Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Posteo

VERIFIED
Private email · Germany
Founded 2009 · posteo.de ↗

Berlin one-person-shop privacy email at €1/mo (Posteo e.K., since 2009); anonymous signup, BSI TR-03108 certified.

Why this score?

Posteo e.K. (Berlin DE, since 2009) is a small founder-owned privacy-maximalist email service — €1/mo flat, anonymous signup + anonymous payment, German data centres, 100% renewable energy (Green Planet Energy), BSI TR-03108 v2 certified for secure email transport, public transparency reports for authority requests; PGP + S/MIME end-to-end encryption support; 5/5 with no CLOUD Act exposure.

SCORE
5.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
— not disclosed
JUMP TO
OVERVIEW

About Posteo

**Posteo** (Berlin, founded 2009, Posteo e.K. — owner Patrik Löhr) is the small-and-cult European privacy email service — **€1/mo flat-rate for 4GB**, **anonymous signup** and **anonymous payment** options (postal cash, no payment-to-account link kept), all servers in German data centres, **100% renewable energy** from Green Planet Energy, no advertising, no profiling. **BSI TR-03108 v2** certified (Bundesamt für Sicherheit in der Informationstechnik standard for secure email transport). Supports PGP and S/MIME end-to-end encryption. Publishes annual transparency reports for authority requests. The Guardian and Stiftung Warentest both cite Posteo as a global leader in secure email. Single-vendor concentration risk because of the tiny team, but for personal privacy-first use this is the cleanest possible pick.
SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-12).
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API No
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €1/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

DPA accessibility is not scored for this listing. Self-hosted or local software, vendors that are not data processors, and products carrying a SecNumCloud, EUCS or BSI C5 certification are not assessed on DPA accessibility — see How we score.
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — not assessed
    n/a
  • Sub-processors list
    — missing
    missing
ALTERNATIVES

Alternatives in this category

Infomaniak Mail (kSuite)
Switzerland

Swiss email + groupware (Infomaniak Group SA, Geneva, since 1994), own Swiss DCs, ISO 27001 + B Corp 2025, free tier with @ik.me address.
Mailbox.org
Germany

Berlin-based private email + drive + meet + office bundle (Heinlein Support GmbH); ISO 27001 + BSI C5, €1/mo entry.
Proton Mail
Switzerland

Swiss end-to-end encrypted email by Proton AG (Geneva); 100M+ users, Foundation-controlled since June 2024.
See all private email alternatives →