{
  "slug": "atomic-mail",
  "category": "email-providers",
  "name": "Atomic Mail",
  "description": "Email service from AtomicMail Systems OÜ in Estonia, with a free plan and paid Plus and Business plans. Mail between Atomic Mail users can be end-to-end encrypted, and password-protected mail can be sent to others.",
  "website": "https://atomicmail.io",
  "license": null,
  "platforms": [
    "web",
    "android",
    "ios",
    "windows",
    "macos",
    "linux"
  ],
  "jurisdiction": {
    "code": "EE",
    "name": "Estonia",
    "eyes": null,
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 25,
  "coverage": 100,
  "summary": "Atomic Mail scores 25 out of 100 (grade F) on the email providers criteria. It meets 2 of 21 criteria: no ads or data sales and sign up without personal data. It partly meets transparency report, TLS configuration, modern web standards, end-to-end encryption, encrypted mailbox storage and custom domains. It does not meet open source, no trackers or telemetry, independent audit, tells users about requests, security headers, open protocols, email security standards, IMAP support, POP3 support, SMTP submission, mail transport security, Sender Rewriting Scheme and ARC sealing. It is based in Estonia: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR). Automated tests: SSL Labs grade A-, Mozilla HTTP Observatory grade C-, Internet.nl website score 75% and Internet.nl email score 64%.",
  "url": "https://privacyratings.com/email-providers/atomic-mail/",
  "markdown": "https://privacyratings.com/email-providers/atomic-mail/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": "https://atomicmail.io/terms-of-service",
      "note": "Closed source. No source code for the apps or the server is published."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://atomicmail.io/privacy-policy",
      "note": "The home page loads Google Tag Manager with a Google Analytics tag and includes Hotjar code, although the privacy policy says atomicmail.io uses only self-hosted analytics. The web app code includes PostHog product analytics."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://atomicmail.io/privacy-policy",
      "note": "Funded by paid plans. No ads in any service, and personal data is not sold."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": "https://atomicmail.io/support",
      "note": "The FAQ says third-party audits take place, but no audit report is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://atomicmail.io/privacy-policy",
      "note": "Only requests from Estonian judicial authorities are answered, after legal review. No request counts are published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published policy on notifying users about data requests."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=atomicmail.io&hideResults=on",
      "note": "Grade A-"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "no",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=atomicmail.io",
      "note": "Grade C- (45/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://batch.internet.nl/site/atomicmail.io/22660292/",
      "note": "Score 75%"
    },
    "e2ee": {
      "title": "End-to-end encryption",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://atomicmail.io/blog/zero-access-encryption",
      "note": "Atomic Encryption between users and password-protected mail for others are built in, but each message must be encrypted by choice. Not on by default."
    },
    "encrypted_storage": {
      "title": "Encrypted mailbox storage",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://atomicmail.io/blog/zero-access-encryption",
      "note": "Stored mail is encrypted, but mail that was not end-to-end encrypted is not covered by zero-access encryption and can be disclosed under a legal order."
    },
    "open_protocols": {
      "title": "Open protocols",
      "weight": 2,
      "answer": "no",
      "evidence": "https://atomicmail.io/support",
      "note": "No IMAP, POP3 or SMTP access. Mail can only be used in Atomic Mail's own apps."
    },
    "custom_domains": {
      "title": "Custom domains",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://atomicmail.io/pricing",
      "note": "Only on the Business plans. Not on the free or Plus plans."
    },
    "anonymous_signup": {
      "title": "Sign up without personal data",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://atomicmail.io/support",
      "note": "Sign-up asks only for a name, username and password. No phone number or other email address is needed."
    },
    "mail_standards": {
      "title": "Email security standards",
      "weight": 2,
      "answer": "no",
      "evidence": "https://batch.internet.nl/mail/atomicmail.io/22855376/",
      "note": "Score 64%"
    },
    "imap_standards": {
      "title": "IMAP support",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Not offered."
    },
    "pop3_standards": {
      "title": "POP3 support",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "Not offered."
    },
    "smtp_standards": {
      "title": "SMTP submission",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Not offered."
    },
    "transport_security": {
      "title": "Mail transport security",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Passes: SPF, DMARC reject. Missing: MTA-STS missing, TLS-RPT, DNSSEC, DANE none."
    },
    "srs": {
      "title": "Sender Rewriting Scheme",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published documentation on SRS for forwarded mail."
    },
    "arc": {
      "title": "ARC sealing",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published documentation on ARC signing or validation."
    }
  },
  "tests": {
    "ssllabs": "A-",
    "observatory": "C-",
    "internetnl_web": 75,
    "internetnl_mail": 64,
    "trackers": [
      {
        "name": "Cloudflare Web Analytics",
        "host": "static.cloudflareinsights.com",
        "effect": "partial"
      },
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      },
      {
        "name": "Hotjar",
        "host": "inline code",
        "effect": "no"
      }
    ],
    "tested_at": "2026-11-14T11:33:07.181Z"
  },
  "last_modified": "2026-11-14T11:57:57Z"
}