# mailbox.org Business — Business Email & Office Suites

mailbox.org Business by Heinlein Hosting GmbH holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-06. Provenance: EU-Made; sovereignty: not determined.

- Vendor: Heinlein Hosting GmbH (https://mailbox.org/de/business/)
- Category: [Business Email & Office Suites](https://whats-best.ai/software/business-email.md)
- Provenance (editorial classification): EU-Made
- Canonical page: https://whats-best.ai/software/business-email/mailbox-org
- Alternatives: https://whats-best.ai/software/business-email/mailbox-org/alternatives ([markdown](https://whats-best.ai/software/business-email/mailbox-org/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-06 · oldest source captured 2026-11-05

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Heinlein Hosting GmbH
- Headquarters: Not stated on the vendor’s pages as of 5 Nov 2026
- Data hosting: Default not stated; pages mention Germany [S1]
- Free plan: Not stated on the vendor’s pages as of 5 Nov 2026

## The panel's verdict

mailbox.org Business, operated by Heinlein Hosting GmbH, bundles mail (webmail, IMAP, POP3), calendar, contacts, browser office editing, drive and video meetings, with servers stated to stand exclusively in Berlin. Five of six judges scored between 6 and 8 on all seven criteria; the data protection officer's scores are 0 on the same seven. The bench is firmest on pricing transparency, scored 7 by five of six judges for tiers of Light 1 €, Standard 4 € and Premium 12 € per month, and on sovereignty, at 7 to 8 with the public sector lead at 8 — though the captured pages give different names for the contracting entity and one certification text describes hosting across Germany, the EU, EFTA and the EEA rather than Berlin alone. Migration and portability sits at 6 for five of six judges: the published Audriga list names Gmail, Outlook.com and T-Online, and no Exchange or Microsoft 365 source is documented. The recurring 6-versus-7 splits turn on how heavily each judge weighs absent Exchange connectivity, directory sync and GoBD archiving, not on disputed facts.

**Speaks for it:**
- Public per-plan pricing — Light 1 €, Standard 4 € and Premium 12 € per month, with mail storage of 2, 20 and 50 GB, priced add-on storage and a 30-day trial.
- Custom-domain DNS set-up documented record by record — MX, SPF, four DKIM CNAME keys, DMARC — with DANE, DNSSEC and MTA-STS in use.
- PGP and S/MIME end-to-end encryption in the webmailer with no provider-held recovery key, alongside stated ISO 27001 and BSI C5 and a transparency report naming rejection rates of 33.8% (2023), 30% (2024) and 25% (2025).
- A named Berlin operator — Heinlein Hosting GmbH, HRB 220010 B, Amtsgericht Berlin-Charlottenburg — with servers stated to stand exclusively in Berlin on the provider's own hardware, a GDPR data processing agreement in Standard and Premium and a § 43e BRAO agreement on request.
- A reseller tier that creates, modifies and deletes customer accounts, with white-label billing, PDF and CSV invoice export, tariff limits and support packages with stated response times (usually 48 hours Standard, 24 hours Premium, 24/7 in the top package).

**Held against it:**
- We found no public information on Exchange ActiveSync or native Outlook MAPI — Outlook reaches the service over IMAP with app passwords or via the third-party CalDAV Synchronizer.
- We found no public information on GoBD-compliant archiving, retention policies, legal hold or eDiscovery — judges called this gap decisive for buyers with statutory retention duties.
- We found no public information on Active Directory, Entra ID or LDAP sync, SCIM provisioning, mobile device policies with remote wipe, or exportable audit logs.
- The published migration list names Gmail, Outlook.com and T-Online among others, with no public information on an Exchange or Microsoft 365 source, and the terms make data download before contract end the user's own duty on at least a weekly rhythm.
- We found no public information on a subprocessor list with locations, and the captured pages name Heinlein Hosting GmbH as operator in the imprint while the terms name Heinlein Support GmbH as provider.

**Best for:**
- You want a German-hosted mail and office bundle for a small or mid-sized team at published plan prices of 1 €, 4 € or 12 € per month.
- You are an IT service provider or reseller managing several customer organisations and want white-label billing with PDF and CSV invoice export.
- Your buyers demand encryption and audit evidence — PGP and S/MIME with no provider-held recovery key, stated ISO 27001 and BSI C5, and a published transparency report with rejection rates.
- You need sovereignty documentation — a named Berlin operator with register number, servers stated to stand in Berlin, and a GDPR data processing agreement in Standard and Premium.

**Avoid if:**
- You run hundreds of Outlook desktop users who need Exchange ActiveSync or native MAPI rather than IMAP plus a third-party CalDAV plug-in.
- You must meet statutory retention duties — GoBD-compliant archiving, retention policies, legal hold — inside the suite itself; judges say a separate archive would have to close that gap.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The Small Firm Owner | The IT Administrator | The Public Sector IT Lead | The IT Service Provider | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Mail, domains & deliverability | 3.5/5 | 3/5 | 3/5 | 3.5/5 | 0/5 | 3.5/5 |
| Calendar, contacts & office apps | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 0/5 | 3/5 |
| Security, encryption & compliance archiving | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 0/5 | 3/5 |
| Administration, identity & partner management | 3.5/5 | 3/5 | 3/5 | 3.5/5 | 0/5 | 3/5 |
| Migration, open standards & exit | 3/5 | 3/5 | 3/5 | 3/5 | 0/5 | 3/5 |
| European sovereignty | 3.5/5 | 3.5/5 | 4/5 | 3.5/5 | 0/5 | 3.5/5 |
| Pricing transparency | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 0/5 | 3.5/5 |
| **Weighted verdict** | **3.5/5** | **3/5** | **3.5/5** | **3.5/5** | **0/5** | **3/5** |

### The judges

- **The Small Firm Owner** (v1.0): Runs a tax and accounting firm of twelve in Lower Saxony. Every member of staff lives in Outlook, the shared "kanzlei@" mailbox is the busiest address in the office, and the meeting room is booked by shouting across the corridor. Wants mail on the firm's own domain that arrives, a shared calendar and address book on every phone, a move from the old provider that does not lose a single client thread, and a per-user price that is still the price in the second year.
- **The IT Administrator** (v1.0): IT administrator at a machine builder in Baden-Württemberg with three hundred mailboxes, an on-premises Exchange that reaches end of support, and Active Directory as the source of every account. Wants Outlook to keep working without a plug-in nobody maintains, shared mailboxes and room booking, single sign-on and directory sync, mobile devices that can be wiped, an API for provisioning, and a migration that moves calendars and permissions, not only mail.
- **The Public Sector IT Lead** (v1.0): Head of IT at a district administration in Bavaria with eleven hundred staff, told by the council to leave Microsoft within three years. Has read what Schleswig-Holstein did and what it cost. Needs mail, calendars and documents that a whole administration can work in, open formats and open source where possible, BSI C5 or ISO 27001 on paper, a provider whose owners answer to European law only, and an exit plan before the contract is signed.
- **The IT Service Provider** (v1.0): Runs a six-person IT service company in Austria that looks after mail for forty client firms, from a two-person architect's office to a hotel group. Spends Mondays on mails that landed in spam and phones that stopped syncing. Wants one partner console for every client, DKIM and DMARC set up without a ticket, migrations it can run itself, support that answers within the hour, and margins it can calculate before it quotes.
- **The Data Protection Officer** (v1.0): Data protection officer for a group of nine medical practices in North Rhine-Westphalia, where a referral letter sent by mail is patient data under professional secrecy. Reads the subprocessor list and the transparency report before the feature page, asks who at the provider can open a mailbox and under which law, and wants encryption the practices can actually use with outside doctors, archiving that satisfies the tax office, and a data processing agreement that names every server.
- **The Skeptic** (v1.0): Has seen "hosted in Germany" from a provider whose spam filter and support desk sit in the United States, "Exchange-compatible" that meant IMAP with a calendar plug-in, and a first-year price of one euro that became seven. Asks which protocols Outlook really uses, whether the archive would survive a tax audit, what the certification actually covers — and how ten years of mail, calendars and contacts would leave.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Allianz cybersicherheit: yes · Allianz für Cyber-Sicherheit (BSI) [S8]
- Analytics anonymized: yes · no [S12]
- Analytics matomo selfhosted: Matomo · yes · no [S12]
- Anonymous payment: yes · yes [S10]
- Av brao: no · auf Wunsch · auf Wunsch [S10]
- BSI C5: BSI C5 · yes [S8]
- BSI C5: yes [S6]
- BSI goldstatus: yes · yes [S8]
- BSI it sicherheitskennzeichen: Premium · Standard · Light · yes · BSI TR 03108 [S8]
- BSI it sicherheitskennzeichen: PREMIUM · STANDARD · LIGHT · BSI TR 03108 [S7]
- BSI protokolle: DMARC · DKIM · DANE · SPF · TLS · MTA-STS [S8]
- Data export portal: yes [S12]
- Deutscher fairness preis 2026: 2026 · Grüne E-Mail-/Hosting-Anbieter [S8]
- DPA GDPR: no · yes · yes [S10]
- Ecso siegel: yes · European Cyber Security Organisation (ECSO) [S8]
- Encryption features: yes · yes [S10]
- GDPR: yes [S1]
- GDPR: yes [S6]
- GDPR german law: yes · German data protection law [S2]
- ISO 27001: yes · yes [S1]
- ISO 27001: yes [S6]
- ISO 27001: ISO 27001 · yes [S8]
- Matomo cookieless: yes [S12]
- No profiling: no · no [S12]
- Pgp keys: yes [S11]
- Privacy contact: privacy@mailbox.org · privacy and authority requests [S11]
- Stiftung warentest: 1.8 · Light [S1]
- Stiftung warentest: Light · 1.8 [S7]
- Third parties video player: Conviva [S12]
- Twofa: yes · yes [S10]

**Data**
- Aliases disposable: yes · yes [S7]
- Anonymized headers: yes [S7]
- Anonymous payment: yes · yes [S7]
- Anonymous registration: yes [S7]
- Applications retention: 2 [S12]
- Deletion business: 30 [S13]
- Deletion legal exceptions: yes [S13]
- Deletion prepaid: 60 [S13]
- No ads: yes · yes [S7]
- No sharing third parties: no [S12]
- Password reset hash: yes [S12]
- Retention customer management: Vier Wochen nach Vertragsende und Begleichen der letzten offenen Rechnung [S12]
- Retention ecosero: 7 Tage nach dem Event / Webinar [S12]
- Retention evac: Sobald der Vertrag gekündigt wurde, 7 Tage [S12]
- Retention mail server metadata: 7 · no [S12]
- Retention mailbox suite logs: 4 [S12]
- Retention mastodon: 4 · 730 [S12]
- Retention matomo: 2 Jahren [S12]
- Retention opentalk: So bald der Videokonferenzraum durch den Kunden gelöscht wird [S12]
- Retention policy: yes [S7]
- Retention pop3 collect service: 7 Tage nach Entfernen der Zugänge [S12]
- Retention pop3 imap logs: 4 [S12]
- Retention support tickets: 2 Jahre nach Ablauf des Kalenderjahres [S12]
- Retention xmpp: 4 · yes [S12]
- User export: yes [S13]

**Hosting**
- Data residency: Germany · yes [S1]
- Datacenter location: DE [S6]
- Germany encrypted: Deutschland · yes [S3]
- Oekostrom: yes · Lichtblick · Berlin [S8]
- Server location: Berlin · yes · Germany [S7]
- Software hosted made in germany: Software Hosted in Germany · Made in Germany · Deutschland · Deutschland · EU · EFTA · EWR [S8]

**Integrations**
- Addressbook protocol: WebDAV (CardDAV) [S16]
- Addressbook ssl tls: yes [S16]
- API: https://api.mailbox.org · yes [S5]
- App password optional without 2FA: yes [S16]
- App password required with 2FA: yes [S16]
- Caldav URL: https://dav.mailbox.org [S16]
- Calendar protocol: CalDAV [S16]
- Carddav URL pattern: https://dav.mailbox.org/carddav/<folder-id> [S16]
- Davx5 android: DAVx⁵ · iOS/macOS native · Thunderbird · Outlook (CalDAV Synchronizer) · KOrganizer · Evolution [S17]
- SSO custom integrations: yes · yes [S5]
- Video embed privacy mode: Vimeo · YouTube · yes [S12]
- Webdav desktop: yes [S4]

**Legal**
- 2023 report rejection rate: 2023 · 33.8 [S9]
- 2024 report rejection rate: 2024 · 30 [S9]
- 2025 report rejection rate: 2025 · one quarter (25%) [S9]
- Account signup online: online via mailbox.org [S13]
- Address: Berlin · Schwedter Straße 8/9A · 10119 [S11]
- Applicable law: Germany [S13]
- Brands covered: mailbox.org · mailbox.org Business · JPBerlin [S12]
- Company group: Heinlein Gruppe [S20]
- Company register: 220010 B · Amtsgericht Berlin-Charlottenburg [S11]
- Controller: Heinlein Hosting GmbH · Schwedter Straße 8/9B, 10119 Berlin, Deutschland [S12]
- Document date: 2026-01-27 [S12]
- Heinlein group: Heinlein Gruppe [S2]
- Operator: Heinlein Hosting GmbH [S11]
- Provider: Berlin · Heinlein Support GmbH · prepaid provider [S13]
- Request review process: All requests reviewed by data protection officer, with lawyers in doubt [S9]
- Tax number: 37/337/50030 [S11]
- Termination business: 1 month to end of billing month [S13]
- Termination prepaid indefinite: 2 weeks · 1 month [S13]
- Terms change notice: 6 [S13]
- Terms version: 2023-09-07 [S13]
- VAT id: DE335125423 [S11]
- Withdrawal non german consumers: yes [S13]
- Withdrawal period: 14 [S13]

**Pricing**
- Account expiry: 30 · 30 [S13]
- Business billing: yes · 14 [S13]
- Business monthly in advance: monthly · in advance [S13]
- Business payment methods: bank transfer · SEPA direct debit [S13]
- Business refund on termination: yes [S13]
- Business VAT: reverse charge by customer country · no [S13]
- Light: 1 · 2 · 3 · yes [S1]
- Light: 3 · 1 · 2 [S5]
- Light: Light · 1 [S6]
- Light features: 3 · 2 · yes [S4]
- Light plan: no · no · 1 · 2 · 3 · yes [S3]
- Light plan: Light · 1 · EUR [S4]
- Light plan: Light · EUR · 1 · 2 · 3 · yes [S2]
- Premium: yes · yes · 12 · yes · 50 · 100 · 25 · 250 · yes [S1]
- Premium: 25 · 12 · 50 · 100 · 250 [S5]
- Premium: Premium · 12 [S6]
- Premium features: yes · yes · yes · 50 · 100 · 25 · yes · 250 [S4]
- Premium plan: yes · yes · 12 · yes · 50 · 100 · 25 · 250 [S3]
- Premium plan: Premium · 12 · EUR [S4]
- Premium plan: Premium · yes · EUR · 12 · yes · 50 · 100 · 25 · yes · 250 [S2]
- Prepaid billing model: prepaid credit [S13]
- Prepaid payment methods: bank transfer · cash by mail [S13]
- Prepaid VAT: yes [S13]
- Reseller support tiers: Reseller (kostenlos) · Silber · Gold · Platin [S20]
- Restricted account notice: two months of usage [S13]
- Standard: yes · yes · 4 · yes · 20 · 10 · 25 · 50 · yes [S1]
- Standard: 25 · 4 · yes · 20 [S5]
- Standard: Standard · 4 [S6]
- Standard features: yes · yes · yes · 20 · 10 · 25 · yes · 50 [S4]
- Standard plan: yes · yes · 4 · yes · 20 · 10 · 25 · 50 [S3]
- Standard plan: Standard · 4 · EUR [S4]
- Standard plan: Standard · yes · EUR · 4 · yes · 20 · 10 · 25 · yes · 50 [S2]
- Suspension on arrears: 45 [S13]
- Trial: 30 [S3]
- Trial: yes · 30 [S1]
- Trial 30 days: 30 · yes [S2]
- VAT: yes · yes [S10]

**Product**
- 2FA optional: yes [S18]
- 2FA totp: TOTP 2FA app · additional login protection [S18]
- Admin console API: yes [S6]
- Admin console scope: Zentrale Verwaltung von Vertrag, Domains, Postfächer, Weiterleitungen, Passwörtern, Speicherplatz und Account-Einstellungen [S5]
- Admin console webinterface: yes [S5]
- Admin security controls: Virenschutz · Spamschutz · Passwortschutz · IP-Whitelisting · Blacklists · Backups [S5]
- Aliases: 3 · 25 · 25 [S10]
- App password required: yes [S17]
- App passwords: external programs incl. CalDAV/CardDAV sync · yes [S18]
- Audriga free private: Premium · Standard · yes [S22]
- Audriga migration protocols: Open-Xchange accounts: mailboxes, addresses, tasks, calendars · IMAP · POP3 [S22]
- Audriga migration service: Audriga · yes [S22]
- Audriga supported providers: Juni 2026 · IONOS Mail · DomainFACTORY · Freenet · GMX · Gmail · Outlook.com · Strato · T-Online Mail · Yahoo! Mail · Web.de [S22]
- Autosave: automatic backup of drafts [S2]
- Backup snapshot: yes · no · 7 [S13]
- Browser based: yes · yes [S3]
- Business admin login: yes [S13]
- Business CSV account creation: yes [S6]
- Business domain setup: Using your own domain with mailbox Business requires a mailbox Business account, a registered domain, and access to the domain provider's admin console [S15]
- Business features: calendar · address book · task management · file transfer [S13]
- Business webspace excluded: no [S13]
- Caldav carddav: yes · yes [S3]
- Caldav carddav: yes · yes [S2]
- Caldav carddav support: yes · yes [S17]
- Caldav purpose: CalDAV für Kalenderdaten inkl. Aufgaben; CardDAV für Kontakte [S17]
- Caldav URL via properties: yes [S16]
- Calendar addressbook import: yes [S22]
- Calendar export subscribed: export subscribed calendar to file · yes [S23]
- Calendar import from file: import calendar file · yes [S23]
- Calendar import from URL ical: import calendar via subscribed iCal URL · yes [S23]
- Calendar import skip existing: ignore existing appointments on import · yes [S23]
- Calendar migration from gmx: same procedure works for migration from GMX to mailbox [S23]
- Calendar migration from posteo: documented workaround for migrating calendar from Posteo via .ics URL export [S23]
- Catch all: yes [S15]
- Chat tls dane: yes · yes · yes [S3]
- Collaborative notes: yes [S3]
- Contract term: jährlich · monatlich · monatlich [S10]
- Cookies after login: yes [S12]
- Crypto algorithms: yes · (EC)DHE [S7]
- Custom domain: yes [S2]
- Data migration audriga: Audriga · E-Mails · Kalender · Kontakte · Dateien [S5]
- Digital legacy: yes · yes [S10]

**Support**
- 1st level by plan: 1st-Level Support abhängig vom Postfach-Tarif [S5]
- 2nd 3rd level for admins: yes [S5]
- Backup selfservice: yes [S10]
- Business customers: contact form · business customers [S11]
- Emergency hotline: yes · yes [S1]
- Migration service: audriga · yes [S10]
- Onboarding: yes [S1]
- Onboarding personal contact: yes [S5]
- Personal manager gold platinum: Gold · Platin [S5]
- Platinum 247: yes [S1]
- Private customers: private customers · Knowledge Base · Support · User Forum [S11]
- Sales contact: Henrik Heigel · Sales Manager [S5]
- Tiers: eingeschränkt, nur Vertragsfragen · priorisiert, Mo–Fr i.d.R. innerhalb 24 Std. · regulär, Mo–Fr i.d.R. innerhalb 48 Std. [S10]
- User support plans: STANDARD · PREMIUM [S5]

107 more facts on the canonical page: https://whats-best.ai/software/business-email/mailbox-org

## Questions

### Is mailbox.org Business European?

Yes. whats-best.ai classifies mailbox.org Business as EU-Made.

### Where does mailbox.org Business store data?

The default storage location for customer data is not stated on the vendor’s pages as of 5 Nov 2026. The vendor’s pages mention Germany as hosting location, per [the vendor’s page captured 5 Nov 2026](https://whats-best.ai/evidence/18213).

### Does mailbox.org Business have a free plan?

Not stated on the vendor’s pages as of 5 Nov 2026.

### What are the best alternatives to mailbox.org Business?

As of 6 Nov 2026, the panel rates [grommunio (3.5/5)](https://whats-best.ai/software/business-email/grommunio), [Infomaniak kSuite (3.5/5)](https://whats-best.ai/software/business-email/infomaniak-ksuite) and [Nextcloud Hub (Groupware & Office) (3.5/5)](https://whats-best.ai/software/business-email/nextcloud-hub) highest among the other 14 Business Email & Office Suites products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [grommunio](https://whats-best.ai/software/business-email/grommunio) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [mailbox.org Business alternatives](https://whats-best.ai/software/business-email/mailbox-org/alternatives).

## Head-to-head

- [mailbox.org Business vs Tuta Business](https://whats-best.ai/compare/mailbox-org-vs-tuta-business.md)

## What this page leaves out

- 35 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 24 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.

## Sources

- [S1] Vendor homepage (business): https://mailbox.org/de/business/ (checked 2026-11-05)
- [S2] Features page (mail): https://mailbox.org/de/produkt/mail/ (checked 2026-11-05)
- [S3] Features page (office): https://mailbox.org/de/produkt/office/ (checked 2026-11-05)
- [S4] Features page (drive): https://mailbox.org/de/produkt/drive/ (checked 2026-11-05)
- [S5] Features page (admin console): https://mailbox.org/de/produkt/admin/ (checked 2026-11-05)
- [S6] Features page (migration): https://mailbox.org/de/umzug-zu-mailbox-e-mails-sicher-migrieren/ (checked 2026-11-05)
- [S7] Security / trust page: https://mailbox.org/de/sicherheit/ (checked 2026-11-05)
- [S8] Security / trust page (certifications): https://mailbox.org/de/zertifizierte-qualitaet/ (checked 2026-11-05)
- [S9] Transparency report: https://mailbox.org/de/transparenzbericht/ (checked 2026-11-05)
- [S10] Pricing page: https://mailbox.org/de/preise/ (checked 2026-11-05)
- [S11] Legal notice: https://mailbox.org/de/impressum/ (checked 2026-11-05)
- [S12] Privacy policy: https://mailbox.org/de/datenschutz/ (checked 2026-11-05)
- [S13] Terms of service: https://mailbox.org/de/agb/ (checked 2026-11-05)
- [S14] Mail, domains & deliverability — found from sitemap: https://kb.mailbox.org/de/business/eigene-domain/spf-dkim-und-dmarc-spam-reputation-verbessern-und-bounces-vermeiden/ (checked 2026-11-05)
- [S15] Mail, domains & deliverability — found from sitemap: https://kb.mailbox.org/de/business/eigene-domain/e-mail-adressen-mit-eigener-domain-nutzen/ (checked 2026-11-05)
- [S16] Calendar, contacts & office apps — found from sitemap: https://kb.mailbox.org/de/business/adressbuch-und-kalender/caldav-und-carddav-fuer-evolution/ (checked 2026-11-05)
- [S17] Calendar, contacts & office apps — found from sitemap: https://kb.mailbox.org/de/privat/adressbuch-und-kalender/caldav-cardav-uerbersichtsartikel/ (checked 2026-11-05)
- [S18] Security, encryption & compliance archiving — found from sitemap: https://kb.mailbox.org/de/business/sicherheit-und-privatsphaere/zugangssicherheit-bei-mailbox-2FA-app-passwoerter-und-e-mail-passwoerter/ (checked 2026-11-05)
- [S19] Security, encryption & compliance archiving — found from sitemap: https://kb.mailbox.org/de/business/sicherheit-und-privatsphaere/ (checked 2026-11-05)
- [S20] Administration, identity & partner management — found from sitemap: https://kb.mailbox.org/de/business/reseller-verwaltung-bei-mailbox/ (checked 2026-11-05)
- [S21] Administration, identity & partner management — found from sitemap: https://kb.mailbox.org/de/business/e-mail/anlegen-von-catchall-adressen-in-der-verwaltung/ (checked 2026-11-05)
- [S22] Migration, open standards & exit — found from sitemap: https://kb.mailbox.org/de/privat/ihr-account-bei-mailbox-org/umzug-zu-mailbox-org/ (checked 2026-11-05)
- [S23] Migration, open standards & exit — found from sitemap: https://kb.mailbox.org/de/privat/adressbuch-und-kalender/kalender-umzug-von-posteo-zu-mailbox/ (checked 2026-11-05)

---

Cite as: whats-best.ai, "mailbox.org Business — Business Email & Office Suites", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/business-email/mailbox-org

Corrections: https://whats-best.ai/correct/1545?target=page