Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Soverin

VERIFIED
Private email · Netherlands
Founded 2014 · soverin.com ↗

Independent Dutch paid email (from €3.25/mo); ISO 27001 + NIS2 Ready, all data in Netherlands, full IMAP/SMTP/CalDAV/CardDAV compatibility.

In short

Soverin, in the Private email category, is an EU-owned service with Netherlands as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Soverin is operated by Soverin B.V. (Amsterdam NL, KvK 61552275, founded ~2014), an independent Dutch email provider with paid-only mailboxes (from €3.25/mo), all data hosted in the Netherlands under EU law, EU-owned, no US parent, no CLOUD Act exposure. Holds ISO 27001 / 14001 / 9001, NIS2 Ready Mark, full Internet.nl score, NEN 7510 in progress. Gaps: no publicly linked DPA, no public sub-processors list (privacy statement mentions one unnamed external first-line support partner); the service is TLS-encrypted, not end-to-end encrypted, a deliberate trade-off for full IMAP/SMTP/CalDAV/CardDAV compatibility with any client.

CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Privacy
  • End-to-end encryption
    TLS in transit; no end-to-end encryption.
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Soverin

Soverin is operated by Soverin B.V. (Amsterdam, KvK 61552275) and has been running since around 2014 as an independent, self-funded Dutch email provider: no VC backing, no US parent. The service is paid-only (from €3.25/mo / €39/yr, with optional .nl domain at €13/yr); there is no free tier, which is consistent with the "no ads, no profiling, no third-party data" pitch. Mail, calendar and contacts are reachable via standard IMAP / SMTP / CalDAV / CardDAV with any client. Soverin deliberately does not implement end-to-end encryption in the Proton/Tuta sense, in exchange for that full protocol compatibility; data is encrypted in transit (TLS) and at rest on the storage layer, and per the privacy statement is processed only within the EU. Certifications held: ISO 27001, ISO 14001, ISO 9001, NIS2 Ready Mark, perfect Internet.nl score (DNS / email / web / IPv6); NEN 7510 (Dutch healthcare InfoSec) listed as in-progress. The privacy statement names one unnamed sub-processor (external first-line customer support, under DPA + ISO scope) but the document is not a publicly linked customer-facing DPA, the key remaining gap given the otherwise clean EU ownership, EU hosting, and multiple ISO certifications. Positioning is squarely against US free webmail (no CLOUD Act exposure); UI in English and Dutch.

SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Capability matrix

Encryption TLS
Mailbox storage 25 GB
Email aliases Unlimited
Custom domain Yes
IMAP / SMTP Yes
Calendar Yes
Contacts Yes
INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €3/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement. This is recorded as no public DPA (see How we assess).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    soverin.com/about…
    Open ↗
ALTERNATIVES

Alternatives in this category

Proton Mail
Switzerland · Founded 2014
EU-SOVEREIGN

Swiss end-to-end encrypted email by Proton AG (Geneva); 100M+ users, Foundation-controlled since June 2024.

E2E Public DPA Sub-processors Open source
FROM
€4/mo
CLOUD ACT
NONE
Tuta
Germany · Founded 2011
EU-SOVEREIGN

Hannover-based end-to-end encrypted mail (formerly Tutanota); post-quantum crypto, own DE data centre, ISO 27001.

E2E Public DPA Sub-processors Open source
FROM
€3/mo
CLOUD ACT
NONE
Mailbox.org
Germany · Founded 2014
EU-SOVEREIGN

Berlin-based private email + drive + meet + office bundle (Heinlein Support GmbH); ISO 27001 + BSI C5, €1/mo entry.

E2E Public DPA Sub-processors Open source
FROM
€1/mo
CLOUD ACT
NONE