14 / 16
12
🔒 Technology & data protection
-
Both tools take a privacy-friendly, European approach – a clear difference from US platforms. CryptPad goes one step further technically with end-to-end encryption: content is encrypted in the browser, so even the operator cannot read it. Edumaps is specialized for school use with German hosting, school data structures, and VIDIS approval.
-
Metric / feature Edumaps CryptPad Provider focus School / teaching / educational organizations General encrypted collaboration for privacy-conscious users and organizations Provider / headquarters EU-based operation, German market focus XWiki SAS, Paris, France End-to-end encryption (zero knowledge) – (server-side processing) ✔️ Yes, content encrypted client-side GDPR compliance ✔️ Yes (VIDIS approved) ✔️ Yes; provider also references BSI C5 for CryptPad Cloud Server / data location Germany France / EU (cryptpad.fr); own server location when self-hosting Advertising / tracking None None Registration without email address ✔️ Yes, via Single-Sign-Ons or account creation by admins ✔️ Yes Use without registration ✔️ Yes ✔️ Yes School-specific data structures (classes, roles) ✔️ Yes – Suitable for personal student data ✔️ Designed for school use Technically strong (E2E encryption); school suitability depends on instance and own review Security mechanisms ✔️ Content-Security-Policy
✔️ Strict-Transport-Security
✔️ X-Frame-Options
✔️ X-Content-Type-Options
✔️ Referrer-Policy
✔️ Permissions-Policy✔️ Content-Security-Policy
✔️ Strict-Transport-Security
⛔ X-Frame-Options
✔️ X-Content-Type-Options
✔️ Referrer-Policy
✔️ Permissions-Policy - The information on security mechanisms refers to publicly checkable HTTP security headers and may change depending on domain, app area, and date. You can check it, for example, with securityheaders.com: For Edumaps here. – For CryptPad here.
-
⚙ a12