Disroot vs Proton Mail Comparison
| Feature | ||
|---|---|---|
| Overview | ||
| Rating | 4.8 | 8.5 |
| Pricing |
Show billing detailsHide billing details
|
Show billing detailsHide billing details
|
| Free tier | Free tierShow detailsHide details1 GB mailbox at no cost, no time limit, no feature gating versus paid storage tiers — the only difference paid tiers add is more space. | Limited free tierShow detailsHide details1 GB storage, 1 email address, 150 messages/day, 10 hide-my-email aliases, no custom domain |
| Established | 2015 | 2014 |
| Platforms | Not specified | |
| Privacy | ||
| Jurisdiction | NetherlandsShow detailsHide detailsStichting Disroot.org (a Dutch foundation), Dutch Chamber of Commerce (KVK) number 69988099. Servers are owned and operated in a data center in the Netherlands; the Terms of Service state the platform is subject to Dutch law. Run entirely by volunteers with no venture funding. | SwitzerlandShow detailsHide detailsProton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva. Since June 2024 the primary shareholder is the non-profit Proton Foundation, also based in Geneva. Proton Europe sàrl (Luxembourg) is the designated EU GDPR representative. |
| Independent security audit | None on record | Securitum 2021Show audit detailsHide audit detailsSource-code security audit of the redesigned Proton Mail web client and Proton Calendar, prior to release |
| Source code | Fully open source | Fully open source |
| Zero-access encryption | No | Yes |
| Intra-provider E2EE | No | Yes |
| External PGP | Manual import | Manual import |
| Past data breach | No | No |
| Telemetry | Opt-in | On unless you opt out |
| Features | ||
| Hosting | Cloud | Cloud |
| Custom domain support | Yes | Yes |
| Aliases | Limited | Unlimited |
| Anti-spam approach | Not separately documented as a technical methodology beyond standard server-side mail filtering; the Privacy Statement discloses that email server logs (sender/recipient addresses, connecting IPs) are retained for 48 hours to prevent brute-force attacks and aid debugging, and specifies that message content is not read except for service operation, troubleshooting, or suspected Terms of Service violations. | PhishGuard flags spoofing and phishing using sender authentication (SPF/DKIM/DMARC) and metadata such as headers, link URLs and attachment hashes, not message content, since encryption prevents Proton from reading it; a machine-learning model retrains on user feedback (marking spam/phishing or rescuing a message from spam). |
| Bundled services | CloudPadPaste BinChatCalendarContacts | CalendarDriveVPNPass |
