mailbox.org

🇩🇪 DE · from €12/mo

4.3/5· 125 reviews across 3 portals

Berlin-based encrypted email, calendar and cloud storage with PGP in the browser and German servers only.

EU hostedGDPRISO 27001BSI C5 Type 1

Mailbox.org provides encrypted email, calendar and 20 GB of cloud storage from Berlin data centres. PGP and S/MIME encryption work directly in the webmail interface, and every paid plan includes a basic office suite with video calls, 50+ aliases and custom domains. ISO 27001 and BSI C5 Type 1 certified, GDPR-compliant, and used by journalists, lawyers and public-sector organisations.

Replaces

mailbox.org is sought as a European alternative to:

Apache OpenOffice Evernote Microsoft OneNote Microsoft Word Mozilla Thunderbird

Features

Email & Communication

Ad-free email with custom domains
PGP encryption for emails
Two-factor authentication (2FA)
Spam and virus protection
Email migration tool for importing existing emails

Productivity Suite

Calendar with CalDAV support
Contacts with CardDAV support
Office suite based on Open-Xchange (text, spreadsheet, presentations)
Cloud storage (Drive) with file sharing

Collaboration & Security

Video conferencing (Jitsi-based)
End-to-end encryption for sensitive data
EU-hosted servers (Germany)
GDPR-compliant data processing

Pricing

Standard

€3 per month

Email, calendar, address book
10 GB storage (Mail + Drive)
Custom domains supported
30-day free trial

Standard (Annual Payment)

€12 per year (€1 per month equivalent)

25% discount compared to monthly billing
Same features as monthly Standard plan
Suitable for long-term users

Pricing varies based on billing cycle and storage upgrades. Additional plans (e.g., Premium) may be available but are not detailed in the research.

EU Trust Profile

5 of 9 criteria verified with evidence, last checked 2026-08-03. Every ✓ links to its source.

Data Processing Agreement (DPA)
A GDPR-compliant Data Processing Agreement (DPA) is available for business customers via the account management console.
Evidence →
Trust center / security page
The data protection page serves as the trust center, detailing security and compliance measures.
Evidence →
EU data residencyBerlin (DE)
Customer data is hosted exclusively in German data centers in Berlin.
Evidence →
Public sub-processor listnot verified
ISO 27001Information Security Management System (ISMS)
The ISO 27001 certification confirms structured security management and risk control.
Evidence →
SOC 2not verified
BSI C5BSI Cloud Computing Compliance Criteria Catalogue (C5)
The BSI C5 certification confirms compliance with German cloud security criteria.
Evidence →
TISAXnot verified
German-language supportnot verified

Verified means: the claim was publicly documented at the linked source on the check date. The vendor's own information prevails.

Reviews

Recurring themes, synthesized from public reviews across portals.

What users value

Strong privacy focus with PGP encryption via Guard or Mailvelope plugin
Clean, user-friendly interface and intuitive setup for secure email
Integrated office suite (text, spreadsheets, presentations) and calendar for team collaboration
Affordable entry point with Light tier at €1/month for secure email
Servers exclusively in Germany, ensuring strict EU data protection (GDPR) compliance
Runs on renewable energy, aligning with sustainability requirements
Supports linking multiple business email accounts for centralized management
High security protocols and transparent data handling practices

Where users see room to improve

· Limited storage capacity, described as insufficient for business needs
· Extended onboarding (3–4 weeks) due to usability issues in the web interface
· Prepaid, non-refundable credit model lacks flexibility for some users

Ratings across portals

Linked facts, we bring ratings from every portal together in one place.

Feature, pricing and integration details are based on web research (as of 2026-08-02), without guarantee, errors are possible. The vendor's website prevails.