Skip to content
CLOUD Act flagged on every listing
EU VETTED

Hyvor Post

VERIFIED

HYVOR EURL (single-member SARL), 10 rue de Penthièvre, 75008 Paris, France; SIREN 914 168 042, RCS Paris; created 2022-05-30; gérant Supun Wimalasena

Email marketing · France
Founded 2022 · hyvor.com/post ↗

French newsletter platform with no open or click tracking, hosted on Hetzner in Germany and sending through its own mail server instead of a third-party ESP.

In short

Hyvor Post, in the Email marketing category, is a European service with Germany as its hosting location and at most minor, transient US exposure under the CLOUD Act.

Assessment notes

HYVOR EURL (Paris, SIREN 914 168 042, founder-run, no outside funding on record) publishes a public DPA that names its own French legal entity under French law, and a named sub-processor list split into global and per-product sections. Subscriber lists and newsletter content sit on Hetzner in Germany, and newsletters leave through Hyvor Relay, HYVOR's own open-source mail server, whose published sending IPs all belong to Hetzner in Falkenstein, so no third-party email service provider handles the subscriber list. The US-owned processors are on the global list and sit outside that path: Cloudflare (DNS, CDN, DDoS protection and uploaded media storage), Mailgun (email, scope not stated), Sentry (error tracking) and Stripe (billing). Four US-owned processors hold the score at 3; none of them stores the subscriber list, so CLOUD Act exposure is minor rather than material.

CLOUD ACT
Ownership
Sub-procs
7 · 4 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
Jump to

About Hyvor Post

Hyvor Post is a newsletter platform from HYVOR, a small founder-run software company registered in Paris (HYVOR EURL, SIREN 914 168 042, created 2022) that also makes the Hyvor Talk comment system and the Hyvor Blogs publishing platform. Launched in November 2025, it covers the core newsletter workflow: a rich-text editor with Markdown support, several newsletters per account, an embeddable signup form with double opt-in, CSV import and export, subscriber metadata for segmentation, customizable email templates, unlimited team members, a console API, and a free archive site on its own subdomain where every issue is published.

Its defining choice is that it does not track readers. There is no open or click tracking and no setting that turns it on. The flip side is scope: there are no automation journeys, no A/B tests, no landing-page builder and no free plan, only a 14-day trial limited to test sends. Newsletters are delivered through Hyvor Relay, HYVOR's own AGPL-licensed email server, rather than through a third-party email service provider, and every sending IP in its SPF record belongs to Hetzner in Falkenstein, Germany.

The compliance paperwork is public: a downloadable DPA naming HYVOR EURL under French law, and a sub-processor page with global and per-product lists. Primary hosting is Hetzner in Germany. The US-owned processors are on the global list: Cloudflare in front of every HYVOR domain and for uploaded media storage, Mailgun for email whose scope the page does not state, Sentry for error tracking and Stripe for billing. None of them holds the subscriber list, so CLOUD Act exposure is minor rather than material. The source code is public under AGPL-3.0, but the vendor's own repository says it is not yet ready for self-hosting, so the hosted service is the only supported route for now.

Pricing is in euros with VAT included: €10 per month for 25,000 emails, higher volumes on a slider, and yearly billing with two months free. The Enterprise plan adds SAML single sign-on and a custom SLA. Best fit: writers, small publishers and organizations that want a plain, tracking-free newsletter on EU infrastructure and do not need marketing automation.

Sub-processor map · 7

Source ↗
  • Cloudflare, Inc. US
    United States

    DNS, CDN and DDoS protection in front of every HYVOR domain (all traffic in transit, including signup-form submissions), plus media storage for uploaded files. Bucket jurisdiction not stated. Always engaged.

  • Mailgun Technologies, Inc. US
    United States

    Email (listed globally as "Email" with no scope stated). Newsletters go through Hyvor Relay instead; mg.hyvor.com uses Mailgun's US region, most likely for account and system mail. US-incorporated; parent Sinch AB (SE).

  • Sentry US
    United States

    Application error tracking; stack traces and request context may incidentally include personal data.

  • Stripe US
    United States

    Payment processing for HYVOR subscriptions (billing data of the customer, not subscriber lists).

  • Crisp EU
    France

    Customer support chat.

  • Hetzner Online GmbH EU
    Germany

    Primary hosting: application servers and databases (subscriber lists, newsletter content). Also hosts the Hyvor Relay sending servers (Falkenstein). Always engaged.

  • Paddle.com Market Ltd non-US
    United Kingdom

    Merchant of record for legacy subscriptions only.

4 of 7 sub-processors are US-incorporated. Limited CLOUD Act exposure via these ancillary sub-processors.

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-10-02).
Certifications of the infrastructure it runs on

Held by the provider that operates the hosting, not by Hyvor Post itself.

ISO/IEC 27001

Capability matrix

Automation No
Landing pages No
A/B testing No
Transactional email No
SMS marketing No
Built-in CRM No
Dedicated IP No
Free tier No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No

Pricing & tiers

PAID
from €10/mo
View pricing page ↗

Public documents

  • Data Processing Addendum (DPA)
    hyvor.com/dpa.pdf…
    Open ↗
  • Sub-processors list
    hyvor.com/sub…
    Open ↗
  • Terms of Service
    hyvor.com/post…
    Open ↗

Alternatives in this category

Brevo
France · Founded 2012
EU-HOSTED

Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.

Public DPA Sub-processors Open source
FROM
€8/mo
CLOUD ACT
MATERIAL
CleverReach
Germany · Founded 2007
EU-HOSTED

German email marketing platform with EU-only customer data storage in Germany and Ireland and a permanently free Lite tier.

Public DPA Sub-processors Open source
FROM
€15/mo
CLOUD ACT
MATERIAL
EmailOctopus
United Kingdom · Founded 2014
EU-HOSTED

London-based low-cost email marketing (Three Hearts Digital, 2014), generous free tier, indie-friendly, campaign sending via Bird's EU infrastructure.

Public DPA Sub-processors Open source
FROM
€0/mo
CLOUD ACT
MATERIAL