Provider Recommendations

Criteria

Criteria should be independently verifiable. For example stats (compliancy, up time, TLS) should be generated with open source tools and the results should be linked from the list. Things like Privacy policy should be linked from the list as well.

• Passes the Conversations Compliance Test
• Provides IBR (redirect to website is OK)
• Up-time of >=99.5% in the last 30 days. (On XMPP level (successful login) not just TCP). For example measured via status.conversations.im.
• Grade A (no self signed certificate, no insecure TLS settings) on xmpp.net
• Provides a privacy policy (link)

Additional Criteria

Criteria that are generally nice to have but are we are unsure on how to verify them. (Suggestions welcome)

• Complies with GDPR
• Has a bus factor > 1
• Proper monitoring
• Proper backup
• No extremely restrictive anti spam policies like allowing only messages from people in your contact list

List of providers

Provider	Server(s) location (and providers)	Up time (30 day average)	Compliance	TLS	Privacy Policy	Fee
Anoxinon Messenger	Germany (https://www.hetzner.com)	-	19/19	Grade A	https://anoxinon.de/datenschutzerklaerung_xmpp/	Free
blabber.im	-	-	19/19	Grade A	https://blabber.im/en/datenschutz/	Free
conversations.im	Germany (Manitu)	99.52%	19/19	Grade A	https://account.conversations.im/privacy/	8 Euro / year after 6 month trial
dismail.de	-	100.0%	19/19	Grade A	https://dismail.de/datenschutz.html	free
jabberfr.org	France (online.net)	99.72%	19/19	Grade A	https://wiki.jabberfr.org/CGU	Free
magicbroccoli.de	-	99.66%	19/19	Grade A	https://magicbroccoli.de/datenschutz/	Free
tigase.im	USA (AWS)	-	18/19	Grade A	https://tigase.im/privacy.txt	Free
trashserver.net	-	99.92%	19/19	Grade A	https://trashserver.net/en/privacy/	Donation