Provider Recommendations
Criteria
Criteria should be independently verifiable. For example stats (compliancy, up time, TLS) should be generated with open source tools and the results should be linked from the list. Things like Privacy policy should be linked from the list as well.
- Passes the Conversations Compliance Test
- Provides IBR (redirect to website is OK)
- Up-time of >=99.5% in the last 30 days. (On XMPP level (successful login) not just TCP). For example measured via status.conversations.im.
- Grade A (no self signed certificate, no insecure TLS settings) on xmpp.net
- Provides a privacy policy (link)
Additional Criteria
Criteria that are generally nice to have but are we are unsure on how to verify them. (Suggestions welcome)
- Complies with GDPR
- Has a bus factor > 1
List of providers
| Provider | Up time (30 day average) | Compliance | TLS | Privacy Policy | Fee |
|---|---|---|---|---|---|
| conversations.im | 99.52% | 19/19 | Grade A | https://account.conversations.im/privacy/ | 8 Euro / year after 6 month trial |
| trashserver.net | 99.92% | 19/19 | Grade A | https://trashserver.net/en/privacy/ | Donation |