Sovereign Email: How Riseup Builds Privacy-First Email Infrastructure

Email is the oldest internet communication protocol still in widespread use — and one of the least private. Standard email travels in plaintext, is stored indefinitely on servers, and is accessible to anyone with the right legal (or illegal) access. Riseup, the collective that has provided secure communication tools for activists and organizers since 1999, has launched a new sovereign email service that attempts to fix this. It's not just another encrypted email provider — it's an architectural approach to email that treats privacy as a foundational requirement, not an optional feature. What Makes Riseup Different Zero-Knowledge Architecture Riseup's new service uses end-to-end encryption with a zero-knowledge architecture: Server-side encryption — Emails are encrypted on the server before storage No plaintext access — Riseup cannot read your emails, even with a court order Client-side key management — Encryption keys never leave your device Automatic encryption — All emails between Riseup users are encrypted by default No Logging Unlike most email providers, Riseup maintains minimal logs: No IP address logging No metadata retention beyond what's required for delivery No behavioral tracking or analytics Automatic log rotation and deletion Sovereign Infrastructure Riseup operates its own infrastructure, independent of major cloud providers: Self-hosted email servers Independent DNS infrastructure No reliance on AWS, Google Cloud, or Microsoft Azure Physical servers in privacy-friendly jurisdictions How It Works For Riseup-to-Riseup Communication When you send an email to another Riseup user: Your email is encrypted with the recipient's public key The encrypted email is stored on Riseup's servers The recipient decrypts it with their private key No plaintext ever exists on the server For External Communication When you send to non-Riseup addresses: Your email is encrypted on Riseup's server Riseup decrypts it for delivery to the external provider The external provider stores it in their format You can request Riseup to encrypt outgoing mail with the recipient's PGP key if available Key Management Riseup uses a simplified key management system: Automatic key generation — Keys are created when you sign up Key rotation — Automatic rotation every 90 days Key verification — Visual verification of contacts' keys Backup options — Encrypted key backup to your device The Trade-offs Riseup's approach isn't without compromises: Availability No guaranteed uptime — As a collective, Riseup doesn't offer SLAs Limited support — Community-based support, not 24/7 help desks Smaller ecosystem — Fewer integrations than Gmail or Outlook Features No AI features — No smart compose, auto-categorization, or AI summaries Basic search — No full-text search across encrypted emails Limited storage — Generous for activists, but not unlimited Migration Import limitations — Can't easily import from Gmail/Outlook with full metadata Learning curve — Key management requires some technical understanding Who Should Use It Riseup's sovereign email is ideal for: Activists and organizers — People who need to protect communications from surveillance Journalists — Especially those covering sensitive topics or working with sources Privacy-conscious individuals — Anyone who wants email that respects their privacy Small organizations — Groups that need secure communication without enterprise budgets It's less ideal for: Enterprise users — Need SLAs, support, and integrations that Riseup doesn't provide Users who need AI features — No smart compose, categorization, or AI assistance High-volume users — Storage and feature limitations may be restrictive Getting Started Sign up at riseup.net with a new account Configure your client — Riseup supports standard IMAP/SMTP with encryption Import your contacts — Add your existing contacts to Riseup Encourage others to join — The more users Riseup has, the more encrypted communication happens automatically Set up key verification — Verify keys with your most important contacts The Bigger Picture Riseup's sovereign email represents a broader trend: the development of privacy-first infrastructure that operates independently of major tech companies. This isn't just about email — it's about building communication systems that can't be compromised by corporate interests or government surveillance. As regulations like the EU's Chat Control proposal and the UK's Online Safety Act threaten end-to-end encryption, services like Riseup become more important. They demonstrate that privacy-respecting communication is technically feasible and practically usable. The future of email is encrypted, sovereign, and user-controlled. Riseup is showing us what that future looks like. --- Want to check if your email setup is secure? Try our Email Header Analysis tool to see what metadata your emails expose.