Disroot vs Mailbox.org Comparison
| Feature | ||
|---|---|---|
| Overview | ||
| Rating | 4.8 | 6.8 |
| Pricing |
Show billing detailsHide billing details
|
Show billing detailsHide billing details
|
| Free tier | Free tierShow detailsHide details1 GB mailbox at no cost, no time limit, no feature gating versus paid storage tiers — the only difference paid tiers add is more space. | Paid only |
| Established | 2015 | 2014 |
| Platforms | Not specified | Not specified |
| Privacy | ||
| Jurisdiction | NetherlandsShow detailsHide detailsStichting Disroot.org (a Dutch foundation), Dutch Chamber of Commerce (KVK) number 69988099. Servers are owned and operated in a data center in the Netherlands; the Terms of Service state the platform is subject to Dutch law. Run entirely by volunteers with no venture funding. | GermanyShow detailsHide detailsHeinlein Hosting GmbH, Schwedter Strasse 8/9A, 10119 Berlin. Registered at the District Court of Berlin-Charlottenburg, HRB 220010 B. Managing director Peer Heinlein, also CEO of the parent Heinlein Group, founded 1989. |
| Independent security audit | None on record | None on record |
| Source code | Fully open source | Partly open source |
| Zero-access encryption | No | No |
| Intra-provider E2EE | No | No |
| External PGP | Manual import | Native |
| Past data breach | No | No |
| Telemetry | Opt-in | On unless you opt out |
| Features | ||
| Hosting | Cloud | Cloud |
| Custom domain support | Yes | Yes |
| Aliases | Limited | Limited |
| Anti-spam approach | Not separately documented as a technical methodology beyond standard server-side mail filtering; the Privacy Statement discloses that email server logs (sender/recipient addresses, connecting IPs) are retained for 48 hours to prevent brute-force attacks and aid debugging, and specifies that message content is not read except for service operation, troubleshooting, or suspected Terms of Service violations. | Multi-stage malware and spam scanning at mail transport time, before any optional PGP encryption is applied, combined with SPF, DKIM, DMARC, DNSSEC, DANE and MTA-STS at the protocol level; no content-scanning of already-encrypted mailbox data is described. |
| Bundled services | CloudPadPaste BinChatCalendarContacts | CalendarDriveOfficeMeet |

