European-only alternative to Amazon WorkMail.

Amazon WorkMail is being shut down. AWS has announced the end of support for 31 March 2027, and after that date the service can no longer be used. If you have to move anyway, this is the moment to move to a provider under European law. Binadit Workspace hosts mail, calendar and contacts in the Netherlands, with files, documents, meetings and scheduling under the same login.

United States EU-only replacement stack 7 services mapped
Provider
Amazon WorkMail
Headquarters
Seattle, WA
Jurisdiction
United States
Legal regime
CLOUD Act, FISA 702

"EU region" is not sovereignty. Four questions decide it.

Data residency tells you where the bits sit. Sovereignty tells you which legal system can compel access. The answer must hold on all four - or the stack is not sovereign.

Residency

Where is the data physically stored?

Not "in the cloud" - which datacenter, in which country, under which jurisdiction.

Subprocessors

Who else is in your data path?

Every vendor that touches the data: the CDN, the email relay, the error tracker, the analytics pipe.

Jurisdiction

Whose laws can compel disclosure?

A US-headquartered provider falls under FISA 702 and the CLOUD Act - even when the bits sit in Frankfurt.

Key custody

Who actually holds the encryption keys?

If the cloud provider holds both the data and the keys, the data is readable by them - regardless of any DPA.

Fails AWS · Azure · GCP · EU region

Fails on jurisdiction and key custody.

EU bits, US-headquartered parent, US subprocessors in the default path, provider-managed keys.

Passes Binadit managed stack

Passes on all four.

EU-hosted on EU-headquartered infrastructure. Zero US subprocessors in the default path. Customer-held or EU-KMS keys. Listed by name in your Article 28 DPA.

Why teams are exiting Amazon WorkMail

The first reason is the date: AWS ends support for Amazon WorkMail on 31 March 2027 and stopped accepting new customers on 30 April 2026. The second is the one that was always there. Amazon WorkMail is a service of Amazon Web Services, a US company, so using it is a transfer of personal data to the United States. That is lawful today on the strength of the EU-US Data Privacy Framework or of standard contractual clauses, and both lean on the same question: whether US law protects the data of Europeans well enough. The Court of Justice of the EU has answered no twice, and an appeal against the current framework is pending there. Separately, the US CLOUD Act obliges a US provider to produce data under its control wherever it is stored, so a European data region does not settle it. With Binadit Workspace there is no transfer to a third country, so there is nothing to monitor.

Amazon WorkMail, and what replaces it in Binadit Workspace

A mailbox is a mailbox: what matters is who runs it and under which law. Binadit Workspace gives you the mailbox, and the rest of the working day under the same login.

Mailboxes on your own domain

What we run instead
A Binadit Workspace mailbox with calendar and contacts, on your own domain.
Engineering note
Your addresses stay the same. Only the MX records change.

Webmail

What we run instead
The Binadit webmail, in 27 languages.
Engineering note
Mail, calendar and contacts in the browser, with the same login as the rest of Workspace.

Mail on computers and phones

What we run instead
Any mail program, through IMAP, SMTP, CalDAV and CardDAV, and JMAP where the program supports it. Or Northmail, our own free mail program for macOS and Windows.
Engineering note
Outlook, Apple Mail, Thunderbird and the mail app on a phone connect through standard protocols.

Shared addresses such as info@ and sales@

What we run instead
Shared mailboxes, with permissions per colleague.
Engineering note
You create them in the portal, or we do it for you.

Account and sender security

What we run instead
Two-step verification, and SPF, DKIM and DMARC prepared per domain.
Engineering note
If your domain or its DNS is with Binadit, the records are placed for you.

WorkMail organisation, users and aliases

What we run instead
Mailboxes, shared mailboxes and aliases in the Binadit portal.
Engineering note
You create them in the portal, or we do it for you.

Europe (Ireland) region

What we run instead
Servers in the Netherlands, operated by Binadit itself.
Engineering note
A region decides where the data is stored. It does not decide which law the provider answers to.

How we migrate off Amazon WorkMail

We migrate your existing mailboxes, calendars and contacts from Amazon WorkMail, historic mail included, and we run both environments side by side until you switch DNS.

  1. Before the move

    We map what you have

    Mailboxes, aliases, shared mailboxes, calendars, contact lists, shared folders and who has access to what. You get a fixed migration price and a date.

  2. Side by side

    Both environments run at the same time

    We copy mail, calendars, contacts and files to the new environment, historic mail included, while everybody keeps working in the old one. Nothing is switched off and nothing is lost if we need another pass.

  3. Switch day

    DNS moves, and with it the mail

    We change the MX records, new mail arrives in the Netherlands from that moment, and a final sync picks up whatever came in during the switch. No downtime, no lost mail.

Binadit Workspace is quoted per company, because the number of mailboxes, the storage and a possible server of your own differ each time. Ask for a demo and you get a quote with it.

Frequently asked questions

View all frequently asked questions

Is Amazon WorkMail GDPR-compliant?
It can be used lawfully today. Amazon WorkMail is run by a US company, so using it is a transfer of personal data to the United States, which rests on the EU-US Data Privacy Framework or on standard contractual clauses. That is as durable as those instruments: the Court of Justice of the EU struck down both earlier frameworks, and an appeal against the current one is pending there. Where the data is stored does not change which law the provider answers to.
When do we have to be out of Amazon WorkMail?
AWS ends support on 31 March 2027, and after that date the service can no longer be used. A mail migration runs side by side with the old environment, so start early enough to choose your own switch day.
Do our email addresses change?
No. The addresses are on your domain, and your domain is yours. We change where the MX records point; everybody keeps the address they have.
What happens to our old mail?
It comes along. We copy historic mail, calendars and contacts to the new environment while the old one keeps running, and we do a final sync after the DNS switch.
Is Binadit Workspace only this one product?
No. One login covers mail, calendar and contacts, Drive for your files, Receive for getting files from outsiders safely, Office for documents in the browser, Meet for video meetings and Book for appointments. Everything runs on servers in the Netherlands that Binadit operates itself.
What does Binadit Workspace cost?
Binadit Workspace is quoted per company, because the number of mailboxes, the storage and a possible server of your own differ each time. Ask for a demo and you get a quote with it.
Is Binadit ISO 27001 or NEN 7510 certified?
The data centre we host in is ISO 27001 and NEN 7510 certified. Binadit itself, as a company, does not hold these certifications. If your own certification requires a certified supplier rather than a certified data centre, tell us before you decide, so you can check that with your auditor first.

Plan your exit from Amazon WorkMail.

30-minute scoping call. We map your stack against EU-only alternatives, estimate the migration effort, and tell you whether it is the right call.