Team communication services

Mattermost

Open source team communication you host yourself

Open sourceOpen sourceHigh non-EU dependency

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 10 non-European infrastructure or email dependencies across 9 providers: Adobe Marketo, Amazon SES, Cloudflare, Google, Mailchimp, Oracle NetSuite, Salesforce, Twilio SendGrid, Zendesk. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

Mattermost is an open source team communication service. It offers channels and messaging with apps for all the major platforms, and was designed with developer teams in mind, although it works just as well for any other kind of team. The whole thing can be self-hosted.

Mattermost is self-hosted open source software and is not necessarily European: the location of your data depends entirely on where you install it. Run it on a server in the EU and it becomes a European alternative to the American chat platforms. It suits engineering teams and organisations that need full control over their conversations.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Public website

Cloudflare

Non-European provider
Observed
A 104.18.1.109, 104.18.0.109 · AS13335

Why this matters

Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 10 smtp.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Google Workspace

Non-European provider
Observed
SPF _spf.google.com

Why this matters

This domain authorises Google Workspace to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Mailchimp

Non-European provider
Observed
SPF servers.mcsv.net

Why this matters

This domain authorises Mailchimp to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Zendesk

Non-European provider
Observed
SPF mail.zendesk.com

Why this matters

This domain authorises Zendesk to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Oracle NetSuite

Non-European provider
Observed
SPF mailsenders.netsuite.com

Why this matters

This domain authorises Oracle NetSuite to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Salesforce

Non-European provider
Observed
SPF _spf.salesforce.com

Why this matters

This domain authorises Salesforce to send email. If active, recipient details and message content can be processed by this US-controlled provider. SPF does not reveal its configured storage region and does not prove that all customer data is stored in the United States.

Authorised outbound email

Twilio SendGrid

Non-European provider
Observed
SPF sendgrid.net

Why this matters

This domain authorises Twilio SendGrid to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Adobe Marketo

Non-European provider
Observed
SPF mktomail.com

Why this matters

This domain authorises Adobe Marketo to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Amazon SES

US-controlled cloud
Observed
SPF amazonses.com

Why this matters

This domain authorises Amazon SES, infrastructure under US ultimate ownership, to send email. If active, recipient details and message content can be processed there. SPF does not prove active use, the selected AWS region, or use of the separately operated AWS European Sovereign Cloud.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in Team communication services

View all →