Provider Recommendations
Criteria
Criteria should be independently verifiable. For example stats (compliancy, up time, TLS) should be generated with open source tools and the results should be linked from the list. Things like Privacy policy should be linked from the list as well.
- Passes the Conversations Compliance Test
- Provides IBR (redirect to website is OK)
- Up-time of >=99.5% in the last 30 days. (On XMPP level (successful login) not just TCP). For example measured via status.conversations.im.
- Grade A (no self signed certificate, no insecure TLS settings) on xmpp.net
- Provides a privacy policy (link)
- Complies with GDPR (How are we going to verify that?)
- Has a bus factor > 1
List of providers
| Provider | Up time (30 day average) | Compliance | TLS | Privacy Policy | Fee |
|---|---|---|---|---|---|
| conversations.im | 99.52% | 19/19 | Grade A | https://account.conversations.im/privacy/ | 8 Euro / year after 6 month trial |
| trashserver.net | 99.92% | 19/19 | Grade A | https://trashserver.net/en/privacy/ | Donation |