Business Email & Office Suites
Infomaniak kSuite
UK / wider Europe Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Infomaniak Network SA · www.infomaniak.com
Compare with Google Workspace → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Infomaniak kSuite at a glance
- Vendor
- Infomaniak Network SA
- Headquarters
- Not stated on the vendor’s pages as of 5 Nov 2026
- Data hosting
- Default not stated; pages mention Switzerland source, captured 5 Nov 2026
- Free plan
- Yes, per the vendor’s own page source, captured 5 Nov 2026
- Panel verdict
- The AI panel rates Infomaniak kSuite 3.5/5, the mean of 6 judges. Infomaniak kSuite — mail, calendar, contacts, kDrive, kChat and kMeet from Infomaniak Network SA of Geneva — scores strongest on sovereignty at 7 to 8: own Swiss data centres, data stated never to leave the vendor's own infrastructure, employee-held capital guarded by a foundation, and support staff in Geneva and Zurich. how scores are made
- As of
- Vendor pages captured 5 Nov 2026; evaluated by the panel 5 Nov 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Infomaniak kSuite — mail, calendar, contacts, kDrive, kChat and kMeet from Infomaniak Network SA of Geneva — scores strongest on sovereignty at 7 to 8: own Swiss data centres, data stated never to leave the vendor's own infrastructure, employee-held capital guarded by a foundation, and support staff in Geneva and Zurich. The 7s reflect reservations that Switzerland is not an EU member state and that named subprocessors appear without their locations. Pricing transparency scored a uniform 7; calendar and office, and administration and identity, clustered at 6 to 7 on room booking, CalDAV/CardDAV sync and SAML/SCIM single sign-on. Weakest is mail and deliverability at 4 to 6, where the judges genuinely split: those scoring 4 to 5 found no public information on Exchange ActiveSync, native MAPI, distribution lists or catch-all, while those at 6 accepted a solid IMAP/SMTP mailbox with SPF, DKIM and DMARC. Security and compliance and migration and portability each scored a flat 6: getting in is free and documented, but the judges found no public information on GoBD-style archiving, retention policies, legal hold, eDiscovery or whole-organisation export.
Speaks for it
- Sovereignty scored 7 to 8, with mail and files in the vendor's own Swiss data centres, never transferred outside its own infrastructure
- Free, vendor-run migration of domain names, websites and email addresses without service interruption, with automatic transfer of old mail and folders
- Every tier publicly priced per user and month — Standard CHF 1.76, Business CHF 7.34 with CHF 3.67 in the first year, Enterprise CHF 13.83 with CHF 6.92 — with VAT stated excluded
- SAML 2.0 single sign-on with SCIM 2.0 provisioning against Microsoft Entra ID or Okta, plus a documented REST API with OAuth 2.0
- One-click mail encryption with OpenPGP and ECC, ISO 27001 for the ISMS, annual penetration tests and a bug bounty
Held against it
- Mail and deliverability scored lowest, 4 to 6; the judges found no public information on Exchange ActiveSync, native MAPI, distribution lists, catch-all or server-side rules
- The judges found no public information on GoBD-style archiving, retention policies, legal hold, eDiscovery or a transparency report on authority requests
- Named subprocessors — Twilio, PayPal, Google reCAPTCHA and MaxMind among them — are listed without their locations
- The captured pages give different figures for the CHF 1.76 tier's name and how much storage it includes
- Leaving rests on per-account exports; the judges found no public information on whole-organisation export by an admin, free/busy coexistence during a move, or a stated data-return period
Best for
- You need a Swiss-sovereign host: own Swiss data centres, data never transferred outside the vendor's own infrastructure, and a downloadable DPA under GDPR and the Swiss FADP
- Your small team works one shared mailbox across several staff, each with an individually revocable device password
- You want a free, vendor-run migration of domains, websites and email addresses with no service interruption
- You administer up to 300 users and want SAML 2.0 single sign-on with SCIM 2.0 against Microsoft Entra ID or Okta plus a documented REST API
Avoid if
- Your Outlook estate depends on Exchange ActiveSync or native MAPI — the documented path is IMAP/SMTP with a CalDav Synchronizer plug-in for calendars
- You must evidence GoBD-compliant archiving, retention policies or legal hold to an auditor — the judges found no public information on these
- You need more than 300 users on a paid plan — the pages direct larger needs to the sales team
- You rely on mobile device policies with remote wipe or exportable audit logs — the judges found no public information on either
The scores
| Criterion | Panel median |
|---|---|
| Mail, domains & deliverability | 3 of 5 |
| Calendar, contacts & office apps | 3.5 of 5 |
| Security, encryption & compliance archiving | 3 of 5 |
| Administration, identity & partner management | 3.5 of 5 |
| Migration, open standards & exit | 3 of 5 |
| European sovereignty | 4 of 5 |
| Pricing transparency | 3.5 of 5 |
Mail, domains & deliverability
Show reasoningHide reasoning
How this is scored
How well the mailbox itself works: custom domains and their DNS set-up, aliases, catch-all, shared and functional mailboxes, distribution lists, mailbox and attachment size limits, IMAP, POP3, SMTP and Exchange ActiveSync or MAPI for Outlook, web and mobile apps, spam and malware filtering, SPF, DKIM, DMARC and MTA-STS, out-of-office and server-side rules, send limits, and the delivery reputation of the sending infrastructure. A self-hosted groupware is judged on the mail server it ships; a suite whose mail app is only a client for another server scores at the level of that client.
0 — No mailbox at all; a product that only sends transactional mail or only reads another provider's mail without a server of its own or a documented one to pair it with.
3 — Mailboxes on a custom domain with IMAP and SMTP and a webmail; aliases, shared mailboxes, filtering and DKIM or DMARC are basic or not described.
5 — Several custom domains with a documented DNS set-up, aliases and distribution lists, shared or functional mailboxes, IMAP and SMTP plus mobile apps, spam and malware filtering, SPF and DKIM signing, mailbox size per plan stated, server-side rules and out-of-office replies.
8 — Exchange ActiveSync or native Outlook (MAPI) support, DMARC reporting and MTA-STS or DANE, catch-all and plus addressing, delegated access and send-as, quarantine an admin can review, send and attachment limits stated, and the deliverability of the outbound infrastructure documented.
10 — A mail platform a large organisation runs on: every protocol above with feature parity stated per client, inbound and outbound gateways configurable, journaling, DANE and MTA-STS enforced, delivery monitoring and bounce analysis for admins, and mail flow documented end to end.
The Small Firm Owner
Custom-domain mail is fully documented with IMAP on port 993 (SSL) and authenticated SMTP on 587 with STARTTLS, SPF, DKIM and DMARC plus anti-spam and anti-virus are stated, and the address model lets several of my staff work one shared mailbox each with their own revocable device password — that is exactly how our kanzlei@ address runs. Send limits (500 E-Mails / 24H paid), a 3 GB attachment ceiling and unlimited mailbox storage on paid plans are published. We found no public information on Exchange ActiveSync or native Outlook (MAPI) access — the documented Outlook set-up runs over IMAP — nor on catch-all, distribution lists, out-of-office replies or server-side rules. 2 3 6 7 13 17 19
The IT Administrator
Mailboxes on the own domain with IMAP on port 993, authenticated SMTP on 587, SPF, DKIM and DMARC filtering, anti-spam and anti-virus, unlimited mail storage on paid tiers and stated limits of 500 emails per 24 hours, 100 recipients and attachments to 3 GB. What stops me committing three hundred Outlook users: we found no public information on Exchange ActiveSync or MAPI, so Outlook connects over IMAP and the calendar needs the documented CalDav Synchronizer plug-in — a dependency on someone else's maintenance. We also found no public information on a quarantine an admin reviews, catch-all addresses or MTA-STS. 2 3 7 13 16
The Public Sector IT Lead
Mailboxes on our own domain with fully documented IMAP (port 993, SSL) and authenticated SMTP (587, STARTTLS) settings, SPF, DKIM and DMARC with anti-spam and anti-virus, stated send and attachment limits and unlimited mail storage on paid plans. For eleven hundred Outlook users, though, I found no public information on Exchange ActiveSync or native MAPI — the Outlook guide works over IMAP and warns that New Outlook is highly integrated with the Microsoft cloud — and none on distribution lists, server-side rules or out-of-office replies. 2 3 6 7 13 17
The IT Service Provider
Mailboxes on a custom domain with IMAP and SMTP on mail.infomaniak.com (port 993 SSL, 587 STARTTLS), webmail and mobile apps, anti-spam and antivirus, SPF, DKIM and DMARC integrated, storage and limits stated (unlimited mail storage on paid plans, 500 mails per 24h, 3 GB attachments, 30-day restore), and a shared-address model where several invited users work one mailbox with per-device passwords I can revoke individually. For what my clients ask about weekly — Exchange ActiveSync or native Outlook, catch-all, distribution lists, an admin-reviewable quarantine, DMARC reporting and MTA-STS — I found no public information. 2 3 6 7 13 19
The Data Protection Officer
Custom-domain mailboxes with documented IMAP on port 993 with SSL and SMTP on 587 with STARTTLS, a webmail at the kSuite mail app, mobile apps, SPF, DKIM and DMARC filters, anti-spam and anti-virus, unlimited mail storage on paid plans and stated send and attachment limits. We found no public information on shared or functional mailboxes, aliases, distribution lists, catch-all, out-of-office and server-side rules, or on ActiveSync or MAPI — New Outlook is configured over IMAP. The mailbox itself is solid and the OpenPGP/ECC encryption is exactly what a referral letter between doctors needs; what a nine-practice group would run centrally is not described. 2 3 7 13 20
The Skeptic
The Outlook question has a plain answer: IMAP on port 993 and SMTP on 587, and the vendor itself warns that the new Outlook experience is highly integrated with the Microsoft cloud — we found no public information on Exchange ActiveSync or native MAPI. What is documented is solid: SPF, DKIM and DMARC with anti-spam and anti-virus, 500 emails per 24 hours on paid plans, 3 GB attachments, unlimited paid mailbox storage and multiple addresses per user. We found no public information on distribution lists, catch-all, server-side rules, out-of-office replies or a documented DNS set-up for domains. 13 6 7 3 19
Calendar, contacts & office apps
Show reasoningHide reasoning
How this is scored
What the office plans and writes with: shared and team calendars, free/busy lookup, meeting invitations across providers, room and resource booking, shared address books and a company directory, CalDAV and CardDAV or ActiveSync for phones, Outlook calendar sync, tasks, online office documents with co-editing, file storage that comes with the suite, video meetings and chat inside the bundle, and the desktop and mobile apps.
0 — Mail only, with no calendar or contacts of any kind.
3 — A personal calendar and address book in the webmail; sharing, resources, sync protocols and office apps are basic or not described.
5 — Shared calendars and address books, meeting invitations with free/busy lookup, CalDAV and CardDAV or ActiveSync sync to phones and desktop clients, a company-wide address book, tasks, and either online office documents or a documented integration with an office suite.
8 — Room and resource booking with approval, delegated calendar access, Outlook calendar and contacts sync documented, co-editing of documents and spreadsheets in the browser, file storage with sharing, video meetings in the bundle, and apps for desktop, iOS and Android.
10 — A full office suite that replaces Microsoft 365 for a whole organisation: every function above with Microsoft file formats edited without loss, scheduling across organisations, resource planning, offline editing, an accessible interface stated against a standard, and feature parity across web, desktop and mobile documented.
The Small Firm Owner
CalDAV and CardDAV sync reaches iPhone, Android (via kSync), macOS and Windows Outlook through a documented configuration wizard, meeting rooms can be created with capacity and location, searched for a chosen time slot and carry a shareable calendar each, and OnlyOffice co-edits Word, Excel and PowerPoint formats in the browser with kDrive storage, kMeet video and kChat in the bundle. We found no public information on booking approval workflows, delegated calendar access, a company-wide address book or tasks. 1 2 7 15 16 17
The IT Administrator
Room booking is genuinely documented — per-room shareable calendars with location, capacity and equipment, availability search and occupancy overviews — plus OnlyOffice editing Word, Excel and PowerPoint in the browser, with kDrive, kMeet and kChat in one bundle and apps on all devices. We found no public information on an approval workflow for rooms, free/busy lookup or delegated calendar access, and the Outlook path again relies on the synchronizer plug-in. 1 15 16 17
The Public Sector IT Lead
Room booking with per-room shareable calendars, availability search and occupancy overviews, CalDAV and CardDAV sync to Apple, Android and Outlook via CalDav Synchronizer, browser co-editing of Word, Excel and open-document formats with OnlyOffice, kDrive storage, kMeet video and kChat in the bundle. It falls short of a full Microsoft 365 replacement on points I could not find documented: booking approval workflows, delegated calendar access, tasks, an accessibility standard, and full parity — the birthday calendar is web-app only. 1 2 7 15 16 17
The IT Service Provider
Per-room calendars with booking, availability search and occupancy overviews, CalDAV and CardDAV plus a sync wizard covering Outlook, Thunderbird, Apple Mail, eM Client and the phones, OnlyOffice and Microsoft Office Online co-editing on docx, odt, xlsx and odp files, and kMeet and kChat in the bundle with iOS and Android apps. That is most of what an office move needs; room approval workflows, delegated calendar access, cross-organisation scheduling and an accessibility statement I found no public information on. 1 2 3 7 15 16
The Data Protection Officer
Room and resource booking with per-room shareable calendars, availability search and occupancy overviews is documented, alongside CalDAV and CardDAV sync to iOS, macOS, Android and Outlook via CalDav Synchronizer, OnlyOffice co-editing of docx, odt, xlsx, ods, pptx and odp formats, kDrive storage, kMeet video conferencing and kChat with desktop and mobile apps. We found no public information on free/busy lookup, meeting invitations across providers, delegated calendar access, booking approval or a company-wide address book. For scheduling our consultation rooms this is well above basics; cross-organisation scheduling with outside hospitals is where the documentation stops. 1 2 7 15 16 17
The Skeptic
Room booking is genuinely documented — availability search, occupancy overviews, shareable per-room calendars and limits per plan — and CalDAV/CardDAV sync covers iOS, macOS, Android and Outlook via the CalDav Synchronizer plug-in, with OnlyOffice editing docx through odp formats in the browser and end-to-end encrypted video meetings in the bundle. We found no public information on free/busy lookup, meeting invitations across providers, delegated calendar access, tasks or a company-wide address book, and the room feature documents no approval workflow. 16 15 7 1 17
Security, encryption & compliance archiving
Show reasoningHide reasoning
How this is scored
How mail and documents are protected and kept: TLS enforced in transit, encryption at rest, end-to-end encryption or S/MIME and PGP, who at the provider can read a mailbox, two-factor authentication and passkeys, phishing, malware and account-takeover protection, audit-proof archiving that meets GoBD, retention policies and legal hold, eDiscovery, backups and restore of deleted mail, a transparency report on authority requests, and certifications (ISO 27001, BSI C5, SOC 2) with their scope.
0 — No security information of any kind; no encryption, two-factor sign-in or archiving stated.
3 — Encrypted connections and a password login; encryption at rest, two-factor sign-in, archiving and certifications are basic or not described.
5 — TLS in transit and encryption at rest stated, two-factor authentication, spam, phishing and malware protection, restore of deleted mail for a stated period, archiving offered (built in or as an add-on), and a certification such as ISO 27001 stated for the data centres or the service.
8 — End-to-end encryption, S/MIME or PGP supported, GoBD-compliant archiving documented, retention policies and legal hold, enforced two-factor or passkeys for all users, a transparency report on authority requests, and certifications such as ISO 27001 or BSI C5 published with their scope and auditor.
10 — Security that holds up in an audit of a regulated organisation: zero-access or customer-held keys where the provider cannot read mail, eDiscovery, tamper-proof archive with documented verification, every certification published with its report or attestation available, independent security audits or open-source code reviewed, and incident disclosure documented.
The Small Firm Owner
Encryption at rest and in transit, one-click mail encryption with OpenPGP and ECC, two-factor with backup codes, anti-spam and anti-virus, 30-day mail restoration, ISO 27001 covering the information security management system, annual penetration tests, a bug bounty and a GDPR/FADP data processing agreement are all on the record, with a stated policy of no access to customer data without an explicit request. We found no public information on GoBD-compliant archiving, retention policies or legal hold — which matters to a Steuerkanzlei — nor on a transparency report on authority requests or admin-enforced two-factor. 3 6 7 10 17 18 19
The IT Administrator
Operationally credible: ISO 27001 for the information security management system, encryption at rest and in transit, OpenPGP and ECC mail encryption, two-factor with backup codes, annual penetration tests, a bug bounty, a breach-notification commitment and mail restore windows up to 30 days. For a German manufacturer the gap is audit-side: we found no public information on GoBD-compliant archiving, retention policies, legal hold or a transparency report on authority requests. 3 7 17 18 19
The Public Sector IT Lead
ISO 27001 for the ISMS with a certificates page, two-factor sign-in with SMS and ten backup codes, OpenPGP and ECC one-click mail encryption, encryption at rest, mailboxes mirrored in two Swiss data centres with 30-day restore, annual penetration tests, a bug bounty, a breach-notification commitment and a downloadable DPA with TOMs annex. For a German district the gaps are the audit items: no public information on GoBD-compliant archiving, retention policies and legal hold, eDiscovery, admin-enforced two-factor or a transparency report on authority requests — and among the stated certifications (ISO 27001, 9001, 14001, 50001) I found no BSI C5. 3 6 7 10 17 18 19
The IT Service Provider
STARTTLS on sending, encryption at rest, OpenPGP and ECC with one-click mail encryption, SPF, DKIM and DMARC plus antivirus, two-factor with backup codes and SMS, login alerts from new locations, 30-day mail restore, annual penetration tests, a bug bounty, ISO 27001 for the ISMS alongside ISO 9001, 14001 and 50001, and a stated rule of no access to customer data without an explicit request except fraud. GoBD-compliant archiving, retention policies, legal hold, eDiscovery, enforced two-factor for all users and a transparency report on authority requests I found no public information on — the archiving gap matters for my German-side clients. 6 7 8 10 13 17 18 19
The Data Protection Officer
OpenPGP and ECC with one-click encryption, stated conformity with Swiss data protection law for transmitting sensitive data such as medical information, a published rule that no one at the provider accesses customer data without an explicit request except in fraud cases, temporary revocable support access that expires after seven days, two-factor authentication with backup codes, ISO 27001 for the ISMS, annual penetration tests, a bug bounty, breach notification and 30-day mail restoration are all documented. We found no public information on audit-proof archiving to GoBD, retention policies, legal hold or eDiscovery, and no transparency report on authority requests — disclosure is stated to occur only under a valid order under Swiss law. The answers on who can open a mailbox and under which law are among the clearest I have read; the archiving story my tax office would ask for is absent from the captured pages. 3 6 7 8 10 17 18 19
The Skeptic
Encryption is broad — at rest, in transit, one-click OpenPGP mail encryption, end-to-end video — with two-factor sign-in and backup codes, annual penetration tests, a bug bounty, ISO 27001 for the ISMS, a downloadable DPA with a TOMs annex, and restore windows from 30 days up to a year depending on plan. What I could not find is everything an auditor asks after: GoBD-style archiving, retention policies, legal hold, eDiscovery and a transparency report on authority requests. 17 6 18 19 3
Administration, identity & partner management
Show reasoningHide reasoning
How this is scored
How an IT team or an IT service provider runs it: an admin console for users, groups, mailboxes and domains, admin roles, single sign-on (SAML or OpenID Connect), sync with Active Directory, Entra ID or LDAP, SCIM provisioning, mobile device policies and remote wipe, audit logs of admin and user actions, usage reports, a documented API for provisioning, multi-tenant or reseller accounts for partners managing several customers, and the support channels and response times per plan.
0 — No administration; one login per mailbox and nothing managed centrally.
3 — A web console to add mailboxes and aliases; roles, single sign-on, directory sync and audit logs are basic or not described.
5 — An admin console for users, groups, mailboxes and domains, admin roles, two-factor sign-in enforceable by the admin, password policies, a documented API or command line for provisioning, an activity or audit log, and business support by phone or ticket stated per plan.
8 — Single sign-on (SAML or OpenID Connect), Active Directory, Entra ID or LDAP sync, SCIM provisioning, mobile device policies with remote wipe, audit logs exportable, delegated administration, partner or reseller accounts that manage several customer organisations, and support response times stated.
10 — Administration that scales across many organisations: every setting reachable by API with parity stated, granular role scopes, policies by group, logs streamed to a SIEM, white-label partner offerings with separate billing, and an SLA with service credits published.
The Small Firm Owner
The manager offers roles from legal representative down to external users with limited rights, an activity log, unified account security review and a documented REST API with an OpenAPI file and OAuth 2.0; single sign-on via SAML 2.0 and automated provisioning via SCIM 2.0 work with Microsoft Entra ID and Okta on the Enterprise tier, and support answers by phone and ticket seven days a week. We found no public information on mobile device policies with remote wipe, exportable audit logs, stated response times, or partner and reseller accounts managing several customer organisations. 2 5 7 19 21
The IT Administrator
For my team this reads well: single sign-on over SAML 2.0 with SCIM 2.0 provisioning including Microsoft Entra ID and Okta, a documented REST API with OAuth 2.0 and an OpenAPI file, organisation roles from legal representative down to limited external users, an activity log, and support seven days a week. We found no public information on mobile device policies with remote wipe, exportable audit logs or stated response times, and the resale question appears in the FAQ without an answer in what we read. 1 5 7 19 20
The Public Sector IT Lead
A unified manager console with four named roles from Legal Representative to limited External, SAML 2.0 and SCIM 2.0 single sign-on with Microsoft Entra ID and Okta, a REST API with OAuth 2.0, an OpenAPI file and scoped tokens, activity logs, and shared-address access through individually revocable device passwords, with ticket-based support seven days a week. I found no public information on mobile device policies with remote wipe, exportable audit logs or stated response times — and paid plans stop at 300 users, so eleven hundred staff means a sales conversation first. 2 5 7 13 19 20
The IT Service Provider
A Manager console with legal representative, administrator, user and external roles, an activity log, a REST API with OAuth2 covering mail, kDrive, kChat and kMeet, and SAML 2.0 with SCIM 2.0 against Microsoft Entra ID or Okta — support must enable it and it sits in the Enterprise tier. A reseller topic and a partner and affiliation category exist on the vendor pages, but a multi-client partner console with separate billing, exportable audit logs, mobile device policies with remote wipe, and stated support response times I found no public information on. 2 5 11 19 20
The Data Protection Officer
An organisation console with roles from legal representative through administrator to external limited-rights users, central review of users' account security, SAML 2.0 single sign-on and SCIM 2.0 provisioning with Microsoft Entra ID and Okta, a documented REST API with OAuth 2.0 scopes, an activity log and support seven days a week by phone and ticket are documented. We found no public information on mobile device policies with remote wipe, exportable audit logs, or stated response times; reselling kSuite is raised in the FAQ but partner accounts managing several customer organisations are not described. Our IT service provider could run this, but would miss device control and log export. 1 2 5 7 16 19
The Skeptic
The management story is real: roles from legal representative down to restricted external user, SAML 2.0 single sign-on with SCIM 2.0 provisioning against Entra ID, Okta or any standards-based identity provider, a documented REST API with OAuth 2.0 and OpenID Connect, an activity log, and phone support seven days a week from Switzerland. We found no public information on mobile device policies or remote wipe, on exporting audit logs, on support response times, or on reseller accounts managing several customers — the resale topic appears as a question with no captured answer. 19 5 2 7 13
Migration, open standards & exit
Show reasoningHide reasoning
How this is scored
How the organisation gets in and out: migration from Exchange, Microsoft 365, Google Workspace or another IMAP provider with a documented tool or service, mail, calendars and contacts carried over, coexistence during a move, standard protocols (IMAP, CalDAV, CardDAV, JMAP, open document formats) rather than proprietary ones, export of a mailbox and of the whole organisation in standard formats (mbox, EML, PST, ICS, vCard), open-source code or a self-hosted edition, what happens to data when the contract ends, and how domains and DNS are handed back.
0 — No way to bring mail in or take it out; a proprietary store with no IMAP access or export.
3 — IMAP access to mail; a migration path, calendar and contacts export and the end-of-contract handling are basic or not described.
5 — A documented migration from Exchange, Microsoft 365 or Google (a tool, an import or a service), mail, calendars and contacts imported, IMAP, CalDAV and CardDAV or ActiveSync access, export of mail, calendars and contacts in standard formats, and the deletion of data after the contract ends stated.
8 — A migration service or tool that moves whole organisations with calendars and permissions, coexistence with free/busy during the move, open document formats supported natively, export of the whole organisation by the admin, an open-source code base or a self-hosted edition, and a data return period after cancellation stated.
10 — An exit that costs nothing but time: every record exportable in open formats with the method documented, a self-hosted open-source edition with feature parity stated, migration in and out documented with the same tools, and a contractual data return and deletion with confirmation.
The Small Firm Owner
A free expert migration moves domain names, websites and email addresses with the old service running until the transfer completes — the advice to cancel the old contract only after migration fits, old emails and folders transfer automatically, calendars and contacts move by ICS and vCard files, IMAP, CalDAV and CardDAV keep everything on standard protocols, and deletion of data including backups after termination is stated. We found no public information on a documented tool that moves a whole organisation from Microsoft 365 or Exchange together with permissions, on admin-side export of the entire organisation, or on a stated data-return period. 2 3 4 10 16 21 22
The IT Administrator
Getting mail in is covered: a free migration service for domain names and email addresses without service interruption, automatic transfer of old mail and folders, ICS calendar and vCard/CSV contact import, open IMAP, CalDAV and CardDAV access, and deletion of data including backups after termination stated in the privacy policy. Leaving Exchange is the weak side — we found no public information on moving whole organisations with calendars and permissions or on coexistence with free/busy during the move, and open-source components are published only "increasingly", with no public information on a self-hosted edition. 1 3 4 10 21 22
The Public Sector IT Lead
A migration service that moves e-mail addresses and domain names free of charge, with no service interruption and the sensible advice to cancel the old contract only after the move completes, plus ICS and vCard import and export, IMAP, CalDAV and CardDAV access, open document formats in OnlyOffice, and deletion of data including backups after termination. The exit is thinner than the entry: no public information on whole-organisation export by an admin, mail export in a standard format, free/busy coexistence during a move, or a self-hosted edition — only that components are being opened up "increasingly". 1 2 4 8 10 21 22
The IT Service Provider
A free migration service run by Infomaniak's experts moves domain names, websites and email addresses without service interruption, there is automatic transfer of old mails and folders, ICS, vCard and CSV import, IMAP, CalDAV and CardDAV access, and deletion of data including backups after cancellation within service-specific periods. Coexistence with free/busy during a move, whole-organisation export by the admin and a numeric data-return period I found no public information on; a Microsoft 365 migration topic appears on the vendor page and Mattermost import is on request, but the details are not shown. 1 3 4 10 13 21 22
The Data Protection Officer
A free migration service for domain names, websites and email addresses without service interruption, automatic transfer of old emails and folders, imports of calendars as ICS and contacts as vCard or CSV, IMAP, CalDAV and CardDAV access, native editing of open document formats with OnlyOffice, deletion of data including backups after termination under service-specific timeframes, and increasingly open-sourced components are documented. We found no public information on export of a whole organisation's mail by an admin, coexistence with free/busy during a move, or a stated data return period after cancellation. Getting our nine practices in is well covered; getting out again rests on per-account exports. 1 3 4 8 10 16 21 22
The Skeptic
Getting in is documented and free: a migration service for domain names, websites and email addresses with no service interruption, automatic transfer of old mail and folders, and ICS/vCard import; getting out rests on IMAP, CalDAV/CardDAV,.ics and.vcf export guides and a promise of open formats and documented APIs. Data including backups is deleted after cancellation within per-service timeframes, but we found no public information on whole-organisation export by an admin, coexistence with free/busy during a move, a stated data-return period, or a self-hosted edition. 21 4 22 3 10 8
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where mailboxes, calendars, contacts, documents and backups are stored and processed, who at the provider or its subprocessors can access them, and who the subprocessors are (data centres, spam filtering, support, payment, AI features). Independently sourced by the sovereignty pipeline. An EU data region offered by a non-EU parent is part of the chain, not the whole of it. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (spam filtering, support, backups, AI features) run through non-EU providers or a non-EU parent without a stated safeguard.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5) stated — or a self-hosted edition documented that keeps every mailbox on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The Small Firm Owner
Everything sits in the company's own Swiss data centres with a stated policy of never transferring data outside its own infrastructure, the firm is employee-controlled with a foundation protecting its independence, the legal framework is described as GDPR and Swiss FADP with protection from the Cloud Act, an ISO 27001 certificate and a published data processing agreement are on record, and subcontractors for payments, two-factor SMS and website forms are named. The contracting entity and hosting are Swiss rather than EU, however, and the named subcontractors appear without their locations. 6 8 9 10 12 17 18
The IT Administrator
The chain is European and almost entirely its own: Infomaniak Network SA in Geneva, majority employee capital with a foundation guarding independence, data exclusively in self-operated Swiss data centres that never leaves its own infrastructure, a downloadable data processing agreement under GDPR and Swiss FADP, and ISO 27001. Subprocessors for payments and SMS two-factor are named — PayPal, Twilio, reCAPTCHA among them — but without individual locations, so the picture is strong yet stops just short of a fully itemised chain. 8 9 10 12 17 18
The Public Sector IT Lead
Infomaniak Network SA in Geneva, employee-majority capital protected by a foundation, own data centres, data never transferred outside their own Swiss infrastructure, support staff entirely in Switzerland, a published DPA under GDPR and the Swiss FADP, ISO 27001, and the stated position that hosted data answers to European law and sits beyond the Cloud Act's reach. Two reservations keep it from full marks: Switzerland is not the EU, and the named subprocessors — PayPal, Twilio, MaxMind, Google reCAPTCHA for payments, fraud checks and two-factor SMS — are listed without their locations. 1 6 8 10 17 18 19
The IT Service Provider
A Swiss contracting entity (Infomaniak Network SA, Geneva, commercial register CH-660.0.059.996-1), employee-majority ownership protected by a foundation, mail and files hosted exclusively in the company's own Swiss data centres with no transfer outside its own infrastructure, AI hosted in Switzerland, support staff entirely in Geneva and Zurich, a GDPR and FADP data processing agreement, named subprocessors (Checkout, PayPal, Twilio, MaxMind, ALTCHA, reCAPTCHA, Trustindex) and ISO 27001. Two things hold me back from full marks: the subprocessor locations are not stated beside the names, and Switzerland is my neighbour, not an EU member state. 1 3 8 9 10 17 18 21
The Data Protection Officer
Infomaniak Network SA of Geneva, an independent company controlled by its employees with a foundation protecting that independence, designs and runs its own data centres and states data is hosted exclusively in Switzerland and never transferred outside its own infrastructure; a data processing agreement under the GDPR and the Swiss FADP can be generated and downloaded by owners and administrators, ISO 27001 is stated, all staff and support sit in Geneva and Zurich, and even the AI is hosted in Switzerland. Subprocessors for website forms and payments — among them reCAPTCHA, PayPal, Twilio and MaxMind — are named with their purposes, but their locations are not stated and I find no list specific to the mail chain. This is close to the chain I would sign for patient correspondence; the named subprocessors without locations are the remaining question. 6 8 9 10 12 17 18 19 21
The Skeptic
The chain is unusually verifiable: Infomaniak Network SA in Geneva, employee-held with a foundation guarding independence, mail in its own Swiss data centres that never leaves its own infrastructure, staff and support exclusively in Geneva and Zurich, Swiss-hosted AI, a published DPA under GDPR and the Swiss FADP, and ISO 27001 for the ISMS. The privacy policy does name its subcontractors — Twilio for two-factor SMS, PayPal and Checkout for payments, Google reCAPTCHA and ALTCHA for forms, MaxMind for fraud prevention — but not their locations, so the sign-in and billing legs of the chain are named without being placed. 9 17 12 8 10 6
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per user or mailbox per tier, storage per user, what shared mailboxes, aliases and extra domains cost, which features (archiving, office apps, SSO, advanced security, more storage) cost extra, the first-year discount and the regular price after it, minimum users and term, monthly versus annual billing, and VAT.
0 — No public prices at all; every customer is a sales call.
3 — A starting price per user exists, but how cost scales with storage, users, add-ons or after the first year is unclear.
5 — Tiers are public with their price per user and main inclusions, but at least one commonly needed piece (archiving, extra storage, shared mailboxes, SSO, the price after the introductory period) is unpriced or "on request".
8 — Every tier priced publicly per user with storage, add-ons priced, the regular price after any introductory discount stated, minimum users and term stated, monthly and annual billing compared, and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given number of users, storage and add-ons, with every support, migration and archive fee and the cancellation and data-return terms published.
The Small Firm Owner
Every tier is priced per user in Swiss francs with storage, address counts, room counts, version history and send limits attached, the regular price after the first-year discount is printed plainly — "Business -50% im ersten Jahr CHF 7.34 3.67 pro Benutzer / Monat" — an optional kDrive starts at CHF 5.35 / Monat, and prices are stated exclusive of VAT. We found no public information on minimum users or term, a monthly-billing option, or the price of Premium Support, and the captured pages give different figures for what a CHF 1.76 per-user plan includes. 1 2 3 7 9
The IT Administrator
Per-user prices are public — free, Standard at CHF 1.76, Business at CHF 7.34 falling to 3.67 in the first year, Enterprise at CHF 13.83 falling to 6.92 — with storage, email addresses, meeting rooms and send limits per tier, a stated 300-user ceiling, prices quoted excluding VAT, and kDrive priced as an add-on from CHF 5.35 per month. What a buyer cannot yet compute: Premium Support is offered without a price, monthly and annual billing are not compared, and the captured pages give different figures for what the CHF 1.76 tier includes — 50 GB under the Standard label, up to 6 TB cloud under a kSuite PRO label. 1 2 3 7 20
The Public Sector IT Lead
Every tier is public per user and per month — Standard at CHF 1.76, Business at CHF 7.34 with CHF 3.67 in the first year, Enterprise at CHF 13.83 with CHF 6.92 — with storage per user, mail addresses per user, the regular price after the 50% introductory year, VAT treatment ("Preise exkl. MwSt.") and a free migration stated. Not computable from public pages: minimum users and term, a monthly versus annual comparison, and prices for Premium Support, shared mailboxes or extra domains; the kDrive add-on is given only "ab CHF 5.35 / Monat", and paid plans are capped at 300 users. 2 3 7 11 20
The IT Service Provider
Every tier is public with its per-user price and storage — Free at nothing, Standard at CHF 1.76, Business at CHF 7.34 regular and CHF 3.67 first year, Enterprise at CHF 13.83 regular and CHF 6.92 first year — plus e-mail addresses per user, user caps up to 300, the regular price after the 50% first-year discount, free migration and VAT explicitly excluded. A monthly-versus-annual billing comparison, premium support fees and prices for extra domains or shared addresses I found no public information on, and the captured pages give different storage figures at the CHF 1.76 price point, which makes a clean quote from them alone harder. 1 2 3 7 11
The Data Protection Officer
Every tier carries a public per-user price in CHF — Standard at CHF 1.76, Business at CHF 7.34 with CHF 3.67 in the first year at minus fifty per cent with annual commitment, Enterprise at CHF 13.83 with CHF 6.92 — alongside storage per plan, email addresses per user, room and file-version limits per plan, VAT stated as excluded, a cap of 300 users and a free tier. We found no public information comparing monthly and annual billing for the paid tiers, and add-on pricing beyond kDrive from CHF 5.35 per month is not shown. I could budget the mailboxes from the public pages; the extras my colleagues would ask about are not all priced. 1 2 3 7 9 11
The Skeptic
Per-user prices, storage, addresses, rooms and channels per tier, the regular price after the 50% first-year discount, the discount's conditions, the 300-user ceiling and VAT treatment are all public. The captured pages give different figures for what the CHF 1.76 tier is called and how much storage it includes, and we found no public information on monthly versus annual billing compared, on minimum users, or on the price of Premium Support. 7 2 1 3 15 20
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined ⚠ unverified | — | uncited Report an error |
Questions about Infomaniak kSuite
Is Infomaniak kSuite European?
Yes, though not from the EU. whats-best.ai classifies Infomaniak kSuite as UK / wider Europe.
Where does Infomaniak kSuite store data?
The default storage location for customer data is not stated on the vendor’s pages as of 5 Nov 2026. The vendor’s pages mention Switzerland as hosting location, per the vendor’s page captured 5 Nov 2026.
Does Infomaniak kSuite have a free plan?
Yes. Infomaniak kSuite has a free plan, per the vendor’s page captured 5 Nov 2026.
What are the best alternatives to Infomaniak kSuite?
As of 6 Nov 2026, the panel rates grommunio (3.5/5), Nextcloud Hub (Groupware & Office) (3.5/5) and Proton for Business (3.5/5) highest among the other 14 Business Email & Office Suites products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is grommunio (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Infomaniak kSuite alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 5 Nov 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Transfer impact assessment, Hosting location, Legal entity. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 15 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 8 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 4 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 4 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
Sources (22)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage (kSuite) www.infomaniak.com Checked 5 Nov 2026 Details →
- 2 Features page (kSuite for businesses) www.infomaniak.com Checked 5 Nov 2026 Details →
- 3 Features page (mail service) www.infomaniak.com Checked 5 Nov 2026 Details →
- 4 Features page (migration service) www.infomaniak.com Checked 5 Nov 2026 Details →
- 5 API documentation developer.infomaniak.com Checked 5 Nov 2026 Details →
- 6 Security / trust page www.infomaniak.com Checked 5 Nov 2026 Details →
- 7 Pricing page www.infomaniak.com Checked 5 Nov 2026 Details →
- 8 Company page www.infomaniak.com Checked 5 Nov 2026 Details →
- 9 Legal notice www.infomaniak.com Checked 5 Nov 2026 Details →
- 10 Privacy policy www.infomaniak.com Checked 5 Nov 2026 Details →
- 11 Terms of service www.infomaniak.com Checked 5 Nov 2026 Details →
- 12 GDPR page www.infomaniak.com Checked 5 Nov 2026 Details →
- 13 Mail, domains & deliverability — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 14 Mail, domains & deliverability — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 15 Calendar, contacts & office apps — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 16 Calendar, contacts & office apps — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 17 Security, encryption & compliance archiving — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 18 Security, encryption & compliance archiving — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 19 Administration, identity & partner management — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 20 Administration, identity & partner management — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 21 Migration, open standards & exit — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
- 22 Migration, open standards & exit — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →