LC-Connect
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
LC by vBoxx GmbH
Business email, calendar, contacts, tasks, notes and video meetings from LC by vBoxx GmbH, on the group's own hardware near Frankfurt with a Dutch backup site; an integrated Microsoft 365 / Outlook alternative (TLS, not E2E).
LC-Connect is an EU-owned service hosted in Germany, with no identified CLOUD Act exposure. It is listed under Private email.
Assessment notes
LC-Connect is the email-and-groupware component of the leitzcloud suite, operated by LC by vBoxx GmbH (Frankfurt am Main, HRB 117087; part of the Dutch vBoxx group). It combines business email, calendar, contacts, tasks, notes, and online video meetings on a SmarterMail installation the group runs on its own EU hardware. Mailboxes are stored at maincubes FRA01 in Offenbach am Main, near Frankfurt, per the vendor's statement to the directory (October 2026); the group's backup site is Greenhouse Datacenters in Naaldwijk, Netherlands, and the webmail and mail front end answers from a Dutch network. The vendor's pages do not yet state the LC-Connect storage site themselves. EU-owned, EU-hosted, no US provider in the chain, no CLOUD Act exposure. Encryption is TLS in transit plus server-side at rest; it is not zero-access end-to-end encrypted, so it is positioned as an EU-hosted Microsoft 365 / Outlook alternative for organisations that want integrated collaboration inside EU infrastructure rather than a zero-knowledge mailbox. Held at 4/5 because the AVV is issued through the customer portal rather than published at a public URL. No LC-Connect-specific sub-processor list is published, and ISO/IEC 27001 is recorded at infrastructure level because the certificate in force names the sister company vBoxx B.V.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- — not disclosed
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
End-to-end encryption: No
-
Public DPA: Not assessed
-
Sub-processors disclosed: No
-
Open-source clients: No
-
Third-party certification: No
Jump to
About LC-Connect
LC-Connect is the communication and collaboration component of the leitzcloud suite, operated by LC by vBoxx GmbH (Frankfurt am Main; part of the Dutch vBoxx group). It bundles business email, calendar, contacts, tasks, notes, and online video meetings into a single platform, with Exchange web services, MAPI and ActiveSync support, and integration into leitzcloud storage so attachments can be sent as links or files from the user's cloud. The positioning is an integrated, EU-hosted alternative to Microsoft 365 / Outlook (and Google Workspace) for businesses that want their communications and organisational data kept inside EU infrastructure.
Data runs on the group's own hardware, on a SmarterMail installation (software from SmarterTools, a US vendor, licensed and run on the group's own servers, so the software maker is a licensor, not a processor of customer data). Mailboxes are stored at maincubes FRA01 in Offenbach am Main, near Frankfurt, with Greenhouse Datacenters in Naaldwijk, Netherlands as the group's backup site since May 2026. The vendor's own pages state that footprint for leitzcloud storage and not yet for LC-Connect specifically; the storage site for LC-Connect is the vendor's statement to the directory in October 2026, after the directory had noted that the LC-Connect webmail and mail front end (connect.leitz-cloud.com) answers from a Dutch network. Either way the data stays on the group's own EU hardware: an EU-owned, EU-hosted posture with no CLOUD Act exposure. ISO/IEC 27001 is certified by TÜV NORD for the group, but the certificate in force names vBoxx B.V. and its appendix of covered entities is not published, so the directory records it at infrastructure level. Encryption is TLS in transit and server-side at rest. This is business groupware, not a zero-access end-to-end-encrypted mailbox like Proton Mail or Tuta, which is the right distinction for readers comparing on encryption model. The AVV is requested in the customer portal and supplied for signature; it is not published at a public URL. Pricing on monthly billing: Starter EUR 4.99 and Business EUR 6.99 per user per month, plus EUR 1 per 10 GB of storage. Best fit: DACH SMBs and public-sector-adjacent teams that want one EU-hosted environment for mail, calendar, and meetings rather than stitching together separate tools.
Sub-processor map · not disclosed
Frameworks & certifications · none listed
Held by the provider that operates the hosting, not by LC-Connect itself.
Capability matrix
Table 1Capabilities of LC-Connect
Integration & access
Compliance & governance
Pricing & tiers
Public documents
-
on requestData Processing Addendum (DPA)— on request
-
missingSub-processors list— missing
-
OpenTerms of Serviceleitzcloud.eu/agb-geschaeftsbedingungen…
Alternatives in this category
-
Switzerland · €4/moEU-BasedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
E2E: Yes Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €3/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
E2E: Yes Public DPA: No Sub-processors: Yes Open source: No -
-
Germany · €1/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
E2E: No Public DPA: Not assessed Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Proton Mail
Switzerland
|
EU-Based | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
E2E: Yes
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€4/mo |
Tuta
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
E2E: Yes
Public DPA: No
Sub-processors: Yes
Open source: No
|
€3/mo |
Mailbox.org
Germany
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
E2E: No
Public DPA: Not assessed
Sub-processors: Yes
Open source: No
|
€1/mo |