Proton Mail vs Tuta Comparison
| Feature | ||
|---|---|---|
| Overview | ||
| Rating | 8.5 | 7.9 |
| Pricing |
Show billing detailsHide billing details
|
Show billing detailsHide billing details
|
| Free tier | Limited free tierShow detailsHide details1 GB storage, 1 email address, 150 messages/day, 10 hide-my-email aliases, no custom domain | Limited free tierShow detailsHide details1 GB storage, 1 calendar, 3 labels, no custom domain, no extra addresses |
| Established | 2014 | 2011 |
| Platforms | ||
| Privacy | ||
| Jurisdiction | SwitzerlandShow detailsHide detailsProton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva. Since June 2024 the primary shareholder is the non-profit Proton Foundation, also based in Geneva. Proton Europe sàrl (Luxembourg) is the designated EU GDPR representative. | GermanyShow detailsHide detailsTutao GmbH, Deisterstr. 17a, 30449 Hanover, Germany. Registered at the District Court of Hanover, HRB 208014. |
| Independent security audit | Securitum 2021Show audit detailsHide audit detailsSource-code security audit of the redesigned Proton Mail web client and Proton Calendar, prior to release | None on record |
| Source code | Fully open source | Fully open source |
| Zero-access encryption | Yes | Yes |
| Intra-provider E2EE | Yes | Yes |
| External PGP | Manual import | Not supported |
| Past data breach | No | No |
| Telemetry | On unless you opt out | No telemetry |
| Features | ||
| Hosting | Cloud | Cloud |
| Custom domain support | Yes | Yes |
| Aliases | Unlimited | Limited |
| Anti-spam approach | PhishGuard flags spoofing and phishing using sender authentication (SPF/DKIM/DMARC) and metadata such as headers, link URLs and attachment hashes, not message content, since encryption prevents Proton from reading it; a machine-learning model retrains on user feedback (marking spam/phishing or rescuing a message from spam). | SPF, DKIM, DMARC and MTA-STS harden the infrastructure against phishing and spam at the protocol level; Tuta blocks external content (images, videos) in emails by default and warns when the technical sender differs from the visible From address, without scanning encrypted message content. |
| Bundled services | CalendarDriveVPNPass | CalendarDrive |