{
  "slug": "soverin",
  "category": "email-providers",
  "name": "Soverin",
  "description": "Paid email service from Soverin B.V. in Amsterdam, the Netherlands, with custom domains, unlimited aliases and calendar and contact sync. There is no free plan and no advertising.",
  "website": "https://soverin.com",
  "license": null,
  "platforms": [
    "web"
  ],
  "jurisdiction": {
    "code": "NL",
    "name": "Netherlands",
    "eyes": "Nine Eyes",
    "eu": true,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 56,
  "coverage": 97,
  "summary": "Soverin scores 56 out of 100 (grade D) on the email providers criteria. It meets 9 of 20 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, modern web standards, open protocols, custom domains, email security standards, IMAP support and Sender Rewriting Scheme. It partly meets end-to-end encryption, encrypted mailbox storage, SMTP submission, mail transport security and ARC sealing. It does not meet open source, independent audit, transparency report, security headers and sign up without personal data. Still needing evidence: tells users about requests. It is based in the Netherlands: Nine Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A+, Mozilla HTTP Observatory grade C, Internet.nl website score 100% and Internet.nl email score 100%.",
  "url": "https://privacyratings.com/email-providers/soverin/",
  "markdown": "https://privacyratings.com/email-providers/soverin/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://soverin.com/about/privacy",
      "note": "The privacy statement says only session and optional login cookies are used, and no tracking cookies. The website loads no third-party scripts."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://soverin.com/resources/faq",
      "note": "Funded by paid plans. Soverin states it will never use advertising as a source of income, and personal data is not sold."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": "https://soverin.com/about/certifications",
      "note": "No independent audit is published. Soverin states ISO 27001 certification, but the certificate is only sent on request and no report is public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": "https://soverin.com/about/general-terms-and-conditions",
      "note": "No transparency report is published. The terms allow Soverin to hand user data to the police when a competent authority requests it."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "unknown",
      "evidence": null,
      "note": null
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=soverin.com&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "no",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=soverin.com",
      "note": "Grade C (55/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://batch.internet.nl/site/soverin.com/22660220/",
      "note": "Score 100%"
    },
    "e2ee": {
      "title": "End-to-end encryption",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://soverin.com/product/b2b-features",
      "note": "OpenPGP encryption is listed as a webmail feature. It is not on by default, and no further documentation is published."
    },
    "encrypted_storage": {
      "title": "Encrypted mailbox storage",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://soverin.com/resources/faq",
      "note": "Servers use disk encryption. Encryption of stored mail with a key only the user holds is not documented."
    },
    "open_protocols": {
      "title": "Open protocols",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://soverin.zammad.com/help/en-gb/12-email-apps-and-imap/38-imap-and-smtp-settings",
      "note": "IMAP and SMTP work with any mail app. Calendar and contacts sync over CalDAV and CardDAV."
    },
    "custom_domains": {
      "title": "Custom domains",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://soverin.com/product/pricing",
      "note": "Own domains can be connected at no extra charge, or registered through Soverin for a yearly fee."
    },
    "anonymous_signup": {
      "title": "Sign up without personal data",
      "weight": 2,
      "answer": "no",
      "evidence": "https://soverin.zammad.com/help/en-gb/16-faq-for-new-customers/75-questions-about-your-account",
      "note": "The FAQ states that a mobile phone number is needed to sign up. The privacy statement describes the phone number as optional."
    },
    "mail_standards": {
      "title": "Email security standards",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://batch.internet.nl/mail/soverin.nl/22855386/",
      "note": "Score 100%"
    },
    "imap_standards": {
      "title": "IMAP support",
      "weight": 2,
      "answer": "yes",
      "evidence": null,
      "note": "imap.soverin.net:993 (implicit TLS). IMAP4rev1 advertised with IDLE."
    },
    "pop3_standards": {
      "title": "POP3 support",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Could not test: No server found (set a host in the rating file or publish RFC 6186 SRV records)"
    },
    "smtp_standards": {
      "title": "SMTP submission",
      "weight": 2,
      "answer": "partial",
      "evidence": null,
      "note": "smtp.soverin.net:465 (implicit TLS). Missing: SMTPUTF8."
    },
    "transport_security": {
      "title": "Mail transport security",
      "weight": 3,
      "answer": "partial",
      "evidence": null,
      "note": "Passes: SPF, DMARC reject, DNSSEC, DANE all. Missing: MTA-STS missing, TLS-RPT."
    },
    "srs": {
      "title": "Sender Rewriting Scheme",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://soverin.com/product/technical-specs",
      "note": "Forwarded mail uses SRS."
    },
    "arc": {
      "title": "ARC sealing",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://soverin.com/product/technical-specs",
      "note": "ARC is listed for forwarded mail. Validation of ARC chains on inbound mail is not documented."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "C",
    "internetnl_web": 100,
    "internetnl_mail": 100,
    "trackers": [],
    "tested_at": "2026-11-13T12:17:50.919Z"
  },
  "last_modified": "2026-11-13T12:37:20Z"
}