Tuta
Email that nobody else can read.
Tuta is an end-to-end encrypted service for email, calendar and contacts from Hanover. Mailbox, subject lines, address book and appointments are stored encrypted — not even the operator can read them.
What Tuta is
Encrypted before it leaves the device
Tuta is a service for email, calendar and contacts in which encryption does not only begin in transit. Messages are encrypted on the device and stored encrypted on the server — including subject lines, attachments, appointments and address book. The operator has no key.
Between Tuta accounts this happens automatically. Messages to recipients outside can be delivered encrypted using a shared password. The vendor has switched its method to post-quantum cryptography — that is, to methods intended to hold even when quantum computers can break today's encryption.
The apps are open source and available for browser, Windows, macOS, Linux, iOS and Android. The company is based in Hanover and is subject to German law and the GDPR.
- End-to-end encrypted, including subject and attachments
- Encrypted calendar and address book
- Encrypted to external recipients via password
- Post-quantum cryptography
- Open-source apps
- Your own domain possible
- User management for businesses
- Registered office and law in Germany
Assessment
When Tuta fits — and when it does not
Tuta is not the replacement for every mailbox landscape, but the right choice where confidentiality comes before convenience: for management and supervisory board, HR and legal matters, whistleblowing procedures, client and patient communication, research and development.
The flip side is part of it: because the server cannot read the content, Tuta works differently from an ordinary mailbox. The classic access routes IMAP and SMTP are not available; access is through the vendor's apps. If you need Outlook with all its features, you are making a deliberate decision here.
We tell you where the line runs. For broad day-to-day use there is the dedicated mail server — for the communication that is nobody else's business, Tuta.
Vendor
Frequently asked questions
Can I use my own domain?
Yes, custom domains are part of the feature set for business customers, together with user management. We set up the DNS records for it as well if your zones are with us.
Where does Tuta run if I get it through you?
On our infrastructure, in our data centres in Germany — certified to ISO 27001 based on BSI IT-Grundschutz. That brings together two things that are otherwise separate: the service encrypts end to end, and the machines are with an operator subject to German law. No access under the US CLOUD Act, on either level.
Why no IMAP?
Because the server does not hold the content in plain text. A classic IMAP client could do nothing with it. Access is therefore through the vendor's apps — in the browser or as a program on computer and phone.
What does post-quantum cryptography mean?
Encryption methods intended to keep protecting even when a quantum computer can break today's methods. This matters above all for data that still has to be confidential in ten years — because what is intercepted today can be decrypted later.
What does Tuta cost through kyberio?
For business customers there are terms through us: one contract, one invoice, one contact. The price depends on the number of mailboxes and the scope — we state it in the quote. A figure we have not confirmed does not appear here.
Sovereignty
Paving the way for digital sovereignty
-
Owner-managed since 1997
As an owner-managed operator with our own data centers, we make our decisions independently and are subject exclusively to German / EU law.
-
100% made in Germany
Our data center, product development, and customer support are all based in Germany for your digital sovereignty.
-
24/7 Customer Support
We are here for you: 24/7/365 customer support, in English and German
Which communication should be truly confidential?
Tell us which group of people and which content it applies to. We assess whether Tuta is the right route — or something else. Feel free to contact me directly.
- We will get back to you as soon as we can.
- No obligation, free of charge.