Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Brevo

VERIFIED
Email marketing · France
Founded 2012 · brevo.com ↗

Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.

Why this score?

French SAS with ISO 27001:2022 and a publicly-attached DPA plus sub-processors annex inside the Terms of Use, but cloud workloads run on Google Cloud Platform in Belgium for primary at-rest storage plus Cloudflare and OpenAI sub-processors — material CLOUD Act exposure caps the score at 3/5.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
0 none disclosed
JUMP TO
OVERVIEW

About Brevo

Brevo (formerly Sendinblue) is a Paris-headquartered customer-engagement platform covering email marketing, transactional email, SMS, marketing automation, a built-in CRM, and chat. Founded in 2012 by Armand Thiberge as Sendinblue and rebranded as Brevo in May 2023, the company operates as a French SAS at 9–17 rue Salneuve, Paris, and reached unicorn status in December 2025 after a €500M round that brought General Atlantic (US) and Oakley Capital (UK) to a combined ~50% stake alongside Bpifrance, Bridgepoint, and management/employees. Infrastructure is split between EU on-premise data centers in France (primary) and Germany (additional capacity) and Google Cloud Platform with data stored exclusively in Belgium for cloud workloads — meaning customer data at rest sits with a US-owned cloud provider in an EU region. Brevo holds ISO 27001:2022 and publishes its DPA together with the sub-processors annex inside the General Terms of Use; this is a strong transparency signal but does not remove the GCP-borne CLOUD Act exposure or the use of Cloudflare and OpenAI as sub-processors. Pricing starts at roughly €8/month (Starter, 5,000 emails) with a free tier of 300 emails/day and unlimited contacts; the Brevo footer is shown on free and Starter plans. The affiliate program runs on PartnerStack with US$5 per free account and US$100 per paid account on a 90-day cookie. Best fit: SMBs and mid-market marketers in DACH and France who need a multi-channel platform with credible EU posture and a public DPA, and can accept GCP-EU as the cloud-hosting reality. Procurement teams with strict no-US-cloud requirements should look at Cleverreach, Inxmail, or rapidmail in this category.
SUB-PROCESSORS

Sub-processor map · none disclosed

Source ↗
Vendor discloses zero sub-processors. All data processing happens in-house.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

FREEMIUM
from €8/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    www.brevo.com/legal…
    Open ↗
  • Sub-processors list
    www.brevo.com/legal…
    Open ↗
  • Terms of Service
    www.brevo.com/legal…
    Open ↗
ALTERNATIVES

Alternatives in this category