Infomaniak Mail Sender: pure Swiss hosting for fiduciary professional secrecy

What is Infomaniak Mail Sender?

Infomaniak is the largest Swiss hosting and cloud provider, headquartered in Geneva with a secondary data center in Sion. The company was founded in 1994, is privately Swiss-owned, and currently operates four Swiss data centers with ISO-27001, ISO-50001 and ISO-14001 certification. The "Mail Sender" service is the dedicated SMTP sending service of Infomaniak, integrated with classical hosting, DNS and mailbox products.

Unlike Brevo, Mailgun or SES, Infomaniak Mail Sender is not primarily about maximum deliverability or large volume, but about a hard compliance guarantee: all data -- mail bodies, logs, metadata -- remains physically on Swiss soil. Swiss data protection law (DSG/revDSG) applies directly, without sub-processor chains into the EU or USA. For law firms with professional secrecy per Art. 321 SCC and fiduciaries with professional duties, this is often the decisive criterion.

As of May 2026, Infomaniak operates four data centers: D2 (Geneva city, Tier-III layout), D3 (Geneva plateau), D4 (Sion, hydroelectric-powered), and D5 (Geneva, ECO data center with heat recovery for district heating). All four lie exclusively in Switzerland, no data center in EU or USA. Mail Sender dispatch runs technically over Postfix clusters with dedicated IP pools for Pro customers and shared IPs for standard accounts.

Pricing (May 2026): Mail Sender is part of the hosting packages, from CHF 6/month (Web Hosting Starter, incl. 200 mails/day). Dedicated Mail Sender from CHF 9/month for 5,000 mails/day. Bulk sending "Newsletter" service separately from CHF 0.05 per 1,000 mails. An API-key-based SMTP solution is included in standard hosting.

Why it matters for Swiss fiduciaries

Infomaniak is the right choice in three specific Swiss cases: professional secrecy without third-country transfer, complete single-vendor Swiss stack, and Swiss contract law without EU bridges.

Professional secrecy per Art. 321 SCC: A lawyer may only transfer client data abroad under strict conditions. A mail with client name, file number and matter that runs through Brevo-FR or Postmark-US is a transfer abroad -- even if both providers are GDPR-compliant. Infomaniak solves this: data stays in Switzerland, no transfer, no TIA needed, no additional compliance steps. For law firms this is often the only viable path.

Single-vendor Swiss stack: Whoever has hosting, domain DNS, mailbox and sending API all at Infomaniak drastically simplifies the compliance path. One single DPA-equivalent Swiss contract covers everything. At audit requests (e.g. EDÖB review), the data chain is clear: server at Infomaniak, mail at Infomaniak, DNS at Infomaniak, hosting at Infomaniak. No sub-processor scatter game, no "data lands via Cloudflare in us-east-1, then via Mailgun in eu-central-1".

Swiss contract law: Infomaniak contracts are governed by Swiss law, jurisdiction Geneva. In a dispute, proceedings are in a Swiss language (FR/DE), under Swiss law, in Swiss courts. In disputes with US providers (Postmark, Resend, SendGrid), an SME has practically no negotiating power -- with Infomaniak, a Swiss lawyer can act directly.

The trade-off: Infomaniak lies 5-7 points behind Postmark on inbox rate (92-94 vs 99 percent). The API is 2-3 generations older than Resend or Postmark -- classical dashboard, less comfort. Scaling is unproblematic up to ~200,000 mails/month, beyond that it becomes more expensive per mail than SES. Whoever demands maximum deliverability: Postmark with TIA. Whoever demands maximum compliance: Infomaniak.

How it works

Infomaniak Mail Sender offers two send paths: classical SMTP relay and a REST API.

SMTP relay: Host `mail.infomaniak.com`, port 587 STARTTLS or 465 SMTPS. User: the service user address (typically `noreply@<domain>` for a hosting package, or a specially created service mailbox). Pass: the mailbox password. Works directly with any classical mail framework.

REST API (Infomaniak Mail API): Endpoint `https://api.infomaniak.com/1/mailings/<MAILING_ID>/send` or for transactional `https://api.infomaniak.com/1/email`. Authentication via OAuth2 token, generated in the Manager Console under "User > API Tokens". Example:

``` curl -X POST "https://api.infomaniak.com/1/email" \ -H "Authorization: Bearer ${INFOMANIAK_TOKEN}" \ -H "Content-Type: application/json" \ -d '{ "from": "invoice@firm-müller.ch", "to": "[email protected]", "subject": "Dunning No. 2 - Invoice 2026-104", "text": "Dear Mrs Berger, ..." }' ```

DNS setup: Infomaniak requires SPF (`v=spf1 include:spf.infomaniak.ch -all`) and DKIM (TXT, selector generated in the Mail Sender dashboard). With domain hosting also at Infomaniak: DNS records are set automatically -- a major advantage of the single-vendor stack. DMARC recommended `v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@<domain>`. MX records unchanged, unless Infomaniak is also the inbound mail server.

Webhooks: Infomaniak Mail Sender has offered bounce and delivery webhooks since mid-2025. In the Mail Sender dashboard under "Notifications", enter endpoint. Events: delivered, bounced (hard/soft), complained, deferred. HMAC signature in header `X-IK-Signature`. Retry: 3 attempts over 8h.

Bulk newsletter: For marketing mails (newsletter, mass send), Infomaniak offers a separate "Newsletter Manager" with own UI and API. Sending reputation separate from transactional stream -- similar to Postmark separation.

Test and monitoring: Dashboard yields daily statistics (sent, delivered, bounced, opened) per sender address. "Mail Logs" allows per-recipient search for 30 days, Pro plan 90 days. Sender reputation displayed as score (1-10).

Infomaniak Mail Sender setup in 5 steps

1. 01Create an Infomaniak account, choose hosting plan (Web Hosting Starter from CHF 6/month or Mail Sender Standalone CHF 9/month).
2. 02Add domain in Manager -- if DNS also at Infomaniak: SPF/DKIM records set automatically; otherwise manually set DNS records in Cloudflare as DNS-only.
3. 03Generate API token with scope `mail:send` in Manager under "User > API Tokens", store in .env (INFOMANIAK_TOKEN).
4. 04Set DMARC record manually, initially p=none for 14 days of observation, then move to quarantine.
5. 05Set up bounce webhook in Mail Sender notifications, verify HMAC signature, verify Mail-Tester.com 10/10, monitor sender reputation score in dashboard.

When Infomaniak fits

Infomaniak Mail Sender is the right choice when (a) professional secrecy per Art. 321 SCC is involved and data must not leave Switzerland, (b) hosting/DNS/mail should be bundled in a Swiss single-vendor contract, or (c) volume sits below 100,000 mails per month and Swiss contract law is decisive.

Concrete cases: A Zurich law firm with 200 client mails/day -- Infomaniak is the only provider that enables this without third-country transfer. A small fiduciary practice with hosting already at Infomaniak -- the Mail Sender is part of the package, an additional provider would be unnecessarily complex. A notary office with highly sensitive inheritance and tax files -- Infomaniak is the only mail solution that survives an audit without TIA.

For DACH setups: pick hosting at Infomaniak when registering the domain (DNS automatically correct). Generate API token in the Manager. SPF/DKIM via dashboard script. Newsletter service only for genuine bulk sends -- separate transactional and newsletter cleanly.

When not to use

Infomaniak Mail Sender is the wrong choice when (a) maximum deliverability is required (Postmark beats Infomaniak by 5-7 percentage points), (b) the team expects a modern TypeScript-first API (Resend is clearly better), or (c) volume exceeds 500,000 mails per month -- from there Amazon SES eu-central-2 or Mailgun-EU becomes clearly more economical.

More pitfalls: confusing the SMTP password with the account login password -- Infomaniak requires a dedicated mailbox password, not the Manager login. Generating an API token with too broad a scope -- assign only "mail:send" scope, not "admin:full". Pushing newsletter volume over the transactional stream -- IP reputation suffers, keep both separate. Forgetting to verify the DKIM selector -- mails land silently in spam at Gmail/Outlook without setup. SPF with `~all` instead of `-all` in production -- modern mail receivers accept both, but DMARC alignment checks require `-all` for strict validation.

Trade-offs

FAQ

Related topics

Sources

1. Infomaniak Mail Sender Pricing · 2026-05
2. Infomaniak Data Privacy and Swiss Hosting · 2026-04
3. Infomaniak Mail API Reference · 2026-03
4. EmailToolTester -- Swiss Email Providers 2026 · 2026-04