Microsoft Exchange Online (EXO)
This page is only available in English.
The following list shows all approved and requested mail apps for Exchange Online.
The permissions and privacy policies of each requested mail app are checked. If app permissions are too extensive or data is not handled in accordance with ETH guidelines due to the privacy policy, the Cloud Service Center reserves the right not to approve mail apps.
Mail apps are generally approved, i.e., there is no self-registration.
Oops, it seems that you need to place a table or a macro generating a table within the Table Filter macro.
The table is being loaded. Please wait for a bit ...
Mail-App | Initial Requester | Approver / Rejecter | Status | Supported by ID | Permissions | Date | Notes | Link to Privacy Policy | App-ID |
|---|---|---|---|---|---|---|---|---|---|
| FastMail | OPEN |
| IMAP.AccessAsUser.All |
| Datenstandort: Fastmail betreibt seine Server ausschliesslich in Australien (Sydney, Melbourne). Kein Angemessenheitsbeschluss: Fehlende Standardvertragsklauseln für EU/CH-Transfers: Unklare Drittlandübermittlungen: |
| |||
| HEY | APPROVED |
| Delegated permissions: offline_access Mail.Send |
| We are compliant with GDPR and you can check out all the details here: https://basecamp.com/about/policies/privacy. | ||||
| Thunderbird Android | many | APPROVED |
| IMAP.AccessAsUser.All SMTP.Send offline_access |
| Approved, as these are delegated permissions and refer to the same privacy policy as the Thunderbird app for desktop. | e6f8716e-299d-4ed9-bbf3-453f192f44e5 | ||
| Thunderbird with Owl | APPROVED |
| offline_access EWS.AccessAsUser.All |
| Thunderbird Add-On | Gebaut wird das Plugin von Beonex in D: https://www.beonex.com/owl/ Datenschutzerklärung: https://www.beonex.com/owl/privacy | d7fd83df-b1e8-40fa-a2fe-d23c44baa758 | ||
Fantastical (Flexibits) | APPROVED |
| offline_access openid profile Calendars.ReadWrite Calendars.ReadWrite.Shared Tasks.ReadWrite Tasks.ReadWrite.Shared User.ReadBasic.All User.Read People.Read MailboxSettings.Read EWS.AccessAsUser.All |
| Mac Client | https://flexibits.com/privacy/faq | |||
K-9 | APPROVED |
| IMAP.AccessAsUser.All SMTP.Send offline_access |
| Android mail client (developed by Mozilla Thunderbird) | https://k9mail.app/privacy.html | |||
Microsoft Outlook | n.a. | n.a. | APPROVED |
| MS Outlook is enabled by default. | ||||
Thunderbird (Mozillla) | APPROVED |
| offline_access SMTP.Send IMAP.AccessAsUser.All POP.AccessAsUser.All |
| Good IMAP client available on all OS'es | https://www.mozilla.org/en-US/privacy/ |
| ||
Apple Internet Accounts (Apple) | APPROVED |
| offline_access openId EWS.AccessAsUser.All EAS.AccessAsUser.All |
| To access EXO with iOS devices, this application must be approved. Most common mail client at ETHZ. Used in MacMail and iOS Mail |
| |||
GNOME Evolution (Gnome) | APPROVED |
| offline_access Calenders & Contacts Mailbox & Mail Tasks EWS.AccessAsUser.All User.Read User.ReadBasic.All |
Last update on | Only Linux client with full calendar integration! Linux Mail Client released Evolution requires a lot of permissions. One critical example is “Calendars.ReadWrite,” which potentially allows access to all calendars. Statement from documentation (Microsoft Graph permissions reference): Administrators can configure application access policy to limit app access to specific mailboxes and not to all the mailboxes in the organization, even if the app has been granted the Calendars.ReadWrite application permission. This means that EXO must ensure that Evolution cannot view all calendars! Last update: User.Read & User.ReadBasic.All have been added. These permissions are necessary for shared mailboxes. |
| |||
APPROVED |
| EWS.AccessAsUser.All |
| ||||||
APPROVED |
| offline_access SMTP.Send IMAP.AccessAsUser.All | This page is wrong formatted. | ||||||
Gmail (Google) | APPROVED |
| offline_access EAS.AccessAsUser.All |
| Common mail client on Android devices | ||||
Samsung Email (Samsung) | i.A. Buschor Mark (ID) | APPROVED |
| offline_access openid profile EWS.AccessAsUser.All Calendars.ReadWrite |
| Standard mail client on Samsung Android devices. Usage couldn't be identified based on existing Exchange-Logs. There are many requests, but all these people are not yet migrated to cloud | |||
APPROVED |
| offline_access SMTP.Send IMAP.AccessAsUser.All POP.AccessAsUser.All |
| Mutt is a small but very powerful text-based mail client for Unix operating systems | Can't find privacy policy. (Aires: because, it runs locally on the PC) |
| |||
Provider for Exchange ActiveSync for Office 365 | Crespo de la Serna Felix (ID) Simic Dragan (ID) | APPROVED |
| EAS.AccessAsUser.All |
| Is mentioned here: | No Privacy Policy, but URL to GitHub: https://github.com/jobisoft/EAS-4-TbSync/wiki/About:-Provider-for-Exchange-ActiveSync | 2980deeb-7460-4723-864a-f9b0f10cd992 | |
BlueMail (Blix Inc.) | n.a. | BLOCKED |
| User.Read |
| Requires manage exchange configuration API right | |||
n.a. | BLOCKED |
|
| Known data kraken from China (TikTok Publisher) | https://play.google.com/store/apps/datasafety?id=com.tencent.androidqqmail&hl=en_US | ||||
LGEmail | n.a. | BLOCKED |
| .default |
| Can't find official Homepage | Can't find privacy policy. | 66327e7a-d195-41bd-9628-6a0ee1bc3c06 | |
Spark Mail (Spark Mail Limited) | n.a. | APPROVED | offline_access |
| |||||
Canary Mail (CanaryMail) | BLOCKED |
| EWS.AccessAsUser.All |
| No information about the data location found, therefore not approved. How we transfer information we collect internationally The information we collect is stored on our servers in Germany. Germany has been recognized by the European Commission as offering and an adequate level of data protection such that personal data can flow from the EU to that country without any need for further safeguards. Some of the third parties described in this privacy policy, which provide services to us under contract, are based in other countries that may not have equivalent privacy and data protection laws to the country in which you reside. By using our Services, you consent to any transfer and processing in accordance with this policy. Whenever we transfer your information, we take steps to protect it." | ||||
OPEN | .default | Can't find privacy policy. | facd6cff-a294-4415-b59f-c5b01937d7bd | ||||||
OPEN | mail.send openid offline_access | https://www.emailjs.com/legal/privacy-policy/#data-collection https://www.emailjs.com/legal/privacy-policy/#data-subprocessors | 76a1856d-bcdd-40a8-b482-c3010de1d2c1 | ||||||
BLOCK |
| openid offline_access IMAP.AccessAsUser.All POP.AccessAsUser.All SMTP.Send |
| Data Location of Personal Information process is in the US:
| c40fc214-9304-4d8b-83e7-d29db7798e35 | ||||
Carreira e Marques Aires Manuel (ID) | BLOCK | EWS.AccessAsUser.All offline_access profile openid |
| Data Location of Personal Information process is in the US: z | 62db40a4-2c7e-4373-a609-eda138798962 | ||||
OPEN | offline_access openid IMAP.AccessAsUser.All SMTP.Send | be975a90-8235-4503-afe3-88ccb690750f | |||||||
OPEN | profile openid offline_access IMAP.AccessAsUser.All SMTP.Send POP.AccessAsUser.All | 17e57eca-a59b-4574-ac91-b343004898a6 | |||||||
OPEN | IMAP.AccessAsUser.All SMTP.Send openid profile offline_access | https://intrepidcorp.co.uk/mailappforoutlook//privacypolicy.html | 11680cd6-7ad2-44de-bb9f-665024d48a72 | ||||||
BLOCKED |
| user.read offline_access Contacts.ReadWrite Contacts.ReadWrite.Shared Calendars.ReadWrite Calendars.ReadWrite.Shared IMAP.AccessAsUser.All SMTP.Send |
| Data Location of Personal Information process is in the US:
| 8787a430-6eee-41e1-b914-681d90d35625 | ||||
BLOCKED | offline_access openid profile IMAP.AccessAsUser.All SMTP.Send POP.AccessAsUser.All EAS.AccessAsUser.All EWS.AccessAsUser.All | Company behind Foxmail is Tencent.
| https://www.foxmail.com/win/en/privacy_policy.html https://www.foxmail.com/win/en/privacy_policy.html#infocollect | 231575bc-9f6c-4539-9241-5cfae696b630 | |||||
BusyCal | APPROVED |
| EWS.AccessAsUser.All Calendars.ReadWrite Tasks.ReadWrite Tasks.ReadWrite.Shared User.Read People.Read MailboxSettings.Read Calendars.ReadWrite.Shared User.ReadBasic.All openid profile offline_access |
| Using our software enables you and your organization to meet GDPR regulatory requirements. Any data entered into our apps, including Personally Identifiable Information (PII) or Protected Health Information (PHI), is never transferred, saved, or stored on our servers. All data remains on your device or with the third-party services you choose to sync with (such as iCloud, Google, Microsoft Office etc.) ensuring your information stays under your control at all times. | 885773d6-1859-4189-9b95-b9128fe95ae1 | |||
BusyContacts | APPROVED |
| Contacts.ReadWrite |
|
Our apps are designed to align with various global privacy and security regulations. While we do not process, store, or transmit user data on our servers, we follow best practices that support compliance with:
| b32508e6-e213-4601-a59e-a62413a700b6 | |||
Superhuman | OPEN |
| |||||||
Claws Mail | APPROVED |
| offline_access |
| https://www.claws-mail.org/faq/index.php/Oauth2#Setting_up_OAuth_2.0_for_Microsoft_-_for_Outlook_or_Exchange | https://lists.claws-mail.org/pipermail/users/2024-September/033312.html | |||
MailMate | APPROVED |
| IMAP.AccessAsUser.All SMTP.Send offline_access |
| 1 user requested so far 2024-10-31 - Aires - Privacy policy is ok | 2316c52f-c664-4efb-93c2-830b1ba5f128 | |||
TypeApp | Professor Andreas Hierlemann | Carreira e Marques Aires Manuel (ID) | BLOCKED |
|
|
| |||
SailfishOS Mail | APPROVED |
| offline_access |
| |||||
Full Fabric | APPROVED | IMAP.AccessAsUser.All offline_access |
| Approved by CISO | |||||
Calendly |
| APPROVED |
| openid |
| The data would be stored in the US. https://calendly.com/legal/privacy-notice. Clarifying with CISO | |||
| Carreira e Marques Aires Manuel (ID) | APPROVED | Sync all calendars | ||||||
BLOCKED | Data location in Israel | ||||||||
Calendar Bridge |
| BLOCKED | Data location in the US | ||||||
Huawei Email App | Carreira e Marques Aires Manuel (ID) | BLOCKED |
| Data location in China
| |||||
WeekCal | REJECTED It could be reviewed again as the cloud app provider us SCCs. |
|
| Data maybe transferred outside of Europe. Updated: Using SCCs VII. International Transfer We may transfer your Personal Information outside the European Union/European Economic Area. Whenever we transfer your Personal Information out of the EU/EEA, we ensure an adequate level of protection is afforded to it by ensuring, where required by law, at least one of the following safeguards is implemented:
| https://maplemedia.io/privacy/ | ||||
Postbox | APPROVED |
| Delegated Permissions: IMAP.AccessAsUser.All POP.AccessAsUser.All SMTP.Send offline_access |
| Postbox fka "em Client" | 3f22d358-8176-496b-9559-8c8e1101fbca | |||
Em Client | Carreira e Marques Aires Manuel (ID) | APPROVED |
| ||||||
Kontact | Carreira e Marques Aires Manuel (ID) | APPROVED |
| The privacy policy states that sensitive information such as user names, passwords, and personal information (including events, contacts, emails, etc.) obtained from remote services is stored locally on the user's computer. | |||||
Mailbird | REJECTED |
| 13. INTERNATIONAL DATA TRANSFER Your information, including personal data that we collect from you, may be transferred to, stored at and processed by us and our affiliates and other third parties outside the country in which you reside, including, but not limited to the United States, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. By using our Services, you agree to this transfer, storing or processing.] We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Policy. 21. EU-U.S. PRIVACY SHIELD Mailbird Inc. commits to cooperate with the panel established by the EU data protection authorities (DPAs) and comply with the advice given by the panel with regard to personal data transferred from the EU. Please contact us to be directed to the relevant DPA contacts. As further explained in the Privacy Shield Principles, binding arbitration before a Privacy Shield Panel will also be made available to you in order to address residual complaints not resolved by any other means. Mailbird Inc. is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission. |
