{
  "slug": "secria",
  "category": "email-providers",
  "name": "Secria",
  "description": "Email service from Secria, Inc. in the United States, with mail stored in Germany. Mail between Secria users is end-to-end encrypted with a hybrid post-quantum key exchange. Free and paid plans, with no ads.",
  "website": "https://secria.me",
  "license": null,
  "platforms": [
    "web",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 46,
  "coverage": 98,
  "summary": "Secria scores 46 out of 100 (grade D) on the email providers criteria. It meets 6 of 21 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, security headers, encrypted mailbox storage and custom domains. It partly meets transparency report, modern web standards, end-to-end encryption, sign up without personal data, email security standards and mail transport security. It does not meet open source, independent audit, open protocols, IMAP support, POP3 support, SMTP submission, Sender Rewriting Scheme and ARC sealing. Still needing evidence: tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+, Mozilla HTTP Observatory grade A+, Internet.nl website score 86% and Internet.nl email score 88%.",
  "url": "https://privacyratings.com/email-providers/secria/",
  "markdown": "https://privacyratings.com/email-providers/secria/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source. No source code is published."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://secria.me/privacy-policy/",
      "note": "No third-party analytics, advertising cookies or tracking pixels on the website. The mail whitepaper states the apps contain no analytics or telemetry."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://secria.me/faq/",
      "note": "Funded by paid plans. No ads and no sale of user data."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://secria.me/privacy-policy/",
      "note": "The privacy policy describes how legal requests are handled, and the VPN whitepaper mentions a signed warrant canary. No request counts are published."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=secria.me&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=secria.me",
      "note": "Grade A+ (115/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://batch.internet.nl/site/secria.me/22660002/",
      "note": "Score 86%"
    },
    "e2ee": {
      "title": "End-to-end encryption",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://secria.me/whitepaper/mail/",
      "note": "Mail between Secria users is end-to-end encrypted by default. Mail to other providers is sent over TLS, with no documented end-to-end option."
    },
    "encrypted_storage": {
      "title": "Encrypted mailbox storage",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://secria.me/whitepaper/mail/",
      "note": "Stored mail, including mail from other providers, is encrypted to the user's public keys. Private keys are encrypted with a key derived from the password on the device."
    },
    "open_protocols": {
      "title": "Open protocols",
      "weight": 2,
      "answer": "no",
      "evidence": "https://secria.me/faq/",
      "note": "No IMAP, POP3 or SMTP access is documented. Mail is used in Secria's own web and mobile apps."
    },
    "custom_domains": {
      "title": "Custom domains",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://secria.me/pricing/",
      "note": "Three custom domains on Mail Plus and ten on Pro. Not on the free plan."
    },
    "anonymous_signup": {
      "title": "Sign up without personal data",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://secria.me/email-without-phone-number/",
      "note": "Sign-up asks for a name, an address and a password, with no phone number. The sign-up app can ask some new accounts for a verified recovery email to stop spam."
    },
    "mail_standards": {
      "title": "Email security standards",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://batch.internet.nl/mail/secria.me/22855393/",
      "note": "Score 88%"
    },
    "imap_standards": {
      "title": "IMAP support",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Not offered."
    },
    "pop3_standards": {
      "title": "POP3 support",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "Not offered."
    },
    "smtp_standards": {
      "title": "SMTP submission",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Not offered."
    },
    "transport_security": {
      "title": "Mail transport security",
      "weight": 3,
      "answer": "partial",
      "evidence": null,
      "note": "Passes: SPF, DMARC reject, MTA-STS enforce, TLS-RPT, DNSSEC. Missing: DANE none."
    },
    "srs": {
      "title": "Sender Rewriting Scheme",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published documentation on SRS for forwarded mail."
    },
    "arc": {
      "title": "ARC sealing",
      "weight": 1,
      "answer": "no",
      "evidence": null,
      "note": "No published documentation on ARC signing or validation."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "A+",
    "internetnl_web": 86,
    "internetnl_mail": 88,
    "trackers": [],
    "tested_at": "2026-11-13T12:17:47.636Z"
  },
  "last_modified": "2026-11-13T12:37:20Z"
}