whats-best.ai

Business Email & Office Suites

Hostpoint E-Mail & Cloud Office

UK / wider Europe Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Hostpoint AG · www.hostpoint.ch

Report an error on this page Is this your product? →

Link to this page

Hostpoint E-Mail & Cloud Office: AI-assisted analysis on whats-best.ai Hostpoint E-Mail & Cloud Office: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Hostpoint E-Mail & Cloud Office at a glance

Vendor
Hostpoint AG
Headquarters
Not stated on the vendor’s pages as of 5 Nov 2026
Data hosting
Not stated on the vendor’s pages as of 5 Nov 2026
Free plan
Not stated on the vendor’s pages as of 5 Nov 2026
Panel verdict
The AI panel rates Hostpoint E-Mail & Cloud Office 2.5/5, the mean of 6 judges. Hostpoint E-Mail & Cloud Office is a Swiss mail and office bundle, and the bench scores it highest where the pages are most open: pricing transparency sits at 6 with no spread, and calendar and office at 6 to 7. how scores are made
As of
Vendor pages captured 5 Nov 2026; evaluated by the panel 6 Nov 2026. all sources

Hostpoint E-Mail & Cloud Office alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The panel's verdict

Hostpoint E-Mail & Cloud Office is a Swiss mail and office bundle, and the bench scores it highest where the pages are most open: pricing transparency sits at 6 with no spread, and calendar and office at 6 to 7. Mail and deliverability follows at 5 to 6, with unusually detailed DKIM documentation — three signatures per domain, RSA or Ed25519 keys, automatic activation since May 2024 — beside SPF and DMARC. The weakest columns are security and compliance at 4, administration and identity at 3 to 4, and migration and portability at 4; judges found no public information on encryption at rest, certifications such as ISO 27001 or BSI C5, single sign-on, directory synchronisation or mailbox export, and the documented migration covers mail only. The widest spread is sovereignty, from 3 to 5: some judges credit a clearly identified Swiss operator with a stated data location in Switzerland and support exclusively from Switzerland, while others weigh a non-EU contracting entity and non-EU hosting against German professional-secrecy law.

Report an error

Speaks for it

  • All three Cloud Office tiers published with first-year and follow-on prices side by side — Basic CHF 2.00 then CHF 3.00, Plus CHF 3.00 then CHF 5.00, Business CHF 3.50 then CHF 7.00 a month — all including VAT.
  • DKIM, SPF and DMARC documented in unusual depth, with automatic DKIM activation for domains assigned from May 2024.
  • Free Audriga migration for mail from Gmail, GMX, Bluewin, Hispeed, Yahoo and others, with delta runs for late arrivals and mail access during the move.
  • Broad office bundle — shared calendars with three permission levels, MS-Office-compatible documents with real-time co-editing and version history, Drive clients for Windows, macOS, Android and iOS, and Hostpoint Meet.
  • Support stated as free 365 days a year, with phone Monday to Sunday 8 to 18, a stated wait under one minute, and webchat and WhatsApp alongside round-the-clock e-mail.

Report an error

Held against it

  • We found no public information on encryption at rest, certifications such as ISO 27001, BSI C5 or SOC 2, or audit-proof archiving with retention and legal hold.
  • We found no public information on single sign-on, Active Directory or LDAP synchronisation, SCIM provisioning, audit logs or mobile device policies with remote wipe.
  • Outlook calendar and contact sync runs through a third-party plugin the vendor's own help pages say is not always error-free and does not work on Windows 11, and contact groups are stated as not offered.
  • The documented migration covers mail only, and we found no public information on calendar and contacts migration, export in standard formats or end-of-contract data handling.
  • We found no public information on a published data processing agreement, a subprocessor list with locations or security certifications for the chain.

Report an error

Best for

  • You run a small team whose clients are Thunderbird, Apple or Android rather than Outlook, and want mail on your own domain with well-documented DKIM, SPF and DMARC.
  • You want to see the renewal price before you sign, with first-year and follow-on prices printed side by side and VAT included.
  • You are moving mail from Gmail, GMX, Bluewin, Hispeed or Yahoo and want a free migration you can start and schedule yourself from the control panel.
  • The stated Swiss chain — an operator registered in Rapperswil-Jona, data location Switzerland, support exclusively from Switzerland — matches what your organisation requires.

Report an error

Avoid if

  • Your staff lives in Outlook, especially on Windows 11 — the only documented sync route is a plugin the vendor's own help pages say does not run there.
  • Your mail must satisfy an audit — the pages document hourly backups retained up to 180 days, but we found no public information on audit-proof archiving, retention, legal hold or certifications.
  • Your accounts come from Active Directory or Entra ID — the captured pages show one owner-oriented Control Panel with a power-of-attorney model and no public information on single sign-on or directory synchronisation.
  • You must document your exit before signing — we found no public information on mailbox export in standard formats or on what happens to the data when the contract ends.

Report an error

The scores

Panel median The median of the judges’ scores per criterion. Each label opens its reasoning below.

Mail, domains & deliverability

Show reasoning
How this is scored

How well the mailbox itself works: custom domains and their DNS set-up, aliases, catch-all, shared and functional mailboxes, distribution lists, mailbox and attachment size limits, IMAP, POP3, SMTP and Exchange ActiveSync or MAPI for Outlook, web and mobile apps, spam and malware filtering, SPF, DKIM, DMARC and MTA-STS, out-of-office and server-side rules, send limits, and the delivery reputation of the sending infrastructure. A self-hosted groupware is judged on the mail server it ships; a suite whose mail app is only a client for another server scores at the level of that client.

0 — No mailbox at all; a product that only sends transactional mail or only reads another provider's mail without a server of its own or a documented one to pair it with.

3 — Mailboxes on a custom domain with IMAP and SMTP and a webmail; aliases, shared mailboxes, filtering and DKIM or DMARC are basic or not described.

5 — Several custom domains with a documented DNS set-up, aliases and distribution lists, shared or functional mailboxes, IMAP and SMTP plus mobile apps, spam and malware filtering, SPF and DKIM signing, mailbox size per plan stated, server-side rules and out-of-office replies.

8 — Exchange ActiveSync or native Outlook (MAPI) support, DMARC reporting and MTA-STS or DANE, catch-all and plus addressing, delegated access and send-as, quarantine an admin can review, send and attachment limits stated, and the deliverability of the outbound infrastructure documented.

10 — A mail platform a large organisation runs on: every protocol above with feature parity stated per client, inbound and outbound gateways configurable, journaling, DANE and MTA-STS enforced, delivery monitoring and bounce analysis for admins, and mail flow documented end to end.

Report an error

The Small Firm Owner

Mail on our own domain is well covered: custom domains (existing ones included) with a properly documented DKIM set-up that activates automatically for domains added since May 2024, SPF, DKIM and DMARC, sender policies in the control panel, mailing lists, shared team folders, out-of-office including recurring absence messages, and mailbox sizes of 15, 50 or 100 GB per tier. Protocols are IMAP, POP and SMTP with autoconfig/autodiscover, plus an integrated spam and virus filter; we found no public information on Exchange ActiveSync or native Outlook (MAPI) access, catch-all addresses, quarantine review or send limits. 1 2 5 6 9

Report an error

The IT Administrator

Mailboxes run on our own domains over IMAP, POP and SMTP with automatic client set-up, mailing lists, forwarding, recurring out-of-office replies, an integrated spam and virus filter with a spam box, and unusually detailed SPF, DKIM and DMARC documentation including automatic DKIM activation and strict sender policies configurable in the Control Panel. However, we found no public information on Exchange ActiveSync or native Outlook (MAPI) access, catch-all or plus addressing, send-as delegation, an admin quarantine, or send and attachment limits; the only size stated is mailbox storage of 15, 50 or 100 GB per tier. 1 2 5 6 9

Report an error

The Public Sector IT Lead

Mailboxes on a custom domain over IMAP, POP and SMTP with a webmail, mailing lists, shared team folders, auto-replies, an integrated virus and spam filter, and unusually thorough authentication documentation — SPF, DMARC and DKIM with automatic activation and RSA or Ed25519 keys. I found no public information on Exchange ActiveSync or native Outlook connectivity, DMARC reporting, MTA-STS, catch-all addresses or send limits, which decides the level for a staff that lives in Outlook. 1 2 5 6 9

Report an error

The IT Service Provider

Mailboxes on the customer's own domain over IMAP, POP and SMTP, with autoconfig for client set-up, an integrated virus and spam filter plus a spam box, mailing lists, and a recurring out-of-office message. DKIM is the standout for me: automatically activated for domains assigned from May 2024, documented down to selectors, RSA and Ed25519 keys and externally managed domains, alongside SPF, DMARC and sender policies configured in the control panel, with storage tiers of 15/50/100 GB published. We found no public information on Exchange ActiveSync or native Outlook sync for mail, DMARC reports, MTA-STS or catch-all addresses. 1 2 5 6 9

Report an error

The Data Protection Officer

Mailboxes on the customer's own domain over IMAP, POP and SMTP, with virus and spam filtering, a spam box switchable in the control panel, out-of-office replies, autoconfig, mailing lists and stated storage of 15, 50 or 100 GB; DKIM is documented in real depth (three signatures per domain, RSA or Ed25519 keys, automatic activation for newer domains) alongside SPF and DMARC. We found no public information on Exchange ActiveSync or native Outlook, catch-all or plus addressing, an admin-reviewable quarantine, send limits or outbound delivery reputation. 1 2 5 6 9

Report an error

The Skeptic

Mail on your own domain over IMAP, POP and SMTP, with automatic client setup, mailing lists, a spam and virus filter, and DKIM documented in more detail than most — three signatures per domain, RSA or Ed25519 keys, automatic activation since May 2024. The vendor's own help centre states Outlook has no built-in CalDAV/CardDAV and needs a third-party plugin whose contact sync "nicht immer fehlerfrei funktioniert" and which does not run under Windows 11; I found no public information on Exchange ActiveSync, DMARC reporting, MTA-STS, catch-all, send limits or the outbound infrastructure's reputation. An honest mid-table product, and the Outlook wart is at least admitted in writing. 1 2 5 6 7 9

Report an error

Calendar, contacts & office apps

Show reasoning
How this is scored

What the office plans and writes with: shared and team calendars, free/busy lookup, meeting invitations across providers, room and resource booking, shared address books and a company directory, CalDAV and CardDAV or ActiveSync for phones, Outlook calendar sync, tasks, online office documents with co-editing, file storage that comes with the suite, video meetings and chat inside the bundle, and the desktop and mobile apps.

0 — Mail only, with no calendar or contacts of any kind.

3 — A personal calendar and address book in the webmail; sharing, resources, sync protocols and office apps are basic or not described.

5 — Shared calendars and address books, meeting invitations with free/busy lookup, CalDAV and CardDAV or ActiveSync sync to phones and desktop clients, a company-wide address book, tasks, and either online office documents or a documented integration with an office suite.

8 — Room and resource booking with approval, delegated calendar access, Outlook calendar and contacts sync documented, co-editing of documents and spreadsheets in the browser, file storage with sharing, video meetings in the bundle, and apps for desktop, iOS and Android.

10 — A full office suite that replaces Microsoft 365 for a whole organisation: every function above with Microsoft file formats edited without loss, scheduling across organisations, resource planning, offline editing, an accessible interface stated against a standard, and feature parity across web, desktop and mobile documented.

Report an error

The Small Firm Owner

Shared calendars with viewer, editor and author permissions, invitations with a free-time overview and recurring appointments, CalDAV and CardDAV with a free DAVx5 app, tasks, Drive with Windows, macOS, Android and iOS clients, MS-Office-compatible documents with real-time co-editing and version history, and Hostpoint Meet for video. Two things bite an office that lives in Outlook: contact groups are stated as not offered, and Outlook calendar and contact sync runs only through a third-party plugin whose own help pages say it is not always error-free and does not work with Windows 11; we found no public information on room or resource booking. 1 7 8

Report an error

The IT Administrator

Shared calendars with viewer, editor and author permission levels, free-time display when scheduling, tasks, real-time co-editing of MS-Office-compatible documents with version history, Drive storage with Windows, macOS, Android and iOS clients, CalDAV and CardDAV sync including a free purpose-built Android app, and Hostpoint Meet cover most of a suite. But room and resource booking with approval is not documented, contact groups are explicitly not offered, and Outlook calendar and contact sync relies on a third-party plugin that the captured help pages state does not always work error-free and does not run under Windows 11 — with three hundred Outlook desks that alone rules it out for us. 1 3 7 8

Report an error

The Public Sector IT Lead

Shared calendars with three permission levels, free/busy windows when scheduling, CalDAV and CardDAV synchronisation with a free dedicated Android app, real-time co-editing of MS-Office-compatible documents, Drive clients for all platforms and Hostpoint Meet in the bundle. Outlook, however, requires a third-party plugin that the provider's own help centre says does not always work error-free and does not run on Windows 11, contact groups are not offered, and I found no room or resource booking. 1 3 7 8

Report an error

The IT Service Provider

The bundle is broad: shared calendars with three permission levels and link sharing, free-time display, invitations and recurring appointments, CalDAV and CardDAV with documented server addresses, tasks, real-time co-editing of MS-Office-compatible documents with version history, Drive clients for Windows, macOS, iOS and Android, and Hostpoint Meet for video. Outlook calendar and contact sync needs the third-party CalDav Synchronizer plugin, and the help centre itself reports the contact sync is not always error-free and does not work on Windows 11 — a daily headache for my Outlook-heavy clients. We found no public information on room or resource booking with approval. 1 3 7 8

Report an error

The Data Protection Officer

CalDAV and CardDAV sync with named servers, a free Android app and a configuration assistant; calendars share with three permission levels, scheduling shows free time slots and invites participants, and the bundle covers tasks, MS-Office-compatible document editing with real-time collaboration and version history, a Drive with desktop and mobile clients, and video meetings. Outlook needs the third-party CalDav Synchronizer plugin, which the vendor itself reports as not always error-free and limited to classic Outlook, and we found no public information on room and resource booking or a company-wide address book. 1 3 7 8

Report an error

The Skeptic

Calendars share with three permission levels, show free time slots and send invitations, sync over CalDAV and CardDAV to phones and Thunderbird with a free DAVx5 app for customers; tasks, real-time co-editing of MS-Office-compatible documents, a Drive with Windows, macOS, iOS and Android clients and Hostpoint Meet round out the bundle. Against that, the help centre itself states contact groups are not offered, the same fragile plugin is the only Outlook route, and I found no public information on room or resource booking or a company-wide address book. Strong for a small team; I would not move a hundred desks onto it. 1 3 7 8

Report an error

Security, encryption & compliance archiving

Show reasoning
How this is scored

How mail and documents are protected and kept: TLS enforced in transit, encryption at rest, end-to-end encryption or S/MIME and PGP, who at the provider can read a mailbox, two-factor authentication and passkeys, phishing, malware and account-takeover protection, audit-proof archiving that meets GoBD, retention policies and legal hold, eDiscovery, backups and restore of deleted mail, a transparency report on authority requests, and certifications (ISO 27001, BSI C5, SOC 2) with their scope.

0 — No security information of any kind; no encryption, two-factor sign-in or archiving stated.

3 — Encrypted connections and a password login; encryption at rest, two-factor sign-in, archiving and certifications are basic or not described.

5 — TLS in transit and encryption at rest stated, two-factor authentication, spam, phishing and malware protection, restore of deleted mail for a stated period, archiving offered (built in or as an add-on), and a certification such as ISO 27001 stated for the data centres or the service.

8 — End-to-end encryption, S/MIME or PGP supported, GoBD-compliant archiving documented, retention policies and legal hold, enforced two-factor or passkeys for all users, a transparency report on authority requests, and certifications such as ISO 27001 or BSI C5 published with their scope and auditor.

10 — Security that holds up in an audit of a regulated organisation: zero-access or customer-held keys where the provider cannot read mail, eDiscovery, tamper-proof archive with documented verification, every certification published with its report or attestation available, independent security audits or open-source code reviewed, and incident disclosure documented.

Report an error

The Small Firm Owner

Documented are two-factor sign-in, spam and virus filtering with an activatable spam box, TLS between mail servers, hourly backups kept up to 180 days, DDoS protection, a bug bounty, and S/MIME or OpenPGP mentioned as customer-side standards. For a tax office the gaps are serious: we found no public information on encryption at rest, GoBD-compliant archiving, retention policies or legal hold, a transparency report, or certifications such as ISO 27001 or BSI C5 with their scope. 1 3 9 10

Report an error

The IT Administrator

Documented are TLS transport encryption with external mail servers where possible, an integrated spam and virus filter, two-factor sign-in, hourly backups kept up to 180 days, DDoS protection and a bug bounty, with S/MIME and OpenPGP mentioned as customer-side standards. We found no public information on encryption at rest, GoBD-compliant archiving, retention policies and legal hold, eDiscovery, a transparency report on authority requests, or certifications such as ISO 27001 or BSI C5 — and as a German manufacturer I cannot run audit-relevant mail on that basis. 1 3 9 10

Report an error

The Public Sector IT Lead

Transport encryption, spam and virus filtering, two-factor sign-in, hourly backups kept up to 180 days and a bug bounty are documented, and S/MIME or OpenPGP are named as customer-side standards. I found no public information on encryption at rest, on audit-proof archiving with retention and legal hold, and nowhere a certification — no ISO 27001, no BSI C5 — which is a hard stop for a council presentation. 1 3 9 10

Report an error

The IT Service Provider

Documented are TLS transport encryption to external mail servers, virus and spam filtering, two-factor sign-in, hourly backups retained up to 180 days, DDoS protection, a bug bounty, and S/MIME or OpenPGP described as customer-side standards rather than built in. We found no public information on encryption at rest, GoBD-compliant archiving, retention policies or legal hold, a transparency report on authority requests, or certifications such as ISO 27001 with their scope — the first things my audit-bound clients ask for. 1 3 9 10

Report an error

The Data Protection Officer

Two-factor sign-in is documented, transport encryption to external mail servers is used "whenever possible", spam and virus filtering and DDoS protection are stated, and hourly backups are retained up to 180 days; S/MIME and OpenPGP appear only as general customer-side standards, not built-in features. We found no public information on encryption at rest, on who at Hostpoint can open a mailbox and under which law, on GoBD-compliant archiving, retention and legal hold, certifications such as ISO 27001 or BSI C5, or a transparency report on authority requests — for patient correspondence under professional secrecy that gap decides the score. 1 3 9 10

Report an error

The Skeptic

TLS in transit, hourly backups kept up to 180 days, virus and spam filtering, DDoS protection, two-factor sign-in and a bug bounty are stated; S/MIME and OpenPGP appear only as standards the customer would use, not a built-in. I found no public information on encryption at rest, any ISO 27001, BSI C5 or SOC 2 certification, audit-proof archiving, retention policies, legal hold, eDiscovery or a transparency report. The pages answer the phishing question and leave the tax-audit question open. 1 3 9 10

Report an error

Administration, identity & partner management

Show reasoning
How this is scored

How an IT team or an IT service provider runs it: an admin console for users, groups, mailboxes and domains, admin roles, single sign-on (SAML or OpenID Connect), sync with Active Directory, Entra ID or LDAP, SCIM provisioning, mobile device policies and remote wipe, audit logs of admin and user actions, usage reports, a documented API for provisioning, multi-tenant or reseller accounts for partners managing several customers, and the support channels and response times per plan.

0 — No administration; one login per mailbox and nothing managed centrally.

3 — A web console to add mailboxes and aliases; roles, single sign-on, directory sync and audit logs are basic or not described.

5 — An admin console for users, groups, mailboxes and domains, admin roles, two-factor sign-in enforceable by the admin, password policies, a documented API or command line for provisioning, an activity or audit log, and business support by phone or ticket stated per plan.

8 — Single sign-on (SAML or OpenID Connect), Active Directory, Entra ID or LDAP sync, SCIM provisioning, mobile device policies with remote wipe, audit logs exportable, delegated administration, partner or reseller accounts that manage several customer organisations, and support response times stated.

10 — Administration that scales across many organisations: every setting reachable by API with parity stated, granular role scopes, policies by group, logs streamed to a SIEM, white-label partner offerings with separate billing, and an SLA with service credits published.

Report an error

The Small Firm Owner

The Hostpoint Control Panel is the single place everything is managed, with the ability to grant another person a formal authorisation over a Cloud Office group, two-factor sign-in via Hostpoint ID, and support that is genuinely impressive for a small firm: phone Monday to Sunday 8 to 18 with under a minute of waiting, plus round-the-clock e-mail, webchat and WhatsApp in four languages. We found no public information on single sign-on, directory synchronisation, SCIM provisioning, mobile device policies with remote wipe, audit logs, a provisioning API, or partner accounts managing several customers. 1 4 10 11

Report an error

The IT Administrator

Everything runs through the Hostpoint Control Panel — mailboxes, domains, spam settings, sender policies, plan upgrades, even the migration tool — and a formal authorization can grant another Hostpoint ID access to a Cloud Office group, with support hours and under-one-minute wait times clearly published. But we found no public information on single sign-on, Active Directory or LDAP synchronisation, SCIM provisioning, mobile device policies with remote wipe, audit logs, usage reports or a provisioning API — and with Active Directory as the source of every account here, that gap is decisive. 1 9 10 11

Report an error

The Public Sector IT Lead

The Hostpoint Control Panel manages mailboxes, domains, sender policies and the migration, and a power of attorney can grant another Hostpoint ID access to a Cloud Office group. I found no public information on admin roles, single sign-on, Active Directory or Entra ID synchronisation, SCIM provisioning, device policies with remote wipe, audit logs, a provisioning API or reseller accounts — none of what a thousand-staff administration is run with. 1 9 10 11

Report an error

The IT Service Provider

Mailboxes, spam settings, sender policies and DKIM are all managed in the Hostpoint Control Panel, and I can hold a power of attorney over a client's Cloud Office group — or over the webhosting with every linked group — which is a workable provider workflow. Support is free 365 days a year, phone seven days a week with a stated wait under one minute, plus webchat, WhatsApp and round-the-clock email, delivered exclusively from Switzerland. We found no public information on single sign-on, directory sync, SCIM provisioning, a provisioning API, audit logs, mobile device policies, or reseller accounts managing several customer organisations. 1 4 10 11

Report an error

The Data Protection Officer

Mail accounts, sender policies, DKIM and the spam scanner are managed in the Hostpoint Control Panel, and a documented power-of-attorney system authorises another Hostpoint ID for a cloud office group or, via a webhosting, for all linked groups; phone, chat and WhatsApp support runs 365 days with a stated wait under one minute. We found no public information on admin roles beyond that full authorisation, single sign-on, directory synchronisation, SCIM, a provisioning API, mobile device policies with remote wipe, or audit logs. 1 9 10 11 13

Report an error

The Skeptic

One Hostpoint Control Panel manages mailboxes, domains, sender policies and the spam scanner, and a Vollmacht can hand a Cloud Office group to another Hostpoint ID; support is by phone, chat and WhatsApp with a stated wait under one minute, 365 days a year. I found no public information on admin roles, single sign-on, Active Directory or LDAP sync, SCIM provisioning, audit logs, a documented API, device policies or reseller accounts. This is a panel for an owner, not for an IT service provider. 1 9 10 11

Report an error

Migration, open standards & exit

Show reasoning
How this is scored

How the organisation gets in and out: migration from Exchange, Microsoft 365, Google Workspace or another IMAP provider with a documented tool or service, mail, calendars and contacts carried over, coexistence during a move, standard protocols (IMAP, CalDAV, CardDAV, JMAP, open document formats) rather than proprietary ones, export of a mailbox and of the whole organisation in standard formats (mbox, EML, PST, ICS, vCard), open-source code or a self-hosted edition, what happens to data when the contract ends, and how domains and DNS are handed back.

0 — No way to bring mail in or take it out; a proprietary store with no IMAP access or export.

3 — IMAP access to mail; a migration path, calendar and contacts export and the end-of-contract handling are basic or not described.

5 — A documented migration from Exchange, Microsoft 365 or Google (a tool, an import or a service), mail, calendars and contacts imported, IMAP, CalDAV and CardDAV or ActiveSync access, export of mail, calendars and contacts in standard formats, and the deletion of data after the contract ends stated.

8 — A migration service or tool that moves whole organisations with calendars and permissions, coexistence with free/busy during the move, open document formats supported natively, export of the whole organisation by the admin, an open-source code base or a self-hosted edition, and a data return period after cancellation stated.

10 — An exit that costs nothing but time: every record exportable in open formats with the method documented, a self-hosted open-source edition with feature parity stated, migration in and out documented with the same tools, and a contractual data return and deletion with confirmation.

Report an error

The Small Firm Owner

A free migration service via Audriga moves mail from Gmail, GMX, Bluewin, Hispeed, Yahoo and others, with a delta migration for messages that arrive mid-move, mailbox access during the move (provided the folder structure is left alone), scheduling and completion notice — exactly the no-client-thread-left-behind move I need. The captured pages document e-mail migration only; we found no public information on calendar and contacts migration, export of a mailbox or the whole organisation in standard formats, or what happens to the data when the contract ends, and IMAP, CalDAV and CardDAV are the documented way in and out. 1 12 13

Report an error

The IT Administrator

A free migration service through Audriga, started from the Control Panel, moves mail from Gmail, GMX, Bluewin, Hispeed, Yahoo and similar providers with immediate or scheduled start, delta runs, a size estimate and continued access during the move. Only mail is documented as migrated — we found no public information on calendar, contact or permission migration or on a path from Exchange or Microsoft 365 — and export of a mailbox or the whole organisation, plus what happens to the data when the contract ends, are not described. 1 7 9 12 13

Report an error

The Public Sector IT Lead

The way in is genuinely documented and free: an Audriga-based service in the control panel moves mailboxes from Gmail, GMX, Bluewin, Hispeed, Yahoo and others, with a delta move for late arrivals, access during the transfer and completion notifications. Only email is covered — I found no public information on moving calendars and contacts, on export in standard formats, or on end-of-contract data handling, and I want the exit documented before signing. 1 12 13

Report an error

The IT Service Provider

The free Audriga migration moves mail from Gmail, GMX, Bluewin, Yahoo and other providers, started from the control panel with a size estimate, scheduling, mail access during the move and a delta run for late arrivals — a move I can run myself without a ticket. It covers mail only, and we found no public information on migrating calendars and contacts, on export in standard formats or of a whole organisation, or on what happens to the data when the contract ends, although open access via IMAP, POP, SMTP, CalDAV and CardDAV is documented. 1 7 12 13

Report an error

The Data Protection Officer

The way in is documented and free: migration via Audriga from providers such as Gmail, GMX, Bluewin, Hispeed and Yahoo, with immediate or scheduled start, a delta move for late arrivals, a size estimate and continued access to mail during the move; mail stays reachable over IMAP and calendars and contacts over CalDAV and CardDAV. We found no public information on export of a mailbox or a whole organisation in standard formats, on what happens to data when the contract ends, or on how domains and DNS are handed back. 1 9 12 13

Report an error

The Skeptic

Getting in is free and well described: an Audriga service moves mail from Gmail, GMX, Bluewin, Hispeed, Yahoo and others, with delta runs for late arrivals, scheduling, a size estimate and mail access during the move. The documentation covers mail only — I found no public information on calendars, contacts or permissions coming across, no export of a mailbox in standard formats, and nothing on data return or deletion after the contract ends. The entrance door is wide open; the exit door is not in the captured pages. 1 12 13

Report an error

European sovereignty panel opinion

Show reasoning
How this is scored

Who the contracting entity and the parent company are, where mailboxes, calendars, contacts, documents and backups are stored and processed, who at the provider or its subprocessors can access them, and who the subprocessors are (data centres, spam filtering, support, payment, AI features). Independently sourced by the sovereignty pipeline. An EU data region offered by a non-EU parent is part of the chain, not the whole of it. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.

3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.

5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (spam filtering, support, backups, AI features) run through non-EU providers or a non-EU parent without a stated safeguard.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5) stated — or a self-hosted edition documented that keeps every mailbox on the customer's own servers.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Small Firm Owner

The provider is clearly identified: Hostpoint AG of Rapperswil-Jona, Switzerland, UID CHE-101.974.997, with mailboxes hosted in a Swiss data centre on renewable energy and support exclusively from Switzerland. For a firm in Lower Saxony that is a non-EU contracting entity and non-EU hosting; the captured pages name no subprocessors with locations, and we found no public information on a published data processing agreement or security certifications for the chain. 1 3 4

Report an error

The IT Administrator

The operator is Hostpoint AG of Rapperswil-Jona, entered in the St. Gallen commercial register with a Swiss UID, hosting more than 700,000 mailboxes in a secure Swiss data centre, with support exclusively from Switzerland. We found no public information on a published data processing agreement, a list of subprocessors with their locations, security certifications, or an EU contracting entity or representative — so the chain looks European but is only partly evidenced. 1 4 11

Report an error

The Public Sector IT Lead

The parts of the chain that matter are stated: Hostpoint AG of Rapperswil-Jona, entered in the St. Gallen commercial register with a Swiss UID, hosting in its own Swiss data centre with support exclusively from Switzerland — an owner answering to Swiss and therefore European law, with no non-European parent mentioned. I found no public information on a published data processing agreement, on any subprocessor list, or on a certification with its scope. 1 3 4

Report an error

The IT Service Provider

Hostpoint AG is clearly identified — seat in Rapperswil-Jona, commercial register entry and UID number — hosting over 700,000 mailboxes in its own secure Swiss data centre running on renewable energy, with support exclusively from Switzerland, which for me as an Austrian provider is a transparent European chain. We found no public information on a published data processing agreement, a subprocessor list with their locations, or security certifications; Open-Xchange powers the Drive and Audriga the migration, but they appear in product pages rather than as a documented chain. 1 3 4

Report an error

The Data Protection Officer

Hostpoint AG of Rapperswil-Jona is fully identified (commercial register number, UID, VAT number, management) and states a data location in Switzerland with support exclusively from Switzerland, while two third parties — Open-Xchange behind the Drive and Audriga behind migrations — surface in the product pages. We found no public information on a data processing agreement for Cloud Office, a complete subprocessor list with locations, who at the provider can access mailboxes, or certifications; the stated hosting is Switzerland rather than an EU region, so the whole chain would need checking against German professional-secrecy law. 1 3 4 12

Report an error

The Skeptic

The visible chain sits in one country: Hostpoint AG registered in Rapperswil-Jona, "Datenstandort Schweiz" for over 700'000 addresses in a secure Swiss data centre, and support "ausschliesslich aus der Schweiz". I found no public information on a data processing agreement, a subprocessor register — Open-Xchange behind the Drive and Audriga behind the migration are the only names that surface — or certifications, and Switzerland is not the European Union. A coherent chain, but the paperwork a buyer needs to verify it is missing. 1 3 4

Report an error

Pricing transparency

Show reasoning
How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per user or mailbox per tier, storage per user, what shared mailboxes, aliases and extra domains cost, which features (archiving, office apps, SSO, advanced security, more storage) cost extra, the first-year discount and the regular price after it, minimum users and term, monthly versus annual billing, and VAT.

0 — No public prices at all; every customer is a sales call.

3 — A starting price per user exists, but how cost scales with storage, users, add-ons or after the first year is unclear.

5 — Tiers are public with their price per user and main inclusions, but at least one commonly needed piece (archiving, extra storage, shared mailboxes, SSO, the price after the introductory period) is unpriced or "on request".

8 — Every tier priced publicly per user with storage, add-ons priced, the regular price after any introductory discount stated, minimum users and term stated, monthly and annual billing compared, and VAT treatment stated.

10 — Complete price computability: annual cost derivable for a given number of users, storage and add-ons, with every support, migration and archive fee and the cancellation and data-return terms published.

Report an error

The Small Firm Owner

Three Cloud Office tiers are printed with both the first-year and the regular price after it — Basic 2.00 then 3.00, Plus 3.00 then 5.00, Business 3.50 then 7.00 Swiss francs per month — with mailbox storage of 15, 50 or 100 GB, documents included from Plus, all prices including VAT, and migration and support stated as free, which lets me see the year-two cost before I sign. Still unpriced on the captured pages: shared mailboxes, aliases, extra domains and add-ons, any minimum users or term, and a monthly-versus-annual comparison. 1 3 4

Report an error

The IT Administrator

All three Cloud Office tiers are published monthly with first-year and follow-on prices (for example CHF 2.00 in the first year, then CHF 3.00 for Basic), storage per tier for mailboxes at 15, 50 or 100 GB and Drive at 15, 50 or 250 GB, documents included from Plus, and all prices inclusive of VAT. We found no public information on add-on prices such as extra storage or archiving, minimum users or contract term, or a comparison of monthly versus annual billing. 1 3

Report an error

The Public Sector IT Lead

Three Cloud Office tiers are public with introductory and regular prices side by side — Basic CHF 2.00 in the first year then CHF 3.00 a month, Plus CHF 3.00 then CHF 5.00, Business CHF 3.50 then CHF 7.00 — each mapped to mailbox and drive storage, with all prices including Swiss VAT. I found no public information on add-on prices, minimum users or contract term, so the real annual cost for eleven hundred mailboxes is not fully computable from these pages alone. 1 3 4

Report an error

The IT Service Provider

All three tiers are public with introductory and continuing prices — Cloud Office Basic CHF 2.00 a month in the first year and CHF 3.00 after, Plus CHF 3.00 then CHF 5.00, Business CHF 3.50 then CHF 7.00 — plus storage tiers of 15/50/100 GB for mail and 15/50/250 GB for Drive, and every price includes VAT. We found no public information on what aliases, shared mailboxes or additional domains cost, on add-on prices, minimum users or contract term, or on monthly versus annual billing, so I cannot yet compute a full annual cost before quoting a client. 1 4

Report an error

The Data Protection Officer

All three tiers are public with first-year and follow-on monthly prices (Basic CHF 2.00 then CHF 3.00, Plus CHF 3.00 then CHF 5.00, Business CHF 3.50 then CHF 7.00), storage of 15, 50 or 100 GB per mailbox and 15, 50 or 250 GB for the Drive, and all prices including VAT. We found no public information on add-on prices such as extra domains or shared mailboxes, minimum users and term, or a monthly-versus-annual comparison, so the full annual cost is not yet computable from the public pages. 1 4

Report an error

The Skeptic

All three tiers are public with first-year and later prices side by side — "Cloud Office Business 3.50 / Monat im 1. Jahr Danach CHF 7.00" — storage tiers of 15, 50 and 100 GB for mail and 15, 50 and 250 GB for the Drive are listed, prices include VAT, and the mail migration is free. What I could not compute from the pages: the unit the price applies to, minimum users or term, monthly versus annual billing, and any add-on prices. The first-year-to-renewal jump is disclosed in plain print, which is more than most manage. 1 3 4

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined ⚠ unverified — uncited Report an error
Hosting options Not determined — uncited Report an error
Open source Not determined — uncited Report an error
Data processing agreement Not determined — uncited Report an error
Transfer impact assessment Not determined — uncited Report an error

Questions about Hostpoint E-Mail & Cloud Office

Is Hostpoint E-Mail & Cloud Office European?

Yes, though not from the EU. whats-best.ai classifies Hostpoint E-Mail & Cloud Office as UK / wider Europe.

Where does Hostpoint E-Mail & Cloud Office store data?

Not stated on the vendor’s pages as of 5 Nov 2026.

Does Hostpoint E-Mail & Cloud Office have a free plan?

Not stated on the vendor’s pages as of 5 Nov 2026.

What are the best alternatives to Hostpoint E-Mail & Cloud Office?

As of 6 Nov 2026, the panel rates grommunio (3.5/5), Infomaniak kSuite (3.5/5) and Nextcloud Hub (Groupware & Office) (3.5/5) highest among the other 14 Business Email & Office Suites products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is grommunio (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Hostpoint E-Mail & Cloud Office alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Sources (13)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor homepage (email and cloud office, with pricing) www.hostpoint.ch Checked 5 Nov 2026 Details →
  2. 2 Documentation (help centre) support.hostpoint.ch Checked 5 Nov 2026 Details →
  3. 3 About page (company and data centre) www.hostpoint.ch Checked 5 Nov 2026 Details →
  4. 4 Legal notice, terms and privacy policy www.hostpoint.ch Checked 5 Nov 2026 Details →
  5. 5 Mail, domains & deliverability — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →
  6. 6 Mail, domains & deliverability — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →
  7. 7 Calendar, contacts & office apps — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →
  8. 8 Calendar, contacts & office apps — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →
  9. 9 Security, encryption & compliance archiving — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →
  10. 10 Administration, identity & partner management — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →
  11. 11 Administration, identity & partner management — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →
  12. 12 Migration, open standards & exit — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →
  13. 13 Migration, open standards & exit — found from sitemap support.hostpoint.ch Checked 5 Nov 2026 Details →