Skip to content
Independently verified · Quarterly re-audit
EU VETTED

GetResponse

VERIFIED
Email marketing · Poland
Founded 1998 · getresponse.com ↗

Gdańsk-headquartered Polish email marketing and automation platform with webinars, landing pages, and a 350k+ customer base.

Why this score?

Polish S.A. headquartered in Gdańsk with privacy policy referencing EEA-primary processing and SCC + DPF for US transfers, but no publicly accessible DPA or named sub-processors list (privacy policy describes only sub-processor categories — Google services, webinar support, payment processors) caps the score at 3/5.

SCORE
3.0/5
CLOUD ACT
OWNERSHIP
SUB-PROCS
not disclosed
JUMP TO
OVERVIEW

About GetResponse

GetResponse is a Polish email marketing and automation platform headquartered in Gdańsk, founded in 1998 and operating as the joint-stock company GetResponse S.A. (KRS 0000942075, ul. Grunwaldzka 413, 80-309 Gdańsk) with VAT ID 9581468984. The company converted to a joint-stock structure in 2022 and is held by founders, employees (via ESOP), and earlier investors rather than publicly traded on the Warsaw Stock Exchange. With more than 350,000 customers worldwide, GetResponse is one of the largest EU-headquartered email marketing platforms. The product spans email marketing, marketing automation, landing pages, conversion funnels, paid ads, push notifications, and webinars — making it a broader Mailchimp/ConvertKit alternative for SMB and mid-market customers who also want webinar functionality. Security disclosures on the trust page cite PCI-DSS certification, GDPR compliance, TLS 1.2+ in transit, AES-256 at rest, role-based access control, MFA enforcement, and 24/7 SOC monitoring; ISO 27001, SOC 2, EUCS, and C5 are not advertised on the public security page. The privacy policy (effective 17 Mar 2026) refers to processing "mainly in the European Economic Area" but does not name the underlying hosting provider or list individual sub-processors — only categories such as Google services for analytics/advertising (DPF-covered), webinar support, customer support, and payment processors. Pricing in EUR is straightforward: Starter at €16/month (€13.12 with annual billing), with a free tier available after a 14-day premium trial that is heavily restricted (1,000 landing-page visitors/month, 10-person webinar cap, GetResponse branding on outbound mail). The product UI supports nine languages including PL, EN, DE, FR, ES, IT, PT, plus VN and RU. Best fit: SMB and mid-market marketers in Central and Eastern Europe wanting a Polish-headquartered all-in-one platform with strong language coverage. Procurement-grade buyers should request the DPA and a named sub-processors list directly, since neither is publicly indexed at audit time — this is the main reason the compliance score caps at 3/5 today.
SUB-PROCESSORS

Sub-processor map · not disclosed

Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-10).
FEATURES

Capability matrix

INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

FREEMIUM
from €16/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

Vendor does not publish a public DPA. Without a publicly accessible Data Processing Addendum, small EU customers cannot self-serve the processor agreement — this caps the compliance score (see How we score).
Vendor does not publish a sub-processors list. Schrems II compliance and CLOUD Act exposure cannot be independently verified without it.
  • Data Processing Addendum (DPA)
    — missing
    missing
  • Sub-processors list
    — missing
    missing
  • Terms of Service
    www.getresponse.com/legal…
    Open ↗
ALTERNATIVES

Alternatives in this category