Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Kolab Now

VERIFIED
Private email · Switzerland
Founded 2013 · kolabnow.com ↗

Swiss open-source Kolab groupware SaaS (Apheleia IT AG, Bern; Kolab Systems since 2010, Kolab Now since 2013), board incl. FSF Europe founder Georg Greve.

Why this score?

Kolab Now is operated by Apheleia IT AG in Bern, Switzerland (formerly Kolab Systems, founded 2010 in Zürich; Kolab Now launched as public beta in January 2013 and as a paid GA service on 1 August 2013) — built on the fully open-source Kolab groupware that Apheleia maintains, with a board of directors that includes Georg Greve (founding president of Free Software Foundation Europe), Michael Moser (co-founder of Adfinis, Switzerland''s leading open-source integrator) and Philipp Koch (co-founder of Swiss hosting company Nine.ch) — exceptionally strong open-source-Swiss governance and pedigree, Swiss data centres, no US ties — rated 3/5: an otherwise clean sovereignty pick, but Kolab Now does not publish a publicly accessible DPA (customers are directed to a DPO contact rather than a self-serve document); under EU Vetted''s rubric a DPA that small EU buyers cannot self-serve caps the score at 3/5.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About Kolab Now

Kolab Now is operated by Apheleia IT AG, a Swiss software-freedom company headquartered in Bern. The legal entity was originally founded as **Kolab Systems** in Zürich in 2010 and was later renamed Apheleia IT AG. The Kolab Now consumer/SMB SaaS launched as a public beta in January 2013 and became a paid generally-available service on 1 August 2013. The product is a managed hosting of the **fully open-source Kolab groupware platform** that the same company develops and maintains — covering email, calendars, contacts, tasks, files, and notes via standard open protocols (IMAP, SMTP, CalDAV, CardDAV) so that any standard mail/calendar client can connect. The governance and pedigree are unusually strong for the privacy-email category. The Apheleia IT AG board includes **Georg Greve** (CEO; founding president of the **Free Software Foundation Europe**), CTO Jeroen van Meeuwen, **Michael Moser** (CCO; co-founder of **Adfinis**, Switzerland's leading open-source integrator), and **Philipp Koch** (co-founder of Swiss hosting company **Nine.ch**). That combination — a free-software figurehead plus a Swiss open-source integrator plus a Swiss hosting operator on the same board — is uncommon and translates into a structurally transparent posture: the product is open-source software run by people whose careers are documented free-software / open-infrastructure work. For an EU-sovereignty audit Kolab Now is a clean Swiss pick. The legal entity is Swiss-incorporated, the data is hosted in Switzerland, Switzerland holds an EU adequacy decision under Art. 45 GDPR (so EU↔CH transfers need no SCCs), and there is no US parent and no US-VC participation. The compliance score is held at 4/5 only because no public DPA / sub-processors URLs and no formal ISO 27001 attestation were surfaced at audit — a documentation gap rather than a structural concern. Pricing in CHF (per the public site / blog): the standard groupware individual account is **CHF 8.99/month**, the email-only individual account is **CHF 4.55/month**, and the on-site (self-host) Apheleia "Kolab on-site Email & Groupware" subscription starts at **CHF 2.25 per user/month** for fewer than 50 users. EUR equivalents recorded approximately. Best fit: privacy-conscious EU users who want Swiss-jurisdiction email/groupware on top of a transparent, fully-open-source software stack — and any procurement-grade buyer who specifically values FSF-Europe / Adfinis / Nine.ch governance over a brand-name marketing pitch.
SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-15).
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
from €5/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    kolabnow.com/content…
    Open ↗
ALTERNATIVES

Alternatives in this category