{"data":{"slug":"forward-email","name":"Forward Email","domain":"forwardemail.net","url":"https://forwardemail.net/","kyc":"none","kycLevel":1,"kycNote":"Accounts store email addresses, domains and aliases. Free forwarding uses DNS records. Paid checkout documents USDC through Stripe on Ethereum, Solana and Polygon; no anonymity or KYC guarantee follows.","fee":"Free forwarding, $3/mo Enhanced Protection, $9/mo Team","categories":["Email"],"countries":["GLOBAL"],"bestFor":["Email aliases on your own domain","Paying for email without a card","Self-hosted email"],"features":["Email forwarding on your own domain","Unlimited domains and aliases","Free forwarding tier","Crypto checkout through Stripe","Source-available code with MPL and BSL licenses","Self-hostable","IMAP, POP3, CalDAV, and CardDAV","Outbound SMTP on paid plans","No third-party analytics"],"tagline":"Custom-domain email forwarding with a free tier and a crypto payment option.","status":"ok","updatedAt":"2026-10-25","description":"Custom-domain email forwarding with a free tier and paid inboxes from $3/mo. Checkout accepts USDC crypto alongside cards and PayPal.","cardSummary":"Domain email forwarding, crypto checkout.","networks":["USDC"],"checkedAt":"2026-10-25","lastReviewed":"2026-10-25","reviewSource":"official_source_review_2026-10-25","jurisdictionConfidence":"inferred","kycLastChecked":"2026-10-25","trending":false,"jurisdiction":"US","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"Forward Email stores account details and paid mailboxes. Its policy allows SMTP error logs for seven days and website/API request logs, including IP addresses and URLs, for up to 30 days. Outbound records last about 30 days. USDC checkout uses Stripe.","auditedBy":[],"corporate":{"entityType":{"value":"unresolved","citation":"https://raw.githubusercontent.com/forwardemail/forwardemail.net/master/LICENSE.md","note":"The source-code copyright names Forward Email LLC, but exact legal operator and registry identity are unknown."},"governanceModel":{"value":"company-sponsored","citation":"https://forwardemail.net/en/about"},"repositoryUrl":{"value":"https://github.com/forwardemail/forwardemail.net","citation":"https://github.com/forwardemail/forwardemail.net"},"legalEntity":{"value":"unknown","citation":"unknown"},"incorporationJurisdiction":{"value":"unknown","citation":"unknown"},"ultimateOwner":{"value":"unknown","citation":"unknown"},"officers":{"value":[],"citation":"unknown"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/fwdemail","publicClaims":{"followTheMoney":{"value":"Forward Email\nFree forwarding; paid mailboxes from $3/month\nUSDC checkout through Stripe\nCode uses MPL 2.0 and BSL 1.1 licenses\nUltimate ownership is unknown","reviewedAt":"2026-10-25","sources":[{"label":"Pricing","href":"https://forwardemail.net/en/private-business-email?pricing=true","type":"official"},{"label":"USDC payment documentation","href":"https://forwardemail.net/en/blog/docs/crypto-payments-privacy-email-service","type":"official"},{"label":"Source-code license","href":"https://raw.githubusercontent.com/forwardemail/forwardemail.net/master/LICENSE.md","type":"primary-document"}]}},"followTheMoney":"Forward Email\nFree forwarding; paid mailboxes from $3/month\nUSDC checkout through Stripe\nCode uses MPL 2.0 and BSL 1.1 licenses\nUltimate ownership is unknown","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/forward-email","canonical_score":30,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":17,"accountability":4},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 4 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://forwardemail.net/","https://forwardemail.net/en","https://forwardemail.net/en/pricing","https://forwardemail.net/en/private-business-email","https://forwardemail.net/en/privacy","https://forwardemail.net/en/security","https://forwardemail.net/en/dpa"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://forwardemail.net/","https://forwardemail.net/en","https://forwardemail.net/en/pricing","https://forwardemail.net/en/private-business-email","https://forwardemail.net/en/privacy","https://forwardemail.net/en/security","https://forwardemail.net/en/dpa"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://forwardemail.net/","https://forwardemail.net/en","https://forwardemail.net/en/pricing","https://forwardemail.net/en/private-business-email","https://forwardemail.net/en/privacy","https://forwardemail.net/en/security","https://forwardemail.net/en/dpa"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"inferred","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Email","primary_bucket":"Email","corporate_identity":null,"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":3,"self-reported":4},"total_sources":7},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; inferred jurisdiction: US"}],"evidence_confidence":72,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":30,"detail":"All recorded checks are within 30 days"}],"score_computed_at":"2026-11-06T05:10:37.474Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"inferred","evidenceStatus":"partial","checkedAt":"2026-10-25","lastReviewed":"2026-10-25","kycLastChecked":"2026-10-25"},"citation":{"canonical_url":"https://cunicula.com/en/provider/forward-email","api_url":"https://cunicula.com/api/v1/services/forward-email","schema_version":"1.1.0","publisher":"Cunicula","reviewed":"2026-10-25","retrieved":"2026-11-06","attribution":"Cunicula, \"Forward Email\", cunicula.com, reviewed 2026-10-25, retrieved 2026-11-06, https://cunicula.com/en/provider/forward-email","attribution_template":"Cunicula, \"{name}\", cunicula.com, reviewed {reviewed}, retrieved {retrieved}, {url}","license":"LicenseRef-Cunicula-Attribution-1.0","license_url":"https://cunicula.com/en/cite","cite_guide_url":"https://cunicula.com/en/cite"},"edit_history":[{"changed_at":"2026-10-25T16:29:26+11:00","action":"updated","why":"fix: refresh overdue sources and recover publication pipeline","source":{"commit":"5705a0837a385381243c579d4f1331a89843169e","url":"https://cunicula.com/en/provider/forward-email#history-5705a0837a38","review_source":"official_source_review_2026-10-25"},"changes":[{"field":"checkedAt","operation":"changed","before":"2026-08-07","after":"2026-10-25"},{"field":"corporate.entityType.citation","operation":"changed","before":"https://forwardemail.net/en/dpa","after":"https://raw.githubusercontent.com/forwardemail/forwardemail.net/master/LICENSE.md"},{"field":"corporate.entityType.note","operation":"changed","before":"Official site copyright, DPA (Governing State: Delaware), Terms, technical whitepaper, and LICENSE identify the operator as Forward Email LLC, a real hosted commercial email service.","after":"The source-code copyright names Forward Email LLC, but exact legal operator and registry identity are unknown."},{"field":"corporate.entityType.value","operation":"changed","before":"company","after":"unresolved"},{"field":"corporate.incorporationJurisdiction.citation","operation":"changed","before":"https://forwardemail.net/en/dpa","after":"unknown"},{"field":"corporate.incorporationJurisdiction.value","operation":"changed","before":"Delaware, United States","after":"unknown"},{"field":"corporate.legalEntity.citation","operation":"changed","before":"https://forwardemail.net/en/dpa","after":"unknown"},{"field":"corporate.legalEntity.value","operation":"changed","before":"Forward Email LLC","after":"unknown"},{"field":"corporate.officers.citation","operation":"changed","before":"https://forwardemail.net/technical-whitepaper.pdf","after":"unknown"},{"field":"corporate.officers.value","operation":"changed","before":[{"name":"Nicholas Baugh","role":"Founder"}],"after":[]},{"field":"corporate.ultimateOwner.citation","operation":"changed","before":"https://discuss.privacyguides.net/t/forward-email-email-provider/13370/299","after":"unknown"},{"field":"corporate.ultimateOwner.value","operation":"changed","before":"Nicholas Baugh","after":"unknown"},{"field":"evidenceStatus","operation":"changed","before":"verified","after":"partial"},{"field":"features","operation":"changed","before":["Email forwarding on your own domain","Unlimited domains and aliases","Free forwarding tier","Crypto checkout through Stripe","Open source service code","Self-hostable","IMAP, POP3, CalDAV, and CardDAV","Outbound SMTP on paid plans","No third-party analytics"],"after":["Email forwarding on your own domain","Unlimited domains and aliases","Free forwarding tier","Crypto checkout through Stripe","Source-available code with MPL and BSL licenses","Self-hostable","IMAP, POP3, CalDAV, and CardDAV","Outbound SMTP on paid plans","No third-party analytics"]},{"field":"followTheMoney","operation":"changed","before":"Forward Email LLC - United States\n────────────────────────\nModel: free forwarding tier plus paid plans\nRevenue: $3/mo Enhanced Protection, $9/mo Team, $250/mo Enterprise\nSoftware: open source with a self-hosted option\nPayment: cards, PayPal, and USDC crypto through Stripe","after":"Forward Email\nFree forwarding; paid mailboxes from $3/month\nUSDC checkout through Stripe\nCode uses MPL 2.0 and BSL 1.1 licenses\nUltimate ownership is unknown"},{"field":"jurisdictionConfidence","operation":"changed","before":"verified","after":"inferred"},{"field":"kycLastChecked","operation":"changed","before":"2026-08-07","after":"2026-10-25"},{"field":"kycNote","operation":"changed","before":"No document identity check. The free plan is forwarding only and is configured through DNS records. Paid checkout lists crypto alongside PayPal and the major card networks, and the crypto route pays in USDC over Ethereum, Solana, or Polygon through Stripe crypto rather than a native chain payment. An account still stores the email address, domains, and aliases you provide.","after":"Accounts store email addresses, domains and aliases. Free forwarding uses DNS records. Paid checkout documents USDC through Stripe on Ethereum, Solana and Polygon; no anonymity or KYC guarantee follows."},{"field":"lastReviewed","operation":"changed","before":"2026-08-07","after":"2026-10-25"},{"field":"privacyWarning","operation":"changed","before":"Forward Email LLC is a United States company and its terms set Delaware governing law, so US legal process reaches stored account data. The privacy policy states forwarded email and its metadata are not written to disk or database, but the service does store your account email address, domains, aliases, 4xx and 5xx SMTP error logs for 7 days, and outbound SMTP records for about 30 days. Paying in USDC still runs through Stripe, so the crypto option reduces the card trail rather than removing an intermediary.","after":"Forward Email stores account details and paid mailboxes. Its policy allows SMTP error logs for seven days and website/API request logs, including IP addresses and URLs, for up to 30 days. Outbound records last about 30 days. USDC checkout uses Stripe."},{"field":"publicClaims.followTheMoney.reviewedAt","operation":"changed","before":"2026-08-07","after":"2026-10-25"},{"field":"publicClaims.followTheMoney.sources","operation":"changed","before":[{"label":"Forward Email - features and pricing","href":"https://forwardemail.net/en/private-business-email?pricing=true","type":"official"},{"label":"Forward Email - crypto payments announcement","href":"https://forwardemail.net/en/blog/docs/crypto-payments-privacy-email-service","type":"official"},{"label":"Forward Email - privacy policy","href":"https://forwardemail.net/en/privacy","type":"official"},{"label":"Forward Email - terms and governing law","href":"https://forwardemail.net/en/terms","type":"official"}],"after":[{"label":"Pricing","href":"https://forwardemail.net/en/private-business-email?pricing=true","type":"official"},{"label":"USDC payment documentation","href":"https://forwardemail.net/en/blog/docs/crypto-payments-privacy-email-service","type":"official"},{"label":"Source-code license","href":"https://raw.githubusercontent.com/forwardemail/forwardemail.net/master/LICENSE.md","type":"primary-document"}]},{"field":"publicClaims.followTheMoney.value","operation":"changed","before":"Forward Email LLC - United States\n────────────────────────\nModel: free forwarding tier plus paid plans\nRevenue: $3/mo Enhanced Protection, $9/mo Team, $250/mo Enterprise\nSoftware: open source with a self-hosted option\nPayment: cards, PayPal, and USDC crypto through Stripe","after":"Forward Email\nFree forwarding; paid mailboxes from $3/month\nUSDC checkout through Stripe\nCode uses MPL 2.0 and BSL 1.1 licenses\nUltimate ownership is unknown"},{"field":"reviewSource","operation":"changed","before":"official_forwardemail_pricing_crypto_privacy_terms_intake_2026-08-07","after":"official_source_review_2026-10-25"},{"field":"updatedAt","operation":"changed","before":"2026-08-07","after":"2026-10-25"}]},{"changed_at":"2026-08-27T08:50:11+10:00","action":"updated","why":"fix: reconcile score 4.0 evidence","source":{"commit":"18e788afe003dcb0febe08a578aaf9cb087161b2","url":"https://cunicula.com/en/provider/forward-email#history-18e788afe003","review_source":"official_forwardemail_pricing_crypto_privacy_terms_intake_2026-08-07"},"changes":[{"field":"scoreAssessment.controlModel","operation":"changed","before":"hosted-account","after":"unknown"},{"field":"scoreAssessment.operatorDataExposure","operation":"changed","before":"limited","after":"unknown"},{"field":"scoreAssessment.sourceModel","operation":"changed","before":"open","after":"unknown"},{"field":"scoreReview","operation":"added","before":null,"after":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://forwardemail.net/","https://forwardemail.net/en","https://forwardemail.net/en/pricing","https://forwardemail.net/en/private-business-email","https://forwardemail.net/en/privacy","https://forwardemail.net/en/security","https://forwardemail.net/en/dpa"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://forwardemail.net/","https://forwardemail.net/en","https://forwardemail.net/en/pricing","https://forwardemail.net/en/private-business-email","https://forwardemail.net/en/privacy","https://forwardemail.net/en/security","https://forwardemail.net/en/dpa"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://forwardemail.net/","https://forwardemail.net/en","https://forwardemail.net/en/pricing","https://forwardemail.net/en/private-business-email","https://forwardemail.net/en/privacy","https://forwardemail.net/en/security","https://forwardemail.net/en/dpa"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}}}]},{"changed_at":"2026-08-26T16:27:32+10:00","action":"updated","why":"feat: apply full-service rereview and score 4.0","source":{"commit":"faa73ed3ef3cfbd8ae2fbc31753e0d1ddc6b11cf","url":"https://cunicula.com/en/provider/forward-email#history-faa73ed3ef3c","review_source":"official_forwardemail_pricing_crypto_privacy_terms_intake_2026-08-07"},"changes":[{"field":"scoreAssessment","operation":"added","before":null,"after":{"operatorDataExposure":"limited","controlModel":"hosted-account","sourceModel":"open"}}]},{"changed_at":"2026-08-09T15:16:51+10:00","action":"updated","why":"Corporate identity pass 2: research the remaining 94 services","source":{"commit":"25b8bccc09dd0af2333efb99f8e2f7ca15fd0140","url":"https://cunicula.com/en/provider/forward-email#history-25b8bccc09dd","review_source":"official_forwardemail_pricing_crypto_privacy_terms_intake_2026-08-07"},"changes":[{"field":"corporate","operation":"added","before":null,"after":{"entityType":{"value":"company","citation":"https://forwardemail.net/en/dpa","note":"Official site copyright, DPA (Governing State: Delaware), Terms, technical whitepaper, and LICENSE identify the operator as Forward Email LLC, a real hosted commercial email service."},"governanceModel":{"value":"company-sponsored","citation":"https://forwardemail.net/en/about"},"repositoryUrl":{"value":"https://github.com/forwardemail/forwardemail.net","citation":"https://github.com/forwardemail/forwardemail.net"},"legalEntity":{"value":"Forward Email LLC","citation":"https://forwardemail.net/en/dpa"},"incorporationJurisdiction":{"value":"Delaware, United States","citation":"https://forwardemail.net/en/dpa"},"ultimateOwner":{"value":"Nicholas Baugh","citation":"https://discuss.privacyguides.net/t/forward-email-email-provider/13370/299"},"officers":{"value":[{"name":"Nicholas Baugh","role":"Founder"}],"citation":"https://forwardemail.net/technical-whitepaper.pdf"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"}}]},{"changed_at":"2026-08-08T07:57:20+10:00","action":"created","why":"feat(directory): intake Electrum and Forward Email","source":{"commit":"a6df7d4d817a34fb64ff5ccca2c2a1f6298145d0","url":"https://cunicula.com/en/provider/forward-email#history-a6df7d4d817a","review_source":"official_forwardemail_pricing_crypto_privacy_terms_intake_2026-08-07"},"changes":[{"field":"record","operation":"added","before":null,"after":"created"}]}],"history_scope":{"schema_version":"1.0.0","source_path":"data/services.json","source_repository":"https://cunicula.com/en/methodology#record-history","source_commit":"656629f3a2cfd1544249be7a37a0b0526c6bbe7e","record_identity":"id","scope":"Committed public record changes. Creation events are summarized; later events contain field-level before/after values. Internal affiliate and numeric identity fields are excluded, and unsupported public claims remain redacted.","event_count":5},"related_services":[{"slug":"addy-io","name":"addy.io","domain":"addy.io","url":"https://addy.io/","kyc":"none","kycLevel":0,"kycNote":"No document KYC found. Registration/subscription can create account, recipient, name and payment metadata; crypto subscriptions are processed by NOWPayments and support BTC, XMR, ETH and other coins.","fee":"Free / $1/mo Lite / $4/mo Pro","categories":["Email","Privacy Tools"],"countries":["GLOBAL"],"bestFor":["Email aliasing","Inbox privacy","Stop spam and tracking"],"features":["Email aliasing","No KYC","XMR payment accepted","Open source","Self-hostable","Securitum audited","Unlimited aliases (free tier)","Custom domains"],"tagline":"Unlimited email aliases. No KYC. XMR accepted. Self-hostable.","status":"ok","updatedAt":"2026-06-22","description":"Open-source email aliasing service supporting self-hosting and crypto subscriptions for yearly plans.","cardSummary":"Email aliasing, self-hostable, crypto accepted.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-08-27","reviewSource":"Primary-source review 2026-08-27","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-27","trending":false,"jurisdiction":"GB","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Terms are governed by England and Wales. addy.io stores service data on UpCloud servers in the Netherlands, retains Nginx/Postfix logs with IP addresses for 3 days, and can disclose when compelled by law. Open source and self-hostable if UK/legal-process risk is unacceptable.","auditedBy":["Securitum"],"corporate":{"entityType":{"value":"company","citation":"https://play.google.com/store/apps/details?id=host.stjin.anonaddy&hl=en_US","note":"Google Play and Apple App Store list seller/developer as Who Dares Gains Ltd with matching UK address and contact@help.addy.io; UK trademark ADDY.IO is held by the same company; hosted paid service under England and Wales law."},"governanceModel":{"value":"individual","citation":"https://addy.io/faq/"},"repositoryUrl":{"value":"https://github.com/anonaddy/anonaddy","citation":"https://github.com/anonaddy/anonaddy"},"legalEntity":{"value":"WHO DARES GAINS LTD","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"registrationNumber":{"value":"14499841","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"registryUrl":{"value":"https://find-and-update.company-information.service.gov.uk/company/14499841","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"incorporationJurisdiction":{"value":"United Kingdom (England and Wales)","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"incorporationDate":{"value":"2022-11-22","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"registeredAddress":{"value":"Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, England, BL6 6HG","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"ultimateOwner":{"value":"William Harvey Browning (ownership of shares 75% or more; voting rights 75% or more)","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841/persons-with-significant-control"},"officers":{"value":["William Harvey Browning (Director, appointed 2022-11-22)","Chelsea Madeleine Browning (Director, appointed 2025-12-01)","Chelsea Browning (Secretary, appointed 2023-03-24)"],"citation":"https://find-and-update.company-information.service.gov.uk/company/14499841/officers"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/addyio","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/addy-io","canonical_score":68,"score_status":"rated","score_evidence":"reviewed","score_version":"4.0","score_breakdown":{"privacy":17,"control":7,"transparency":17,"security":17,"accountability":10},"applied_caps":[],"score_rationale":["privacy: 17 of 25 points.","control: 7 of 20 points.","transparency: 17 of 20 points.","security: 17 of 25 points.","accountability: 10 of 10 points."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"open"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://addy.io/security/"],"reviewedAt":"2026-08-27","note":"username, recipient email, aliases, delivery metadata, IP/session and payment metadata"},"controlModel":{"value":"hosted-account","sourceUrls":["https://addy.io/security/"],"reviewedAt":"2026-08-27","note":"hybrid-hosted-or-self-hosted"},"sourceModel":{"value":"open","sourceUrls":["https://github.com/anonaddy/anonaddy"],"reviewedAt":"2026-08-27","note":"open-source-self-hostable"}},"audit":{"scoreEligible":true,"auditor":"Securitum","completedAt":"2023-09","scope":"addy.io hosted web application","sourceUrls":["https://addy.io/security/"]}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"GB","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Email","primary_bucket":"Email","corporate_identity":{"entity_type":"company","entity_type_note":"Google Play and Apple App Store list seller/developer as Who Dares Gains Ltd with matching UK address and contact@help.addy.io; UK trademark ADDY.IO is held by the same company; hosted paid service under England and Wales law.","governance_model":"individual","repository_url":"https://github.com/anonaddy/anonaddy","legal_entity":"WHO DARES GAINS LTD","registration_number":"14499841","registry_url":"https://find-and-update.company-information.service.gov.uk/company/14499841","incorporation_jurisdiction":"United Kingdom (England and Wales)","incorporation_date":"2022-11-22","registered_address":"Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, England, BL6 6HG","parent_entity":null,"ultimate_owner":"William Harvey Browning (ownership of shares 75% or more; voting rights 75% or more)","prior_entities":[],"officers":[{"name":"William Harvey Browning (Director, appointed 2022-11-22)","role":null},{"name":"Chelsea Madeleine Browning (Director, appointed 2025-12-01)","role":null},{"name":"Chelsea Browning (Secretary, appointed 2023-03-24)","role":null}],"citations":{"legalEntity":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"registrationNumber":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"incorporationDate":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"registeredAddress":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"ultimateOwner":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841/persons-with-significant-control","note":null,"agent_verified":false},"officers":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841/officers","note":null,"agent_verified":false},"entityType":{"url":"https://play.google.com/store/apps/details?id=host.stjin.anonaddy&hl=en_US","note":null,"agent_verified":false},"governanceModel":{"url":"https://addy.io/faq/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"independent-audit","tiers":["independent-audit","third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":1,"third-party-reported":10,"self-reported":1},"total_sources":12},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: GB (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 71 days old"}],"score_computed_at":"2026-11-06T05:10:37.475Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"GB","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-08-27","kycLastChecked":"2026-08-27"}},{"slug":"mailbox-org","name":"Mailbox.org","domain":"mailbox.org","url":"https://mailbox.org","kyc":"light","kycLevel":1,"kycNote":"Registration asks for first and last name, but mailbox.org says it does not verify them and pseudonyms are allowed. Paid accounts create billing/payment metadata; anonymous cash payment routes exist, but cryptocurrency is not accepted.","fee":"From EUR 1/month on the private Light plan, paid annually.","categories":["Email"],"countries":["GLOBAL"],"features":["OpenPGP encryption","Alias addresses","German jurisdiction","Pseudonymous signup","Cash payment","Calendar + contacts","No ads"],"status":"ok","updatedAt":"2026-10-25","description":"German email and workspace suite allowing pseudonymous signup, paid by bank, card, PayPal or cash by post.","cardSummary":"German secure email and workspace with OpenPGP.","networks":[],"checkedAt":"2026-10-25","lastReviewed":"2026-10-25","reviewSource":"official_source_review_2026-10-25","jurisdictionConfidence":"verified","kycLastChecked":"2026-10-25","trending":false,"jurisdiction":"DE","evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"Mailbox stores account and payment records. Its policy lists IP access logs for four days and mail-delivery metadata for seven days. OpenPGP is optional, not protection for all ordinary mail.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://mailbox.org/en/legal-information/","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Heinlein Hosting GmbH","citation":"https://mailbox.org/en/legal-information/"},"registrationNumber":{"value":"HRB 220010 B","citation":"https://mailbox.org/en/legal-information/"},"registryUrl":{"value":"https://www.handelsregister.de/","citation":"https://mailbox.org/en/legal-information/"},"incorporationJurisdiction":{"value":"Germany","citation":"https://mailbox.org/en/legal-information/"},"registeredAddress":{"value":"Schwedter Straße 8/9A, 10119 Berlin, Germany","citation":"https://mailbox.org/en/legal-information/"},"officers":{"value":["Peer Heinlein"],"citation":"https://mailbox.org/en/legal-information/"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/mailbox-org","canonical_score":42,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":25,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://mailbox.org/de/","https://mailbox.org"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://mailbox.org/de/","https://mailbox.org"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://mailbox.org/de/","https://mailbox.org"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"DE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Email","primary_bucket":"Email","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Heinlein Hosting GmbH","registration_number":"HRB 220010 B","registry_url":"https://www.handelsregister.de/","incorporation_jurisdiction":"Germany","incorporation_date":null,"registered_address":"Schwedter Straße 8/9A, 10119 Berlin, Germany","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[{"name":"Peer Heinlein","role":null}],"citations":{"legalEntity":{"url":"https://mailbox.org/en/legal-information/","note":null,"agent_verified":false},"registrationNumber":{"url":"https://mailbox.org/en/legal-information/","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://mailbox.org/en/legal-information/","note":null,"agent_verified":false},"registeredAddress":{"url":"https://mailbox.org/en/legal-information/","note":null,"agent_verified":false},"officers":{"url":"https://mailbox.org/en/legal-information/","note":null,"agent_verified":false},"entityType":{"url":"https://mailbox.org/en/legal-information/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":8},"total_sources":8},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: DE"}],"evidence_confidence":100,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":30,"detail":"All recorded checks are within 30 days"}],"score_computed_at":"2026-11-06T05:10:37.475Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"DE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-10-25","lastReviewed":"2026-10-25","kycLastChecked":"2026-10-25"}},{"slug":"mailfence","name":"Mailfence","domain":"mailfence.com","url":"https://mailfence.com/","kyc":"none","kycLevel":0,"kycNote":"No document KYC found. Terms require a valid email address and any requested account information; paid accounts can create credit-card or other payment metadata.","fee":"Free / €2.50/mo Entry / €7.50/mo Pro","categories":["Email"],"countries":["GLOBAL"],"bestFor":["Encrypted email","OpenPGP users","Non-US jurisdiction"],"features":["End-to-end encrypted","OpenPGP support","No ads","Calendar + docs","Custom domains","Belgian law","BTC accepted","Open source (client)"],"tagline":"Belgian encrypted email. OpenPGP. No ads. No US jurisdiction.","status":"ok","updatedAt":"2026-08-27","changedAt":"2026-08-27","description":"Belgian encrypted email and groupware with OpenPGP, calendar, contacts and documents under Belgian and EU law.","cardSummary":"Belgian encrypted email and groupware.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-08-27","reviewSource":"Primary-source review 2026-08-27","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-27","trending":false,"jurisdiction":"BE","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Belgian/EU provider, not Five Eyes, but Mailfence can process account, message-index, payment and anti-abuse data and may disclose information when required by Belgian law. Use OpenPGP for content that must stay end-to-end encrypted.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://mailfence.com/en/terms.jsp","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"ContactOffice Group SA","citation":"https://mailfence.com/en/terms.jsp"},"registrationNumber":{"value":"BE 0466.241.584","citation":"https://mailfence.com/en/terms.jsp"},"incorporationJurisdiction":{"value":"Belgium","citation":"https://mailfence.com/en/privacy.jsp"},"registeredAddress":{"value":"Avenue Franklin Roosevelt 47b, B-1050 Brussels, Belgium","citation":"https://mailfence.com/en/terms.jsp"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/mailfence","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/mailfence","canonical_score":52,"score_status":"rated","score_evidence":"reviewed","score_version":"4.0","score_breakdown":{"privacy":12,"control":7,"transparency":8,"security":17,"accountability":8},"applied_caps":[{"key":"partially-reviewable-critical-core","maximum":79,"reason":"A partially reviewable critical core without current audit evidence limits the score to 79."}],"score_rationale":["privacy: 12 of 25 points.","control: 7 of 20 points.","transparency: 8 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","A partially reviewable critical core without current audit evidence limits the score to 79."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"extensive","controlModel":"hosted-account","sourceModel":"partial"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"extensive","sourceUrls":["https://mailfence.com/en/privacy.jsp"],"reviewedAt":"2026-08-27","note":"Hosted email exposes account identifiers plus IP, sender/recipient, subject, message-ID, timestamp and anti-abuse processing; this is extensive score-critical operator data."},"controlModel":{"value":"hosted-account","sourceUrls":["https://mailfence.com/en/terms.jsp"],"reviewedAt":"2026-08-27","note":"Mailfence operates user mailboxes and account/service infrastructure."},"sourceModel":{"value":"partial","sourceUrls":["https://mailfence.com/en/private-email.jsp","https://mailfence.com/en/terms.jsp"],"reviewedAt":"2026-08-27","note":"Client-side/open components do not establish an inspectable hosted mail core; official terms restrict server/site code, so only partial reviewability is supported."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped independent audit of the score-critical core was evidenced in the reopened first-party source family."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"BE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Email","primary_bucket":"Email","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"ContactOffice Group SA","registration_number":"BE 0466.241.584","registry_url":null,"incorporation_jurisdiction":"Belgium","incorporation_date":null,"registered_address":"Avenue Franklin Roosevelt 47b, B-1050 Brussels, Belgium","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://mailfence.com/en/terms.jsp","note":null,"agent_verified":false},"registrationNumber":{"url":"https://mailfence.com/en/terms.jsp","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://mailfence.com/en/privacy.jsp","note":null,"agent_verified":false},"registeredAddress":{"url":"https://mailfence.com/en/terms.jsp","note":null,"agent_verified":false},"entityType":{"url":"https://mailfence.com/en/terms.jsp","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":5},"total_sources":5},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: BE"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 71 days old"}],"score_computed_at":"2026-11-06T05:10:37.475Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"BE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-08-27","kycLastChecked":"2026-08-27"}},{"slug":"posteo","name":"Posteo","domain":"posteo.de","url":"https://posteo.de","kyc":"none","kycLevel":0,"kycNote":"Official homepage says Posteo does not collect personal data, does not link payment data to accounts, and supports anonymized payment.","fee":"€1/mo","categories":["Email"],"countries":["GLOBAL"],"features":["Anonymous signup","Cash payment by mail","German jurisdiction","End-to-end encrypted","No IP logging","Sustainable infrastructure","No tracking","4 GB included storage"],"status":"ok","updatedAt":"2026-08-25","description":"German privacy email from Posteo e.K. with 4GB included at €1/month, anonymous signup/payment options, no ads and no linking of payment data to accounts.","cardSummary":"German email with anonymous payment options.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"primary_source_rereview_2026-08-25","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"DE","evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"German/EU jurisdiction; service is privacy-forward, but lawful orders can still compel whatever account/payment data exists.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://posteo.de/en/site/legal_notice","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Posteo e.K.","citation":"https://posteo.de/en/site/legal_notice"},"registrationNumber":{"value":"HRA 47592 B","citation":"https://posteo.de/en/site/legal_notice"},"registryUrl":{"value":"https://www.handelsregister.de/","citation":"https://posteo.de/en/site/legal_notice"},"incorporationJurisdiction":{"value":"Germany","citation":"https://posteo.de/en/site/legal_notice"},"registeredAddress":{"value":"Methfesselstr. 38, 10965 Berlin, Germany","citation":"https://posteo.de/en/site/legal_notice"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"publicClaims":{"followTheMoney":{"value":"Posteo - Berlin, Germany\n────────────────────────\nFounders: Patrik and Sabrina Löhr\nFounded: 2009\nDebt and loans: €0\nAdvertising income: €0","reviewedAt":"2026-07-15","sources":[{"label":"Posteo - About","href":"https://posteo.de/en/site/about_posteo","type":"official"}]}},"followTheMoney":"Posteo - Berlin, Germany\n────────────────────────\nFounders: Patrik and Sabrina Löhr\nFounded: 2009\nDebt and loans: €0\nAdvertising income: €0","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/posteo","canonical_score":45,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":25,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://posteo.de/en","https://posteo.de/en/site/2026/02/new-posteo-doubles-storage-space-to-4-gb","https://posteo.de/en/site/privacy_policy","https://posteo.de"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://posteo.de/en","https://posteo.de/en/site/2026/02/new-posteo-doubles-storage-space-to-4-gb","https://posteo.de/en/site/privacy_policy","https://posteo.de"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://posteo.de/en","https://posteo.de/en/site/2026/02/new-posteo-doubles-storage-space-to-4-gb","https://posteo.de/en/site/privacy_policy","https://posteo.de"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"DE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Email","primary_bucket":"Email","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Posteo e.K.","registration_number":"HRA 47592 B","registry_url":"https://www.handelsregister.de/","incorporation_jurisdiction":"Germany","incorporation_date":null,"registered_address":"Methfesselstr. 38, 10965 Berlin, Germany","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://posteo.de/en/site/legal_notice","note":null,"agent_verified":false},"registrationNumber":{"url":"https://posteo.de/en/site/legal_notice","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://posteo.de/en/site/legal_notice","note":null,"agent_verified":false},"registeredAddress":{"url":"https://posteo.de/en/site/legal_notice","note":null,"agent_verified":false},"entityType":{"url":"https://posteo.de/en/site/legal_notice","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":7},"total_sources":7},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: DE"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 73 days old"}],"score_computed_at":"2026-11-06T05:10:37.479Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"DE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"proton-mail","name":"Proton Mail","domain":"proton.me","url":"https://proton.me/mail","kyc":"none","kycLevel":0,"kycNote":"A Proton account is required. Captcha, email or SMS checks may be requested. Payment and abuse-prevention records can remain.","fee":"Free plan; paid prices vary by plan and billing cycle.","categories":["Email"],"countries":["GLOBAL"],"features":["Encrypted stored messages","End-to-end encryption for supported messages","Open-source clients","Swiss provider","Free account","Bitcoin payment after signup"],"status":"ok","updatedAt":"2026-10-25","description":"Swiss email with encrypted storage and end-to-end encryption for supported messages.","cardSummary":"Swiss end-to-end encrypted email.","networks":[],"checkedAt":"2026-10-25","lastReviewed":"2026-10-25","reviewSource":"official_source_review_2026-10-25","jurisdictionConfidence":"verified","kycLastChecked":"2026-10-25","trending":true,"jurisdiction":"CH","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"Proton can access addressing data, subjects, attachment names and message times. Ordinary external email is not end-to-end encrypted. The account policy also allows IP retention for abuse prevention and legal obligations.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://proton.me/legal/terms","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Proton AG","citation":"https://proton.me/legal/terms"},"registrationNumber":{"value":"CHE-354.686.492","citation":"https://www.zefix.ch/ZefixREST/api/v1/firm/search.json (Swiss Central Business Names Index, official federal registry API, agent-verified by direct query 2026-08-08: ehraid=1189263, legalSeat=Plan-les-Ouates, status=EXISTIEREND)"},"registryUrl":{"value":"https://www.zefix.ch/en/search/entity/list?name=Proton%20AG","citation":"https://www.zefix.ch/ZefixREST/api/v1/firm/search.json (agent-verified 2026-08-08)"},"incorporationJurisdiction":{"value":"Switzerland","citation":"https://proton.me/legal/terms"},"incorporationDate":{"value":"unknown","citation":"unknown"},"registeredAddress":{"value":"Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland","citation":"https://proton.me/legal/terms"},"parentEntity":{"value":"unknown","citation":"unknown"},"ultimateOwner":{"value":"unknown","citation":"unknown"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"telegram":"https://t.me/proton_privacy","publicClaims":{"followTheMoney":{"value":"Proton AG\n────────────────────────\nPrimary shareholder: Proton Foundation\nFoundation: Swiss non-profit\nRevenue allocation: 1%\nwhen financial conditions allow","reviewedAt":"2026-07-15","sources":[{"label":"Proton Foundation - Governance","href":"https://proton.me/foundation","type":"official"}]}},"followTheMoney":"Proton AG\n────────────────────────\nPrimary shareholder: Proton Foundation\nFoundation: Swiss non-profit\nRevenue allocation: 1%\nwhen financial conditions allow","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/proton-mail","canonical_score":37,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-10-25","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://proton.me/mail","https://x.com/ProtonMail/status/2090462386947862992"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://proton.me/mail","https://x.com/ProtonMail/status/2090462386947862992"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://proton.me/mail","https://x.com/ProtonMail/status/2090462386947862992"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"CH","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Email","primary_bucket":"Email","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Proton AG","registration_number":"CHE-354.686.492","registry_url":"https://www.zefix.ch/en/search/entity/list?name=Proton%20AG","incorporation_jurisdiction":"Switzerland","incorporation_date":null,"registered_address":"Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://proton.me/legal/terms","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.zefix.ch/ZefixREST/api/v1/firm/search.json","note":"Swiss Central Business Names Index, official federal registry API, agent-verified by direct query 2026-08-08: ehraid=1189263, legalSeat=Plan-les-Ouates, status=EXISTIEREND","agent_verified":true},"incorporationJurisdiction":{"url":"https://proton.me/legal/terms","note":null,"agent_verified":false},"registeredAddress":{"url":"https://proton.me/legal/terms","note":null,"agent_verified":false},"entityType":{"url":"https://proton.me/legal/terms","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":true,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"directly-tested","tiers":["directly-tested","self-reported"],"counts":{"directly-tested":2,"independent-audit":0,"third-party-reported":0,"self-reported":6},"total_sources":8},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: CH"}],"evidence_confidence":72,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":30,"detail":"All recorded checks are within 30 days"}],"score_computed_at":"2026-11-06T05:10:37.480Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"CH","jurisdictionConfidence":"verified","evidenceStatus":"partial","checkedAt":"2026-10-25","lastReviewed":"2026-10-25","kycLastChecked":"2026-10-25"}}]},"meta":{"total":1,"api_version":"1.3","powered_by":"cunicula.com","documentation_url":"https://cunicula.com/en/api-docs","machine_index_url":"https://cunicula.com/llms.txt","license":"LicenseRef-Cunicula-Attribution-1.0","license_url":"https://cunicula.com/en/cite","attribution":"Cunicula, \"{name}\", cunicula.com, reviewed {reviewed}, retrieved {retrieved}, {url}","cite_guide_url":"https://cunicula.com/en/cite","dataset_url":"https://cunicula.com/api/v1/dataset","schema_version":"1.1.0","related_total":5,"history_total":5}}