# Forward Email vs Tuta: privacy compared

| Criterion | Forward Email | Tuta |
| --- | --- | --- |
| Grade | A (93/100) | C (61/100) |
| Jurisdiction | United States (Five Eyes) | Germany (Fourteen Eyes) |
| Open source | Yes | Partial |
| No trackers or telemetry | Partial | Yes |
| No ads or data sales | Yes | Yes |
| Independent audit | Yes | No |
| Transparency report | Partial | Yes |
| Tells users about requests | Yes | No |
| TLS configuration | Yes | Not tested yet |
| Security headers | Yes | Yes |
| Modern web standards | Not tested yet | Not tested yet |
| End-to-end encryption | Yes | Yes |
| Encrypted mailbox storage | Yes | Yes |
| Open protocols | Yes | No |
| Custom domains | Yes | Yes |
| Sign up without personal data | Yes | Yes |
| Email security standards | Not tested yet | Not tested yet |
| IMAP support | Yes | No |
| POP3 support | Yes | No |
| SMTP submission | Yes | No |
| Mail transport security | Yes | Yes |
| Sender Rewriting Scheme | Yes | No |
| ARC sealing | Yes | No |

**Forward Email.** Forward Email scores 93 out of 100 (grade A) on the email providers criteria. It meets 17 of 19 criteria: open source, no ads or data sales, independent audit, tells users about requests, TLS configuration, security headers, end-to-end encryption, encrypted mailbox storage, open protocols, custom domains, sign up without personal data, IMAP support, POP3 support, SMTP submission, mail transport security, Sender Rewriting Scheme and ARC sealing. It partly meets no trackers or telemetry and transparency report. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

**Tuta.** Tuta scores 61 out of 100 (grade C) on the email providers criteria. It meets 9 of 18 criteria: no trackers or telemetry, no ads or data sales, transparency report, security headers, end-to-end encryption, encrypted mailbox storage, custom domains, sign up without personal data and mail transport security. It partly meets open source. It does not meet independent audit, tells users about requests, open protocols, IMAP support, POP3 support, SMTP submission, Sender Rewriting Scheme and ARC sealing. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: Mozilla HTTP Observatory grade A+.

Source: https://privacyratings.com/compare/email-providers/forward-email-vs-tuta/