AgentJ is a free anti-spam system for mail servers built around human verification: when an unknown sender writes for the first time, they receive a confirmation email to show they are not a machine. AgentJ also filters inbound and outbound mail for spam and viruses and limits the damage from compromised accounts. It runs as a Docker stack using components such as Postfix, SpamAssassin, ClamAV and OpenDKIM, with a web interface for administration, quotas, whitelists and statistics. It is delivered as server software that you install yourself.
AgentJ is a project of Probesys, a French cooperative company (SARL SCOP) in Grenoble, and is released under the AGPL-3.0; the source code is on GitHub. You can run it yourself, or have Probesys install it on your own servers with support. Probesys also offers a hosted instance which, according to its website, runs in Grenoble. When you self-host, your mail traffic stays on your own infrastructure.