Where your data lives, and who can see it
Paris, Gravelines and a key for each workspace. Plus what encryption does and doesn't do, in plain words.
When you move your company's email somewhere new, it's fair to ask where it ends up and who can get at it. Here's the full answer, without the small print.
In Paris, on French servers
Your mail, files, calendars and chat are stored in Paris, in three OVHcloud data centres. OVHcloud is a French company. A second copy, the backup, is kept in Gravelines, also in France.
Who handles it
The list is short:
- Us. Email.eu is a trade name of Remails B.V., a small Dutch company in Groningen. We wrote the mail server, the file storage and every app, so your data stays inside our own systems.
- OVHcloud runs the servers, storage and backups, in Paris and Gravelines.
- Moneybird, a Dutch company, sends your invoices and collects payment. It only sees your billing details.
That's all. No one else sends your mail: it goes out from our own servers and our own addresses. No American company handles your mail, files or messages.
Inside your workspace, you decide who sees what. You share files and folders with the people or teams who need them, and with outside addresses only when you choose to. On Business, an activity log shows who did what.
Locked with your own key
Your mail, calendars, contacts and files are stored encrypted, with a separate key for each workspace. Encrypted at rest means that what's written to disk can't be read without that key, and your key opens your workspace and no other.
Why it isn't end-to-end
End-to-end encryption means only the sender and the reader can read a message, and the provider can't. It sounds like the obvious choice, and for some people it is. But it has a price.
If our servers couldn't read your mail, they couldn't search it, couldn't show it to your team in a shared inbox, and couldn't show you a preview. Those are the things that make Email.eu quick to work in. So we chose differently: encrypted where it's stored, with a key per workspace, and kept inside our own systems in Europe.
It isn't end-to-end encrypted, and we'd rather say so than let a word on a page suggest more.
Nobody reads it to sell you things
There are no ads in Email.eu and nothing in the app follows what you do. We make money one way: a price per person, each month.
We also look after you when other people try to follow you. Many newsletters hide a tiny picture to see when you open them. We remove it before the mail reaches you.
Yours when you leave
You can export your mail, files, calendars and contacts any time, without asking anyone. Your domain stays yours wherever you go. If you close your workspace, we keep it for 30 days in case you change your mind, and then delete it.
What isn't done yet
We're not ISO 27001 certified. We plan to be in the first half of 2027, and we won't show a badge before we've earned it. If your company needs something specific before you can switch, ask us and we'll tell you straight. Everything else is on our security page.
Written by the Email.eu team in Groningen.More from the blog