT AG. The Kolab Now consumer/SMB SaaS launched as a public beta in January 2013 and became a paid generally-available service on 1 August 2013. The product is a managed hosting of the fully open-source Kolab groupware platform that the same company develops and maintains, covering email, calendars, contacts, tasks, files, and notes via standard open protocols (IMAP, SMTP, CalDAV, CardDAV) so that any standard mail/calendar client can connect.

The governance and pedigree are unusually strong for the privacy-email category. The Apheleia IT AG board includes Georg Greve (CEO; founding president of the Free Software Foundation Europe), CTO Jeroen van Meeuwen, Michael Moser (CCO; co-founder of Adfinis, Switzerland's leading open-source integrator), and Philipp Koch (co-founder of Swiss hosting company Nine.ch). That combination (a free-software figurehead plus a Swiss open-source integrator plus a Swiss hosting operator on the same board) is uncommon and translates into a structurally transparent posture: the product is open-source software run by people whose careers are documented free-software / open-infrastructure work.

For an EU-sovereignty audit Kolab Now is a clean Swiss pick. The legal entity is Swiss-incorporated, the data is hosted in Switzerland, Switzerland holds an EU adequacy decision under Art. 45 GDPR (so EU↔CH transfers need no SCCs), and there is no US parent and no US-VC participation. The only documentation gaps are: no public DPA or sub-processors URLs and no formal ISO 27001 attestation were surfaced at audit, a documentation gap rather than a structural concern.

Pricing in CHF (per the public site / blog): the standard groupware individual account is CHF 8.99/month, the email-only individual account is CHF 4.55/month, and the on-site (self-host) Apheleia "Kolab on-site Email & Groupware" subscription starts at CHF 2.25 per user/month for fewer than 50 users. EUR equivalents recorded approximately. Best fit: privacy-conscious EU users who want Swiss-jurisdiction email/groupware on top of a transparent, fully-open-source software stack, and any procurement-grade buyer who specifically values FSF-Europe / Adfinis / Nine.ch governance over a brand-name marketing pitch.

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-15).
FEATURES

Capability matrix

Encryption TLS
Mailbox storage 5 GB
Custom domain Yes
IMAP / SMTP Yes
Calendar No
Contacts No
INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
from €5/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    kolabnow.com/content…
    Open ↗
ALTERNATIVES

Alternatives in this category

Proton Mail
Switzerland · Founded 2014
EU-SOVEREIGN

Swiss end-to-end encrypted email by Proton AG (Geneva); 100M+ users, Foundation-controlled since June 2024.

E2E Public DPA Sub-processors Open source
FROM
€4/mo
CLOUD ACT
NONE
Tuta
Germany · Founded 2011
EU-SOVEREIGN

Hannover-based end-to-end encrypted mail (formerly Tutanota); post-quantum crypto, own DE data centre, ISO 27001.

E2E Public DPA Sub-processors Open source
FROM
€3/mo
CLOUD ACT
NONE
Mailbox.org
Germany · Founded 2014
EU-SOVEREIGN

Berlin-based private email + drive + meet + office bundle (Heinlein Support GmbH); ISO 27001 + BSI C5, €1/mo entry.

E2E Public DPA Sub-processors Open source
FROM
€1/mo
CLOUD ACT
NONE