whats-best.ai
Search Sign in

Business Email & Office Suites

Infomaniak kSuite

UK / wider Europe Report an error

Panel rating · 6 judges · How to read the stars

Category median

Sovereignty: not determined

0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.

by Infomaniak Network SA · www.infomaniak.com

Compare with Google Workspace → Report an error on this page Is this your product? →

Link to this page

Infomaniak kSuite: AI-assisted analysis on whats-best.ai Infomaniak kSuite: AI-assisted analysis on whats-best.ai (dark)

Add ?theme=dark to the image address for dark backgrounds. The badge shows the category and the month of the latest evaluation, and EU-Made where that is the product’s provenance. It never shows a score.

Infomaniak kSuite at a glance

Vendor
Infomaniak Network SA
Headquarters
Not stated on the vendor’s pages as of 5 Nov 2026
Data hosting
Default not stated; pages mention Switzerland source, captured 5 Nov 2026
Free plan
Yes, per the vendor’s own page source, captured 5 Nov 2026
Panel verdict
The AI panel rates Infomaniak kSuite 3.5/5, the mean of 6 judges. Infomaniak kSuite — mail, calendar, contacts, kDrive, kChat and kMeet from Infomaniak Network SA of Geneva — scores strongest on sovereignty at 7 to 8: own Swiss data centres, data stated never to leave the vendor's own infrastructure, employee-held capital guarded by a foundation, and support staff in Geneva and Zurich. how scores are made
As of
Vendor pages captured 5 Nov 2026; evaluated by the panel 5 Nov 2026. all sources

Infomaniak kSuite alternatives, European ones first →

Read this page as one judge. Each weighs the same scores by what they care about.

The Data Protection Officer

Weighted verdict

Data protection officer for a group of nine medical practices in North Rhine-Westphalia, where a referral letter sent by mail is patient data under professional secrecy. Reads the subprocessor list and the transparency report before the feature page, asks who at the provider can open a mailbox and under which law, and wants encryption the practices can actually use with outside doctors, archiving that satisfies the tax office, and a data processing agreement that names every server.

Same scores as the panel view — this lens weights them the way this judge cares.

Scored by The Data Protection Officer

Panel median The Data Protection Officer This judge’s scores over the panel median. Each label opens its reasoning below.
Scores per criterion, in stars out of 5
Criterion Panel median The Data Protection Officer
Mail, domains & deliverability 3 of 5 2 of 5
Calendar, contacts & office apps 3.5 of 5 3.5 of 5
Security, encryption & compliance archiving 3 of 5 3 of 5
Administration, identity & partner management 3.5 of 5 3.5 of 5
Migration, open standards & exit 3 of 5 3 of 5
European sovereignty 4 of 5 4 of 5
Pricing transparency 3.5 of 5 3.5 of 5

Mail, domains & deliverability

How this is scored

How well the mailbox itself works: custom domains and their DNS set-up, aliases, catch-all, shared and functional mailboxes, distribution lists, mailbox and attachment size limits, IMAP, POP3, SMTP and Exchange ActiveSync or MAPI for Outlook, web and mobile apps, spam and malware filtering, SPF, DKIM, DMARC and MTA-STS, out-of-office and server-side rules, send limits, and the delivery reputation of the sending infrastructure. A self-hosted groupware is judged on the mail server it ships; a suite whose mail app is only a client for another server scores at the level of that client.

0 — No mailbox at all; a product that only sends transactional mail or only reads another provider's mail without a server of its own or a documented one to pair it with.

3 — Mailboxes on a custom domain with IMAP and SMTP and a webmail; aliases, shared mailboxes, filtering and DKIM or DMARC are basic or not described.

5 — Several custom domains with a documented DNS set-up, aliases and distribution lists, shared or functional mailboxes, IMAP and SMTP plus mobile apps, spam and malware filtering, SPF and DKIM signing, mailbox size per plan stated, server-side rules and out-of-office replies.

8 — Exchange ActiveSync or native Outlook (MAPI) support, DMARC reporting and MTA-STS or DANE, catch-all and plus addressing, delegated access and send-as, quarantine an admin can review, send and attachment limits stated, and the deliverability of the outbound infrastructure documented.

10 — A mail platform a large organisation runs on: every protocol above with feature parity stated per client, inbound and outbound gateways configurable, journaling, DANE and MTA-STS enforced, delivery monitoring and bounce analysis for admins, and mail flow documented end to end.

Report an error

The Data Protection Officer

Custom-domain mailboxes with documented IMAP on port 993 with SSL and SMTP on 587 with STARTTLS, a webmail at the kSuite mail app, mobile apps, SPF, DKIM and DMARC filters, anti-spam and anti-virus, unlimited mail storage on paid plans and stated send and attachment limits. We found no public information on shared or functional mailboxes, aliases, distribution lists, catch-all, out-of-office and server-side rules, or on ActiveSync or MAPI — New Outlook is configured over IMAP. The mailbox itself is solid and the OpenPGP/ECC encryption is exactly what a referral letter between doctors needs; what a nine-practice group would run centrally is not described. 2 3 7 13 20

Report an error

Calendar, contacts & office apps

How this is scored

What the office plans and writes with: shared and team calendars, free/busy lookup, meeting invitations across providers, room and resource booking, shared address books and a company directory, CalDAV and CardDAV or ActiveSync for phones, Outlook calendar sync, tasks, online office documents with co-editing, file storage that comes with the suite, video meetings and chat inside the bundle, and the desktop and mobile apps.

0 — Mail only, with no calendar or contacts of any kind.

3 — A personal calendar and address book in the webmail; sharing, resources, sync protocols and office apps are basic or not described.

5 — Shared calendars and address books, meeting invitations with free/busy lookup, CalDAV and CardDAV or ActiveSync sync to phones and desktop clients, a company-wide address book, tasks, and either online office documents or a documented integration with an office suite.

8 — Room and resource booking with approval, delegated calendar access, Outlook calendar and contacts sync documented, co-editing of documents and spreadsheets in the browser, file storage with sharing, video meetings in the bundle, and apps for desktop, iOS and Android.

10 — A full office suite that replaces Microsoft 365 for a whole organisation: every function above with Microsoft file formats edited without loss, scheduling across organisations, resource planning, offline editing, an accessible interface stated against a standard, and feature parity across web, desktop and mobile documented.

Report an error

The Data Protection Officer

Room and resource booking with per-room shareable calendars, availability search and occupancy overviews is documented, alongside CalDAV and CardDAV sync to iOS, macOS, Android and Outlook via CalDav Synchronizer, OnlyOffice co-editing of docx, odt, xlsx, ods, pptx and odp formats, kDrive storage, kMeet video conferencing and kChat with desktop and mobile apps. We found no public information on free/busy lookup, meeting invitations across providers, delegated calendar access, booking approval or a company-wide address book. For scheduling our consultation rooms this is well above basics; cross-organisation scheduling with outside hospitals is where the documentation stops. 1 2 7 15 16 17

Report an error

Security, encryption & compliance archiving

How this is scored

How mail and documents are protected and kept: TLS enforced in transit, encryption at rest, end-to-end encryption or S/MIME and PGP, who at the provider can read a mailbox, two-factor authentication and passkeys, phishing, malware and account-takeover protection, audit-proof archiving that meets GoBD, retention policies and legal hold, eDiscovery, backups and restore of deleted mail, a transparency report on authority requests, and certifications (ISO 27001, BSI C5, SOC 2) with their scope.

0 — No security information of any kind; no encryption, two-factor sign-in or archiving stated.

3 — Encrypted connections and a password login; encryption at rest, two-factor sign-in, archiving and certifications are basic or not described.

5 — TLS in transit and encryption at rest stated, two-factor authentication, spam, phishing and malware protection, restore of deleted mail for a stated period, archiving offered (built in or as an add-on), and a certification such as ISO 27001 stated for the data centres or the service.

8 — End-to-end encryption, S/MIME or PGP supported, GoBD-compliant archiving documented, retention policies and legal hold, enforced two-factor or passkeys for all users, a transparency report on authority requests, and certifications such as ISO 27001 or BSI C5 published with their scope and auditor.

10 — Security that holds up in an audit of a regulated organisation: zero-access or customer-held keys where the provider cannot read mail, eDiscovery, tamper-proof archive with documented verification, every certification published with its report or attestation available, independent security audits or open-source code reviewed, and incident disclosure documented.

Report an error

The Data Protection Officer

OpenPGP and ECC with one-click encryption, stated conformity with Swiss data protection law for transmitting sensitive data such as medical information, a published rule that no one at the provider accesses customer data without an explicit request except in fraud cases, temporary revocable support access that expires after seven days, two-factor authentication with backup codes, ISO 27001 for the ISMS, annual penetration tests, a bug bounty, breach notification and 30-day mail restoration are all documented. We found no public information on audit-proof archiving to GoBD, retention policies, legal hold or eDiscovery, and no transparency report on authority requests — disclosure is stated to occur only under a valid order under Swiss law. The answers on who can open a mailbox and under which law are among the clearest I have read; the archiving story my tax office would ask for is absent from the captured pages. 3 6 7 8 10 17 18 19

Report an error

Administration, identity & partner management

How this is scored

How an IT team or an IT service provider runs it: an admin console for users, groups, mailboxes and domains, admin roles, single sign-on (SAML or OpenID Connect), sync with Active Directory, Entra ID or LDAP, SCIM provisioning, mobile device policies and remote wipe, audit logs of admin and user actions, usage reports, a documented API for provisioning, multi-tenant or reseller accounts for partners managing several customers, and the support channels and response times per plan.

0 — No administration; one login per mailbox and nothing managed centrally.

3 — A web console to add mailboxes and aliases; roles, single sign-on, directory sync and audit logs are basic or not described.

5 — An admin console for users, groups, mailboxes and domains, admin roles, two-factor sign-in enforceable by the admin, password policies, a documented API or command line for provisioning, an activity or audit log, and business support by phone or ticket stated per plan.

8 — Single sign-on (SAML or OpenID Connect), Active Directory, Entra ID or LDAP sync, SCIM provisioning, mobile device policies with remote wipe, audit logs exportable, delegated administration, partner or reseller accounts that manage several customer organisations, and support response times stated.

10 — Administration that scales across many organisations: every setting reachable by API with parity stated, granular role scopes, policies by group, logs streamed to a SIEM, white-label partner offerings with separate billing, and an SLA with service credits published.

Report an error

The Data Protection Officer

An organisation console with roles from legal representative through administrator to external limited-rights users, central review of users' account security, SAML 2.0 single sign-on and SCIM 2.0 provisioning with Microsoft Entra ID and Okta, a documented REST API with OAuth 2.0 scopes, an activity log and support seven days a week by phone and ticket are documented. We found no public information on mobile device policies with remote wipe, exportable audit logs, or stated response times; reselling kSuite is raised in the FAQ but partner accounts managing several customer organisations are not described. Our IT service provider could run this, but would miss device control and log export. 1 2 5 7 16 19

Report an error

Migration, open standards & exit

How this is scored

How the organisation gets in and out: migration from Exchange, Microsoft 365, Google Workspace or another IMAP provider with a documented tool or service, mail, calendars and contacts carried over, coexistence during a move, standard protocols (IMAP, CalDAV, CardDAV, JMAP, open document formats) rather than proprietary ones, export of a mailbox and of the whole organisation in standard formats (mbox, EML, PST, ICS, vCard), open-source code or a self-hosted edition, what happens to data when the contract ends, and how domains and DNS are handed back.

0 — No way to bring mail in or take it out; a proprietary store with no IMAP access or export.

3 — IMAP access to mail; a migration path, calendar and contacts export and the end-of-contract handling are basic or not described.

5 — A documented migration from Exchange, Microsoft 365 or Google (a tool, an import or a service), mail, calendars and contacts imported, IMAP, CalDAV and CardDAV or ActiveSync access, export of mail, calendars and contacts in standard formats, and the deletion of data after the contract ends stated.

8 — A migration service or tool that moves whole organisations with calendars and permissions, coexistence with free/busy during the move, open document formats supported natively, export of the whole organisation by the admin, an open-source code base or a self-hosted edition, and a data return period after cancellation stated.

10 — An exit that costs nothing but time: every record exportable in open formats with the method documented, a self-hosted open-source edition with feature parity stated, migration in and out documented with the same tools, and a contractual data return and deletion with confirmation.

Report an error

The Data Protection Officer

A free migration service for domain names, websites and email addresses without service interruption, automatic transfer of old emails and folders, imports of calendars as ICS and contacts as vCard or CSV, IMAP, CalDAV and CardDAV access, native editing of open document formats with OnlyOffice, deletion of data including backups after termination under service-specific timeframes, and increasingly open-sourced components are documented. We found no public information on export of a whole organisation's mail by an admin, coexistence with free/busy during a move, or a stated data return period after cancellation. Getting our nine practices in is well covered; getting out again rests on per-account exports. 1 3 4 8 10 16 21 22

Report an error

European sovereignty

How this is scored

Who the contracting entity and the parent company are, where mailboxes, calendars, contacts, documents and backups are stored and processed, who at the provider or its subprocessors can access them, and who the subprocessors are (data centres, spam filtering, support, payment, AI features). Independently sourced by the sovereignty pipeline. An EU data region offered by a non-EU parent is part of the chain, not the whole of it. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.

0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.

3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.

5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (spam filtering, support, backups, AI features) run through non-EU providers or a non-EU parent without a stated safeguard.

8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, BSI C5) stated — or a self-hosted edition documented that keeps every mailbox on the customer's own servers.

10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.

Report an error

The Data Protection Officer

Infomaniak Network SA of Geneva, an independent company controlled by its employees with a foundation protecting that independence, designs and runs its own data centres and states data is hosted exclusively in Switzerland and never transferred outside its own infrastructure; a data processing agreement under the GDPR and the Swiss FADP can be generated and downloaded by owners and administrators, ISO 27001 is stated, all staff and support sit in Geneva and Zurich, and even the AI is hosted in Switzerland. Subprocessors for website forms and payments — among them reCAPTCHA, PayPal, Twilio and MaxMind — are named with their purposes, but their locations are not stated and I find no list specific to the mail chain. This is close to the chain I would sign for patient correspondence; the named subprocessors without locations are the remaining question. 6 8 9 10 12 17 18 19 21

Report an error

Pricing transparency

How this is scored

Whether a buyer can compute the real annual cost from public pages alone: price per user or mailbox per tier, storage per user, what shared mailboxes, aliases and extra domains cost, which features (archiving, office apps, SSO, advanced security, more storage) cost extra, the first-year discount and the regular price after it, minimum users and term, monthly versus annual billing, and VAT.

0 — No public prices at all; every customer is a sales call.

3 — A starting price per user exists, but how cost scales with storage, users, add-ons or after the first year is unclear.

5 — Tiers are public with their price per user and main inclusions, but at least one commonly needed piece (archiving, extra storage, shared mailboxes, SSO, the price after the introductory period) is unpriced or "on request".

8 — Every tier priced publicly per user with storage, add-ons priced, the regular price after any introductory discount stated, minimum users and term stated, monthly and annual billing compared, and VAT treatment stated.

10 — Complete price computability: annual cost derivable for a given number of users, storage and add-ons, with every support, migration and archive fee and the cancellation and data-return terms published.

Report an error

The Data Protection Officer

Every tier carries a public per-user price in CHF — Standard at CHF 1.76, Business at CHF 7.34 with CHF 3.67 in the first year at minus fifty per cent with annual commitment, Enterprise at CHF 13.83 with CHF 6.92 — alongside storage per plan, email addresses per user, room and file-version limits per plan, VAT stated as excluded, a cap of 300 users and a free tier. We found no public information comparing monthly and annual billing for the paid tiers, and add-on pricing beyond kDrive from CHF 5.35 per month is not shown. I could budget the mailboxes from the public pages; the extras my colleagues would ask about are not all priced. 1 2 3 7 9 11

Report an error

European sovereignty — proven facts

0 of 6 dimensions proven

Built only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.

Hosting location Not determined ⚠ unverified — uncited Report an error
Hosting options Not determined — uncited Report an error
Open source Not determined — uncited Report an error
Data processing agreement Not determined ⚠ unverified — uncited Report an error
Transfer impact assessment Not determined ⚠ unverified — uncited Report an error

Questions about Infomaniak kSuite

Is Infomaniak kSuite European?

Yes, though not from the EU. whats-best.ai classifies Infomaniak kSuite as UK / wider Europe.

Where does Infomaniak kSuite store data?

The default storage location for customer data is not stated on the vendor’s pages as of 5 Nov 2026. The vendor’s pages mention Switzerland as hosting location, per the vendor’s page captured 5 Nov 2026.

Does Infomaniak kSuite have a free plan?

Yes. Infomaniak kSuite has a free plan, per the vendor’s page captured 5 Nov 2026.

What are the best alternatives to Infomaniak kSuite?

As of 6 Nov 2026, the panel rates grommunio (3.5/5), Nextcloud Hub (Groupware & Office) (3.5/5) and Proton for Business (3.5/5) highest among the other 14 Business Email & Office Suites products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is grommunio (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Infomaniak kSuite alternatives.

Where this could be wrong

What we left out

A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.

Do you know more about Infomaniak kSuite? Tell us Report an error on this page

Sources (22)

The pages every claim on this page was read from — each one checked, dated, and kept verifiable.

  1. 1 Vendor homepage (kSuite) www.infomaniak.com Checked 5 Nov 2026 Details →
  2. 2 Features page (kSuite for businesses) www.infomaniak.com Checked 5 Nov 2026 Details →
  3. 3 Features page (mail service) www.infomaniak.com Checked 5 Nov 2026 Details →
  4. 4 Features page (migration service) www.infomaniak.com Checked 5 Nov 2026 Details →
  5. 5 API documentation developer.infomaniak.com Checked 5 Nov 2026 Details →
  6. 6 Security / trust page www.infomaniak.com Checked 5 Nov 2026 Details →
  7. 7 Pricing page www.infomaniak.com Checked 5 Nov 2026 Details →
  8. 8 Company page www.infomaniak.com Checked 5 Nov 2026 Details →
  9. 9 Legal notice www.infomaniak.com Checked 5 Nov 2026 Details →
  10. 10 Privacy policy www.infomaniak.com Checked 5 Nov 2026 Details →
  11. 11 Terms of service www.infomaniak.com Checked 5 Nov 2026 Details →
  12. 12 GDPR page www.infomaniak.com Checked 5 Nov 2026 Details →
  13. 13 Mail, domains & deliverability — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  14. 14 Mail, domains & deliverability — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  15. 15 Calendar, contacts & office apps — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  16. 16 Calendar, contacts & office apps — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  17. 17 Security, encryption & compliance archiving — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  18. 18 Security, encryption & compliance archiving — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  19. 19 Administration, identity & partner management — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  20. 20 Administration, identity & partner management — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  21. 21 Migration, open standards & exit — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →
  22. 22 Migration, open standards & exit — found from sitemap www.infomaniak.com Checked 5 Nov 2026 Details →