Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.
- FROM
- €8/mo
- CLOUD ACT
- MATERIAL
A single roll-up of ownership and CLOUD Act exposure.
London-based low-cost email marketing (Three Hearts Digital, 2014), generous free tier, indie-friendly, Amazon SES-backbone.
EmailOctopus, in the Email marketing category, offers EU hosting with United Kingdom as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.
Three Hearts Digital Ltd (London, 86-90 Paul Street, EC2A 4NE) operates EmailOctopus as a low-cost subscriber-based email marketing service with a generous free tier: GDPR-compliant, indie-friendly, and competitively priced ($480/year at 100k subscribers); but UK post-Brexit jurisdiction + no public certifications (ISO 27001 / SOC 2) + hosting provider not disclosed (AWS likely at this low-cost scale, given EmailOctopus's historical relationship with Amazon SES as the underlying delivery backbone). UK-incorporated (adequacy-covered) with material CLOUD Act exposure via presumed Amazon SES delivery dependency and no public sub-processors or DPA disclosure.
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Where ultimate control over the operating company sits.
EmailOctopus is the low-cost email-marketing service operated by Three Hearts Digital Ltd at 86-90 Paul Street, London EC2A 4NE, United Kingdom. The product targets indie creators, bloggers, small SMBs, and price-sensitive marketers who want a Mailchimp / MailerLite / ConvertKit alternative with a particularly generous free tier (free up to a meaningful subscriber count) and competitive paid pricing, for example approximately $480/year at 100,000 subscribers. The brand is well-known in the indie-hacker and content-creator community.
For an EU-sovereignty audit the listing has structural caveats. The operating entity is UK-incorporated post-Brexit (UK adequacy decision under Art. 45 GDPR keeps transfers EU↔UK legally clean), but EmailOctopus historically built its product as a thin layer on top of Amazon Simple Email Service (Amazon SES) for the actual mail delivery, a US-owned hyperscaler dependency for the core product workload. No public ISO 27001 / SOC 2 certifications, no named sub-processors page, and the hosting region for application data is not publicly disclosed. The brand is GDPR-compliant per the homepage, but procurement-grade buyers needing detailed transfer documentation should request the DPA directly.
Pricing in EUR / USD: free tier with no credit card required; paid tiers scale by subscriber count with monthly or annual billing (10% discount for annual). Best fit: indie creators, low-volume bloggers, small SMBs, and price-sensitive marketers who want a serviceable Mailchimp alternative and accept the UK + Amazon SES dependency. Procurement-grade EU buyers should choose CleverReach (DE) or rapidmail (DE) at SMB tier, or Maileon / Inxmail at enterprise.
Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.
German email marketing platform with EU-only customer data storage in Germany and a permanently free Lite tier.
Gdańsk-headquartered Polish email marketing and automation platform with webinars, landing pages, and a 350k+ customer base.