On March 7, 2024, Google inexplicably downranked the website of Tuta Mail in its search results. While Tuta Mail is a prominent provider of encrypted email services, focusing on security and privacy, our website was deranked for terms like “secure email” and “encrypted email” completely. The search results for our website was limited exclusively to so called “branded” search terms, e.g. search terms that included our brand name like Tuta, Tutanota, or Tutamail. In consequence, only people who already knew that Tuta existed were able to find our website via Google Search – any new potential customers were not able to find our encrypted email solution.

Faced with this immense problem with Google Search and a drop in visibility of the Tuta website by ~90% in Google’s search results, we tried to get in touch with Google, both through official channels and on social media, but in vain. So on April 24, we submitted a formal complaint to the EU so that the EU could investigate whether Google’s actions in downranking a direct competitor violates the newly issued Digital Markets Act (DMA). We welcome the fact that the EU has already started an investigation against Google, Apple, and Meta in regards to whether these big tech companies are sufficiently complying with the DMA regulation. Not being legal experts here, but what Google has been doing to our website and what Apple is doing with their new App store policy for app developers, seem like obvious examples of malicious compliance.