Google Workspace vs Infomaniak kSuite

Google Workspace

The mailbox sits on a custom domain with IMAP sign-in via OAuth 2, server-side filters acting on sender, subject and size, send-as aliases, delegation within the organisation, and spam and phishing protection claimed at more than 99.9 percent of attacks blocked; storage per plan is stated at 30 GB, 2 TB and 5 TB. I found no public information on DNS set-up for domains, SPF, DKIM or DMARC signing, distribution lists, catch-all, out-of-office replies or Outlook protocols on the pages I read, which keeps this below the mid anchor.

Infomaniak kSuite

Custom-domain mailboxes with documented IMAP on port 993 with SSL and SMTP on 587 with STARTTLS, a webmail at the kSuite mail app, mobile apps, SPF, DKIM and DMARC filters, anti-spam and anti-virus, unlimited mail storage on paid plans and stated send and attachment limits. We found no public information on shared or functional mailboxes, aliases, distribution lists, catch-all, out-of-office and server-side rules, or on ActiveSync or MAPI — New Outlook is configured over IMAP. The mailbox itself is solid and the OpenPGP/ECC encryption is exactly what a referral letter between doctors needs; what a nine-practice group would run centrally is not described.

Google Workspace

Every plan bundles Calendar, Meet, Chat, Drive, Docs, Sheets and Slides, with meetings up to 24 hours and up to 1,000 participants on Enterprise, shared drives, interoperability with Office files, eSignature from the Standard plan and appointment booking — that is well past office documents alone. Free/busy lookup, shared calendars, CalDAV or CardDAV sync, room and resource booking, delegated calendar access and apps per platform are not described on the captured pages, so the top of the range is out of reach on this evidence.

Infomaniak kSuite

Room and resource booking with per-room shareable calendars, availability search and occupancy overviews is documented, alongside CalDAV and CardDAV sync to iOS, macOS, Android and Outlook via CalDav Synchronizer, OnlyOffice co-editing of docx, odt, xlsx, ods, pptx and odp formats, kDrive storage, kMeet video conferencing and kChat with desktop and mobile apps. We found no public information on free/busy lookup, meeting invitations across providers, delegated calendar access, booking approval or a company-wide address book. For scheduling our consultation rooms this is well above basics; cross-organisation scheduling with outside hospitals is where the documentation stops.

Google Workspace

Encryption in transit, two-step verification and spam protection are stated, S/MIME arrives only with the Enterprise plan — the encryption our referral letters to outside doctors would need — and Vault for retention, archiving and search plus eDiscovery start at the Plus plan, with data loss prevention and access transparency higher up. The privacy policy itself records that servers are operated worldwide, that data may be processed outside the user's country, and that the domain administrator and reseller can access the account; I found no public information on encryption at rest, GoBD-compliant archiving, legal hold, restore periods for deleted mail, certifications, or a transparency report on authority requests — for patient correspondence that weighs heavily.

Infomaniak kSuite

OpenPGP and ECC with one-click encryption, stated conformity with Swiss data protection law for transmitting sensitive data such as medical information, a published rule that no one at the provider accesses customer data without an explicit request except in fraud cases, temporary revocable support access that expires after seven days, two-factor authentication with backup codes, ISO 27001 for the ISMS, annual penetration tests, a bug bounty, breach notification and 30-day mail restoration are all documented. We found no public information on audit-proof archiving to GoBD, retention policies, legal hold or eDiscovery, and no transparency report on authority requests — disclosure is stated to occur only under a valid order under Swiss law. The answers on who can open a mailbox and under which law are among the clearest I have read; the archiving story my tax office would ask for is absent from the captured pages.

Google Workspace

Administrators manage data regions from the Google Admin console with status reports, endpoint management scales from Fundamental to Enterprise, and Secure LDAP, context-aware access, the security center and data loss prevention sit at the Enterprise tier, with reseller access to accounts confirmed in the privacy policy and support named as Standard, Enhanced and Premium. I found no public information on single sign-on, directory synchronisation, SCIM provisioning, remote wipe, exportable audit logs, delegated administration or support response times, and the documented API addresses mailboxes rather than provisioning.

Infomaniak kSuite

An organisation console with roles from legal representative through administrator to external limited-rights users, central review of users' account security, SAML 2.0 single sign-on and SCIM 2.0 provisioning with Microsoft Entra ID and Okta, a documented REST API with OAuth 2.0 scopes, an activity log and support seven days a week by phone and ticket are documented. We found no public information on mobile device policies with remote wipe, exportable audit logs, or stated response times; reselling kSuite is raised in the FAQ but partner accounts managing several customer organisations are not described. Our IT service provider could run this, but would miss device control and log export.

Google Workspace

A Google Workspace Migrate tool is documented from the Standard plan, the Gmail API lists account migration and read-only extraction and backup as use cases, and a user can export a copy of their Google account contents and delete the entire account. IMAP access is documented; export of calendars and contacts in standard formats, CalDAV or CardDAV, coexistence during a move and what happens to the data when the contract ends are not described on the pages I read, so the way in and out is sketched but not proven for a whole organisation.

Infomaniak kSuite

A free migration service for domain names, websites and email addresses without service interruption, automatic transfer of old emails and folders, imports of calendars as ICS and contacts as vCard or CSV, IMAP, CalDAV and CardDAV access, native editing of open document formats with OnlyOffice, deletion of data including backups after termination under service-specific timeframes, and increasingly open-sourced components are documented. We found no public information on export of a whole organisation's mail by an admin, coexistence with free/busy during a move, or a stated data return period after cancellation. Getting our nine practices in is well covered; getting out again rests on per-account exports.

Google Workspace

For users in the European Economic Area the privacy policy names Google Ireland Limited in Dublin as controller, the Cloud Data Processing Addendum is published and incorporated into the agreement, and administrators can pin covered data to a European Union region. The same pages say servers run worldwide with processing outside the user's country possible, the parent in Mountain View serves UK users as controller, and the region policy has documented edges — only listed editions are covered, AppSheet residency is managed separately, and direct messages between regions are stored in both. Subprocessors are not listed and I found no public information on certifications for the chain, so as a data protection officer I cannot verify who else touches the mail.

Infomaniak kSuite

Infomaniak Network SA of Geneva, an independent company controlled by its employees with a foundation protecting that independence, designs and runs its own data centres and states data is hosted exclusively in Switzerland and never transferred outside its own infrastructure; a data processing agreement under the GDPR and the Swiss FADP can be generated and downloaded by owners and administrators, ISO 27001 is stated, all staff and support sit in Geneva and Zurich, and even the AI is hosted in Switzerland. Subprocessors for website forms and payments — among them reCAPTCHA, PayPal, Twilio and MaxMind — are named with their purposes, but their locations are not stated and I find no list specific to the mail chain. This is close to the chain I would sign for patient correspondence; the named subprocessors without locations are the remaining question.

Google Workspace

All three business plans carry a per-user monthly euro price with both the introductory price for the first 20 users over 12 months and the regular price afterwards stated — €3.40 then €6.80, €6.80 then €13.60, €10.55 then €21.10 — alongside storage of 30 GB, 2 TB and 5 TB, a 300-user cap on business plans, no minimum for Enterprise, and a 16 percent saving stated for annual commitment against monthly billing. I found no public information on VAT treatment, the price of the Enhanced and Premium support upgrades, or Enterprise pricing, which is what keeps the annual cost largely but not fully computable.

Infomaniak kSuite

Every tier carries a public per-user price in CHF — Standard at CHF 1.76, Business at CHF 7.34 with CHF 3.67 in the first year at minus fifty per cent with annual commitment, Enterprise at CHF 13.83 with CHF 6.92 — alongside storage per plan, email addresses per user, room and file-version limits per plan, VAT stated as excluded, a cap of 300 users and a free tier. We found no public information comparing monthly and annual billing for the paid tiers, and add-on pricing beyond kDrive from CHF 5.35 per month is not shown. I could budget the mailboxes from the public pages; the extras my colleagues would ask about are not all priced.