* Will be robust in the face of legal threats / complaints.
* Comply with German privacy / data protection law.
I'm also interested in any resources useful to a new non-profit CTO.
Many thanks.
I'd go for a combination of these. Get your domain name with a trusted registrar and divide your servers/hosting. Especially the mail. The mail providers I posted offer encrypted mail.