# Mail server software privacy ratings

Software for running a mail server on your own hardware.

| Name | Grade | Jurisdiction | Description |
| --- | --- | --- | --- |
| [Stalwart](https://privacyratings.com/mail-server-software/stalwart-mail-server/) | A (100/100) | United Kingdom (Five Eyes) | Self-hosted mail and collaboration server written in Rust, with JMAP, IMAP, POP3, SMTP, CalDAV, CardDAV and WebDAV support, built-in spam filtering and a web admin interface. |
| [Dovecot](https://privacyratings.com/mail-server-software/dovecot/) | A (90/100) | Finland | IMAP and POP3 server for Linux and Unix that stores and serves mailboxes, with support for Sieve filtering through Pigeonhole. The Community Edition is open source. |
| [Forward Email](https://privacyratings.com/mail-server-software/forward-email/) | B (85/100) | United States (Five Eyes) | Self-hosted version of the Forward Email service, installed with a script that deploys Docker containers. It includes MX, SMTP, IMAP, POP3, CalDAV and CardDAV servers, encrypted SQLite mailboxes, a web interface and optional backups to S3-compatible storage. |
| [Docker Mailserver](https://privacyratings.com/mail-server-software/docker-mailserver/) | B (80/100) | Unknown | Self-hosted mail server in a single Docker container, with SMTP, IMAP, POP3, spam and virus filtering, configured through files and environment variables. |
| [iRedMail](https://privacyratings.com/mail-server-software/iredmail/) | B (80/100) | Unknown | Installer script that sets up a complete mail server on Linux or BSD from open-source components such as Postfix, Dovecot, Roundcube and SpamAssassin. |
| [Maddy](https://privacyratings.com/mail-server-software/maddy/) | B (80/100) | Unknown | All-in-one mail server written in Go that replaces Postfix, Dovecot and OpenDKIM with a single daemon, handling SMTP, IMAP, DKIM, SPF, DMARC, DANE and MTA-STS. |
| [Mail-in-a-box](https://privacyratings.com/mail-server-software/mail-in-a-box/) | B (80/100) | Unknown | Self-hosted mail server setup for a single Ubuntu machine, with SMTP, IMAP, webmail, contacts, calendar, spam filtering and backups preconfigured. |
| [mailcow](https://privacyratings.com/mail-server-software/mailcow/) | B (80/100) | Unknown | Self-hosted mail server suite based on Docker, with SMTP, IMAP, the SOGo webmail and groupware, spam filtering and a web admin interface. |
| [Mailu](https://privacyratings.com/mail-server-software/mailu/) | B (80/100) | Unknown | Self-hosted mail server built from Docker containers, with SMTP, IMAP, webmail, spam and virus filtering and a web admin interface. |
| [Mox](https://privacyratings.com/mail-server-software/mox/) | B (80/100) | Unknown | Mail server written in Go for low-maintenance self-hosting, combining SMTP, IMAP, webmail, SPF, DKIM, DMARC, MTA-STS, automatic TLS and spam filtering in one program. |
| [Postfix](https://privacyratings.com/mail-server-software/postfix/) | B (80/100) | Unknown | Mail transfer agent that routes and delivers email over SMTP, used on many Linux and Unix servers as the default mail server. |
| [Modoboa](https://privacyratings.com/mail-server-software/modoboa/) | C (65/100) | Unknown | Self-hosted mail hosting and management platform built on Postfix and Dovecot, with a web admin interface, webmail, calendars, contacts and spam filtering. |
| [Microsoft Exchange Server](https://privacyratings.com/mail-server-software/microsoft-exchange-server/) | F (20/100) | United States (Five Eyes) | Microsoft's on-premises mail, calendar and contacts server for Windows Server, used by organizations with Outlook clients. Sold as a subscription edition. |

## Criteria

- **Open source** (weight 3): Is all the source code needed to run the product public?
- **No trackers or telemetry** (weight 3): Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
- **No ads or data sales** (weight 2): Is the product funded without advertising, ad targeting or selling user data?
- **Independent audit** (weight 2): Has an independent security or privacy audit been published within the last three years?

Source: https://privacyratings.com/mail-server-software/