Skip to content
CUNICULA

Tuta

German encrypted email, calendar and contacts from Tutao GmbH with end-to-end/post-quantum encryption and open-source clients.

tuta.com

German encrypted email, calendar and contacts from Tutao GmbH with end-to-end/post-quantum encryption and open-source clients.

Common useEmailEmailOperator dataHosted
Identity checksZero KYCNo document check recorded · identity exposure level 0/4
Evidence and riskVerified evidenceStandardMaterial claims checked against current sources.; no material risk recorded in them.
Last reviewedReviewed 22 Jun 2026KYC checked 22 Jun 2026 · verified jurisdiction · Source → official siteHow to cite this pageEvidence confidence94/100
Evidence and facts

Evidence and facts

JURISDICTIONDE
NOTEGerman/EU jurisdiction with data-minimization posture; paid/business billing metadata may still exist.
AUDITED BYCure53
OPERATOR DATAHosted operator recorded
EVIDENCE CONFIDENCE
INDEPENDENT AUDIT1/10
Why evidence is 94/100Formula 3.1
Source coverageMaterial claims checked against current sources
+70
Review ageOldest recorded check is 62 days old
+24

Full scoring method

LAST CHECKED2026-06-24
LAST UPDATED2026-06-22

Specs

DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 0/4
KYC TRIGGERSNo identity KYC surfaced for normal email use; terms/privacy say business customers need full name/address and paid variants may collect domicile, optional invoice name/address or VAT data.
FEEFree / from €3/mo
CATEGORIESEmail
FEATURESEnd-to-end encrypted, Encrypted subject lines, Anonymous signup, German jurisdiction, Open source, Calendar included, No ad tracking
TORNot listed
REGIONSGlobal availability
Review analysis, source material, related services, and history

Analysis

OVERVIEW

Encrypts subject lines along with content, which most encrypted-mail designs leave readable, ships open-source clients, and allows anonymous signup on the free tier. Post-quantum hybrid encryption is deployed rather than announced.

LIMITS

German jurisdiction means court orders can compel logging of connection data for specific accounts, and paid or business tiers collect billing details the free tier avoids. Mail to outside providers still crosses in ordinary form.

USEFUL FOR

An encrypted mailbox under EU process where subject-line coverage and open clients outweigh interoperability.

Sources · reviewed 2026-07-16

Ownership and funding

Ownership and funding chain
Sources · reviewed 2026-07-15

Corporate identity

Registry-sourced, not audited. The facts below come from cited web research rather than a direct registry query. Each claim links its own source.

LEGAL ENTITY
Tutao GmbHsource ↗
REGISTRATION NO.
HRB 208014source ↗
INCORPORATED IN
Germanysource ↗
REGISTERED ADDRESS
Deisterstr. 17a, 30449 Hanover, Germanysource ↗
OFFICERS
  • Arne Möhle
  • Hanna Bozakov
  • Matthias Pfau
source ↗
Registry research · reviewed 2026-08-08

Frequently Asked Questions

Is identity verification required?

No identity verification is recorded for typical use. No identity KYC surfaced for normal email use; terms/privacy say business customers need full name/address and paid variants may collect domicile, optional invoice name/address or VAT data.

Which payment methods are accepted?

Please check the provider site for accepted payment methods.

Where is it available?

Recorded availability: GLOBAL.

Is the operator based in a Five Eyes country?

No. The recorded jurisdiction is DE, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.

How are identity, operator, and evidence fields reported?

Identity exposure is level 0 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Evidence confidence is 94/100 and recorded risk is standard.

Related Services

Compare

Sources and history

Terms and privacy policy

No changes to the documents we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.

Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.