Evidence and risk■Verified evidence/■StandardMaterial claims checked against current sources.; no material risk recorded in them.
Last reviewedReviewed 22 Jun 2026KYC checked 22 Jun 2026 · verified jurisdiction · Source → official siteHow to cite this pageEvidence confidence94/100
Evidence and facts
Evidence and facts
JURISDICTIONDE
NOTEGerman/EU jurisdiction with data-minimization posture; paid/business billing metadata may still exist.
AUDITED BYCure53
OPERATOR DATAHosted operator recorded
EVIDENCE CONFIDENCE
░░░░░░░░░░█████████▍94/100INDEPENDENT AUDIT1/10Why evidence is 94/100Formula 3.1
Source coverageMaterial claims checked against current sources
KYC TRIGGERSNo identity KYC surfaced for normal email use; terms/privacy say business customers need full name/address and paid variants may collect domicile, optional invoice name/address or VAT data.
FEEFree / from €3/mo
CATEGORIESEmail
FEATURESEnd-to-end encrypted, Encrypted subject lines, Anonymous signup, German jurisdiction, Open source, Calendar included, No ad tracking
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history
Analysis
OVERVIEW
Encrypts subject lines along with content, which most encrypted-mail designs leave readable, ships open-source clients, and allows anonymous signup on the free tier. Post-quantum hybrid encryption is deployed rather than announced.
LIMITS
German jurisdiction means court orders can compel logging of connection data for specific accounts, and paid or business tiers collect billing details the free tier avoids. Mail to outside providers still crosses in ordinary form.
USEFUL FOR
An encrypted mailbox under EU process where subject-line coverage and open clients outweigh interoperability.
No identity verification is recorded for typical use. No identity KYC surfaced for normal email use; terms/privacy say business customers need full name/address and paid variants may collect domicile, optional invoice name/address or VAT data.
Which payment methods are accepted?
Please check the provider site for accepted payment methods.
Where is it available?
Recorded availability: GLOBAL.
Is the operator based in a Five Eyes country?
No. The recorded jurisdiction is DE, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.
How are identity, operator, and evidence fields reported?
Identity exposure is level 0 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Evidence confidence is 94/100 and recorded risk is standard.
No changes to the documents we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.
Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.
Service history
Latest meaningful changes to the facts shown on this provider page.
Corporate registry information updated
Corporate / Entity type
Corporate registry information updated
Corporate
Provider presentation updated
Best for, Evidence status, Follow the money, Public claims / Follow the money / Sources, and 4 more
Tutao GmbH - Hanover, Germany
────────────────────────
Represented by: Arne Möhle,
Hanna Bozakov, and Matthias Pfau
Registration: Hanover HRB 208014 → Tutao GmbH - Hanover, Germany
────────────────────────
Represented by: Arne Möhle,
Hanna Bozakov, and Matthias Pfau
Registration: Hanover HRB 208014
Public claims / Follow the money / Sources
Label: Tuta - Legal notice; Href: https://tuta.com/imprint; Type: official → Label: Tuta - Legal notice; Href: https://tuta.com/imprint; Type: official
Public claims / Follow the money / Value
Tutao GmbH - Hanover, Germany
────────────────────────
Represented by: Arne Möhle,
Hanna Bozakov, and Matthias Pfau
Registration: Hanover HRB 208014 → Tutao GmbH - Hanover, Germany
────────────────────────
Represented by: Arne Möhle,
Hanna Bozakov, and Matthias Pfau
Registration: Hanover HRB 208014
Recorded risk
not set → standard
Tagline
A privacy-preserving tool offering genuine utility. → not set
not set → Tutao GmbH - Hanover, Germany
────────────────────────
Represented by: Arne Möhle,
Hanna Bozakov, and Matthias Pfau
Registration: Hanover HRB 208014
Public claims
not set → Follow the money: Tutao GmbH - Hanover, Germany
────────────────────────
Represented by: Arne Möhle,
Hanna Bozakov, and Matthias Pfau
Registration: Hanover HRB 208014
Privacy-first encrypted email from Germany. Encrypts subject lines too. Anonymous signup, no personal data required for free tier. Open source. (Zero KYC) → German encrypted email, calendar and contacts from Tutao GmbH with end-to-end/post-quantum encryption and open-source clients.
Jurisdiction confidence
inferred → verified
KYC last checked
2026-03-08 → 2026-06-22
Kyc note
Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR. → No identity KYC surfaced for normal email use; terms/privacy say business customers need full name/address and paid variants may collect domicile, optional invoice name/address or VAT data.
Last reviewed
2026-03-08 → 2026-06-22
Privacy warning
not set → German/EU jurisdiction with data-minimization posture; paid/business billing metadata may still exist.
Source reviewed
older source, not independently verified → official site