Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Posteo

VERIFIED
Private email · Germany
Founded 2009 · posteo.de ↗

Berlin one-person-shop privacy email at €1/mo (Posteo e.K., since 2009); anonymous signup, BSI TR-03108 certified.

In short

Posteo, in the Private email category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Posteo e.K. (Berlin DE, since 2009) is a small founder-owned privacy-maximalist email service: €1/mo flat, anonymous signup + anonymous payment, German data centres, 100% renewable energy (Green Planet Energy), BSI TR-03108 v2 certified for secure email transport, public transparency reports for authority requests; PGP + S/MIME end-to-end encryption support; EU-owned, EU-hosted, no CLOUD Act exposure.

CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Privacy
  • End-to-end encryption
    Optional at-rest inbound encryption with your PGP key; not zero-access by default.
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Posteo

Posteo (Berlin, founded 2009, Posteo e.K., owner Patrik Löhr) is the small-and-cult European privacy email service: €1/mo flat-rate for 4GB, anonymous signup and anonymous payment options (postal cash, no payment-to-account link kept), all servers in German data centres, 100% renewable energy from Green Planet Energy, no advertising, no profiling. BSI TR-03108 v2 certified (Bundesamt für Sicherheit in der Informationstechnik standard for secure email transport). Supports PGP and S/MIME end-to-end encryption. Publishes annual transparency reports for authority requests. The Guardian and Stiftung Warentest both cite Posteo as a global leader in secure email. Single-vendor concentration risk because of the tiny team, but for personal privacy-first use this is the cleanest possible pick.

SUB-PROCESSORS

Sub-processor map · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-12).
FEATURES

Capability matrix

Encryption TLS
Mailbox storage 4 GB
Email aliases 2 aliases
Custom domain No
IMAP / SMTP Yes
Calendar Yes
Contacts Yes
INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €1/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

DPA accessibility is not scored for this listing. Self-hosted or local software, vendors that are not data processors, and products carrying a SecNumCloud, EUCS or BSI C5 certification are not assessed on DPA accessibility. See How we assess.
  • Data Processing Addendum (DPA)
    — not assessed
    n/a
  • Sub-processors list
    posteo.de/en…
    Open ↗
ALTERNATIVES

Alternatives in this category

Proton Mail
Switzerland · Founded 2014
EU-SOVEREIGN

Swiss end-to-end encrypted email by Proton AG (Geneva); 100M+ users, Foundation-controlled since June 2024.

E2E Public DPA Sub-processors Open source
FROM
€4/mo
CLOUD ACT
NONE
View profile →
Tuta
Germany · Founded 2011
EU-SOVEREIGN

Hannover-based end-to-end encrypted mail (formerly Tutanota); post-quantum crypto, own DE data centre, ISO 27001.

E2E Public DPA Sub-processors Open source
FROM
€3/mo
CLOUD ACT
NONE
View profile →
Mailbox.org
Germany · Founded 2014
EU-SOVEREIGN

Berlin-based private email + drive + meet + office bundle (Heinlein Support GmbH); ISO 27001 + BSI C5, €1/mo entry.

E2E Public DPA Sub-processors Open source
FROM
€1/mo
CLOUD ACT
NONE
View profile →
See all private email alternatives →