Skip to content
Independently verified · Quarterly re-audit
EU VETTED

SimpleLogin

VERIFIED
Email aliasing · Switzerland
Founded 2019 · simplelogin.io ↗

Paris-founded (2019) email-alias service acquired by Proton AG in 2022; unlimited aliases, custom domains, PGP forwarding and catch-all on Premium, hosted across Proton/UpCloud data centres in DE, CH, NL and FR.

In short

SimpleLogin, in the Email aliasing category, is a European service with Switzerland as its hosting location and at most minor, transient US exposure under the CLOUD Act.

Assessment notes

SimpleLogin is operated by Proton AG (Geneva, Switzerland, company number CHE-354.686.492), the same legal entity behind Proton Mail, following its April 2022 acquisition of the Paris-founded SimpleLogin team. Alias and mailbox data is hosted on Proton's own servers and on UpCloud, across data centres in Germany, Switzerland, the Netherlands and France, all EU/EEA or Swiss jurisdictions, so no core data flows through US infrastructure. Proton AG publishes a general Data Processing Agreement covering "email, calendar, drive and other services", which is publicly accessible without login but does not name SimpleLogin explicitly among the covered products. Named sub-processors are Paddle and Apple for payments, hCaptcha for bot protection, Cloudflare for DNS, and Zendesk for support tickets: all ancillary, none touching alias or forwarded-email content at rest, which keeps CLOUD Act exposure minor rather than material. The determining factor holding this listing at 4/5 rather than 5/5 is that the DPA is a company-wide document rather than a SimpleLogin-specific one, combined with a longer list of ancillary US-owned sub-processors than Proton's own mail-only listing carries.

CLOUD ACT
OWNERSHIP
SUB-PROCS
9 · 5 US
CLOUD Act by deployment

Exposure depends on how you run this product.

Hosted SaaS (default)

Vendor-operated: the sub-processors below apply.

Self-hosted (open-source)

Deploy on your own EU infrastructure and you control hosting and every sub-processor.

Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
  • Card-free payment available
    Accepts cryptocurrency via Coinbase Commerce and SEPA/ACH/BACS wire transfer via Paddle, alongside cards.
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About SimpleLogin

SimpleLogin was founded in Paris in 2019 by Son Nguyen Kim, a Vietnamese-French engineer and former Criteo machine-learning researcher, and acquired by Proton AG (Geneva, Switzerland, company number CHE-354.686.492) in April 2022; the founding team went on to build Proton Pass. SimpleLogin is now legally operated by Proton AG rather than a separate French entity. Data is hosted on Proton's own servers and on UpCloud, across data centres in Germany, Switzerland, the Netherlands and France; no single country is stated as the primary location. The Free plan includes 10 aliases, 1 mailbox, reply-from-alias, browser extensions and mobile apps; Premium (from $4/month billed monthly, or $36/year billed annually) adds unlimited aliases, unlimited custom domains, catch-all domains, five subdomains, unlimited mailboxes and PGP encryption of forwarded mail. The client and server code is open source under AGPL-3.0 and self-hostable via Docker (github.com/simple-login/app). Named sub-processors: Paddle (card/PayPal payments), Apple (iOS in-app payments), hCaptcha (bot protection on login/register), Cloudflare (DNS), and Zendesk (support tickets); none of these touch alias or forwarded-email content at rest. Proton AG publishes a general Data Processing Agreement, but it does not name SimpleLogin explicitly among covered services.

SUB-PROCESSORS

Sub-processor map · 9

Source ↗
  • Apple US
    United States

    iOS in-app payment processing

  • Cloudflare US
    United States

    DNS

  • Coinbase Commerce US
    United States

    Cryptocurrency payment processing

  • hCaptcha US
    United States

    Bot protection on login and registration

  • Zendesk US
    United States

    Support ticketing

  • Paddle.com Market Ltd non-US
    United Kingdom

    Card and PayPal payment processing

  • Plausible Analytics EU
    Estonia

    Privacy-aware website analytics

  • Proton AG EU
    Switzerland

    Operator and primary hosting of alias and mailbox data at rest

  • UpCloud EU
    Finland

    Hosting across data centres in Germany, Switzerland, the Netherlands and France

5 of 9 sub-processors are US-incorporated. Limited CLOUD Act exposure via these ancillary sub-processors.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-07-10).
FEATURES

Capability matrix

Email aliases 10 aliases
Custom domain Yes
Reply from alias Yes
PGP-encrypted forwarding Yes
Catch-all domain Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option Yes
PRICING

Pricing & tiers

FREEMIUM
from €3.5/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    proton.me/legal…
    Open ↗
  • Sub-processors list
    simplelogin.io/privacy…
    Open ↗
  • Terms of Service
    simplelogin.io/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category

addy.io
United Kingdom · Founded 2019
EU-BASED

England-and-Wales-governed email-alias service (formerly AnonAddy), hosted in the Netherlands; unlimited aliases, PGP-encrypted forwarding and reply-from-alias on paid tiers, open-source and self-hostable. Its operating legal entity is not named in its own Terms or Privacy Policy.

Public DPA Sub-processors Open source
FROM
€0.87/mo
billed annually
CLOUD ACT
MINOR
View profile →
AdGuard Mail
Cyprus · Founded 2024
EU-HOSTED

Cyprus-registered (AdGuard Software Ltd) free/paid email-alias and temp-mail service that reached general availability (v1.0) in June 2025; core forwarding runs on Amazon SES (US), and no DPA is published.

Public DPA Sub-processors Open source
FROM
€2.99/mo
CLOUD ACT
MATERIAL
View profile →
AliasVault
Netherlands · Founded 2024
EU-SOVEREIGN

Dutch sole proprietorship (XIVISOFT / Leendert de Borst), open-source password manager with built-in receive-only email aliases; email aliases cannot send or reply, only receive. Free cloud tier hosted in Germany, AGPL-3.0 and fully self-hostable.

Public DPA Sub-processors Open source
FROM
—
CLOUD ACT
NONE
View profile →
See all email aliasing alternatives →