Disroot vs Tuta Comparison

Feature	Disroot Visit →	Tuta Visit →
Overview
Rating	4.8	7.9
Pricing	$0.00/moFree $0.92/mo5 GB extra storage (annual) $9.17/mo60 GB extra storage (annual) Show billing detailsHide billing details Free: $0 — 1 GB mailbox, no fixed term 5 GB extra storage (annual): EUR 11/year, shareable across mail, cloud and CryptPad storage 60 GB extra storage (annual): EUR 110/year, shareable across mail, cloud and CryptPad storage	$3.00/moRevolutionary (individual, annual) $8.00/moLegend (individual, annual) Show billing detailsHide billing details Revolutionary (individual, annual): Billed yearly, taxes included; €4.32/month if billed monthly Legend (individual, annual): Billed yearly, taxes included; €9.60/month if billed monthly
Free tier	Free tier Show detailsHide details 1 GB mailbox at no cost, no time limit, no feature gating versus paid storage tiers — the only difference paid tiers add is more space.	Limited free tier Show detailsHide details 1 GB storage, 1 calendar, 3 labels, no custom domain, no extra addresses
Established	2015	2011
Platforms	Not specified	WindowsmacOSLinuxAndroidiOS
Privacy
Jurisdiction	Netherlands Show detailsHide details Stichting Disroot.org (a Dutch foundation), Dutch Chamber of Commerce (KVK) number 69988099. Servers are owned and operated in a data center in the Netherlands; the Terms of Service state the platform is subject to Dutch law. Run entirely by volunteers with no venture funding.	Germany Show detailsHide details Tutao GmbH, Deisterstr. 17a, 30449 Hanover, Germany. Registered at the District Court of Hanover, HRB 208014.
Independent security audit	None on record	None on record
Source code	Fully open source	Fully open source
Zero-access encryption	No	Yes
Intra-provider E2EE	No	Yes
External PGP	Manual import	Not supported
Past data breach	No	No
Telemetry	Opt-in	No telemetry
Features
Hosting	Cloud	Cloud
Custom domain support	Yes	Yes
Aliases	Limited	Limited
Anti-spam approach	Not separately documented as a technical methodology beyond standard server-side mail filtering; the Privacy Statement discloses that email server logs (sender/recipient addresses, connecting IPs) are retained for 48 hours to prevent brute-force attacks and aid debugging, and specifies that message content is not read except for service operation, troubleshooting, or suspected Terms of Service violations.	SPF, DKIM, DMARC and MTA-STS harden the infrastructure against phishing and spam at the protocol level; Tuta blocks external content (images, videos) in emails by default and warns when the technical sender differs from the visible From address, without scanning encrypted message content.
Bundled services	CloudPadPaste BinChatCalendarContacts	CalendarDrive