Privacy Ratings

Webmail

Zimbra Collaboration privacy rating

Self-hosted email and collaboration server from Synacor, with a web client for mail, calendar, contacts and files. An open-source edition and a commercial Network Edition with extra features are offered.

Summary

Zimbra Collaboration scores 50 out of 100 (grade D) on the webmail criteria. It meets 4 of 9 criteria: no ads or data sales, connects directly, blocks remote content and self-hostable. It partly meets open source. It does not meet no trackers or telemetry, independent audit, OpenPGP support and works with any provider. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.

Score 50 out of 100. How scoring works

Criteria

  • Partial

    Open source Weight 3 of 3

    Is all the source code needed to run the product public?

    The open-source edition, including the web client, is public under CPAL-1.0 and GPL-2.0, but the commercial Network Edition adds closed-source features.

    zimbra.com

  • No

    No trackers or telemetry Weight 3 of 3

    Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?

    The website loads Google Analytics, HubSpot and New Relic.

  • Yes

    No ads or data sales Weight 2 of 3

    Is the product funded without advertising, ad targeting or selling user data?

    Funded by commercial licenses and support. No ads.

    zimbra.com

  • No

    Independent audit Weight 2 of 3

    Has an independent security or privacy audit been published within the last three years?

    No independent audit is published.

  • No

    OpenPGP support Weight 2 of 3

    Can the app encrypt and sign mail with OpenPGP, built in or through an official add-on?

    OpenPGP is not supported. S/MIME is offered in the Network Edition.

  • Yes

    Connects directly Weight 3 of 3

    Does the app connect directly to your mail server, without passing mail or passwords through the vendor's servers?

    Self-hosted. The web client talks to the Zimbra server where it is installed, with no vendor service involved.

    zimbra.github.io

  • Yes

    Blocks remote content Weight 2 of 3

    Are remote images and tracking pixels blocked by default?

    The zimbraPrefDisplayExternalImages preference is off by default, so external images load only on request.

    github.com

  • No

    Works with any provider Weight 1 of 3

    Does the app work with any standard IMAP and SMTP provider?

    The web client works only with a Zimbra server. Other IMAP and POP3 accounts can only be pulled into a Zimbra mailbox.

  • Yes

    Self-hostable Weight 1 of 3

    Can the webmail be installed on your own server?

    Self-hosted software with an official installation guide.

    zimbra.github.io

Other webmail

All 10 webmail