Tuta
Open-source end-to-end encrypted email with zero-access architecture
ToolEmail SecurityCloud, Open source
Pricing: Free and open source; paid tiers on the vendor site.
Reviewed by the Cyber Vendor Guide editorial team against the public sources cited below · Last reviewed February 2026 · How we review listings
What is Tuta?
Tuta (formerly Tutanota) is an open-source, end-to-end encrypted email provider based in Germany. Every email, contact, and calendar entry is encrypted at rest with zero-access architecture. Tuta uses its own encryption protocols rather than PGP, encrypting subject lines in addition to message bodies. While primarily focused on GDPR compliance and personal privacy, Tuta's business plans offer custom domains, team management, and whitelabel options.
Best for: Privacy-focused teams wanting open-source, end-to-end encrypted email at an affordable price under EU jurisdiction
Pros
- Fully open-source codebase
- Encrypts subject lines. Not just bodies
- Affordable pricing for small teams
- German jurisdiction with strong privacy laws
- No tracking or advertising
Things to check
- No HIPAA BAA available
- Custom encryption protocol (not PGP/S/MIME)
- Limited enterprise admin features
- Fewer integrations than established platforms
- No bridge app for third-party mail clients
Reported in public reviews and vendor documentation. See sources below.
Key Features
Do you work at Tuta? to confirm the details or send us a correction.
Add the Cyber Vendor Guide badge to your site
Sources & references
Where the information on this listing comes from. Always verify pricing and capabilities against the vendor before a purchasing decision.
Spot an error, or do you represent Tuta? Request a correction.
Key facts
- Pricing
- Free and open source; paid tiers on the vendor site.
- Model
- Per-user
- Founded
- 2011
- Cloud
- Yes
- Self-hosted
- No
- Open source
- Yes
Tuta Alternatives
- VirtruEnd-to-end encryption for Gmail and Outlook with persistent ...
- PauboxHIPAA-compliant email encryption built for healthcare with s...
- Zix (OpenText)Enterprise email encryption with the larger install base and...
- EgressAdaptive, AI-driven email encryption that adjusts protection...
- Proton Mail BusinessSwiss-hosted zero-access encrypted email with the strongest ...
Certifications
GDPR