Skip to content
CLOUD Act flagged on every listing
EU VETTED

Mailjet

VERIFIED
Email marketing · France
Founded 2010 · mailjet.com ↗

Paris-founded transactional and marketing email API, ISO 27001-certified, EU-only data centres, owned by Sweden-listed Sinch.

In short

Mailjet, in the Email marketing category, offers EU hosting with Germany as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

French SAS with EU-only data-centre claim, ISO 27001 (BSI), public DPA via parent Sinch (Sweden) and SCC-based transfers; the Sinch sub-processor list (verified 2026-06) shows Mailjet hosts on Google Cloud (a US-owned hyperscaler) alongside Atlassian, Zendesk, Stripe and Mailgun; a US-owned hyperscaler as the core host raises CLOUD Act exposure to material despite the EU data region and a public DPA.

CLOUD ACT
Ownership
Sub-procs
6 · 5 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
Jump to
Overview

About Mailjet

Mailjet is a Paris-founded email-delivery platform offering transactional and marketing email APIs, drag-and-drop newsletter design, segmentation, and a real-time collaboration editor. Founded in 2010 and acquired by Pathwire in 2019, Mailjet has been part of Sinch AB (publicly listed on Nasdaq Stockholm, Sweden) since 2021 and is now branded "Sinch Mailjet", though it retains its Paris team and product identity.

Mailjet was the first email service provider to obtain ISO 27001 certification (BSI, 2017) and AFAQ certification from AFNOR for GDPR adherence. The security page now names both the provider and the sites: customer data is stored "with Google Cloud Platform in Frankfurt (Germany) and Saint-Ghislain (Belgium)", with daily encrypted backups in geographically separated EU environments, and Sinch's own sub-processor page corroborates it by listing Google Cloud France SARL with data centres in Germany and Belgium for EU customers. The contracting entity remains French, but no customer data centre sits in France, and Google Cloud is US-owned, so the at-rest custodian is a US-owned hyperscaler inside an EU region: Material. Additional certifications/attestations referenced include SOC 2, PCI DSS, CSA STAR Level 1, HIPAA, and Certified Senders Alliance (CSA member since 2014). The Data Processing Agreement is published publicly on the parent Sinch domain and uses Standard Contractual Clauses for transatlantic transfers; the sub-processors page on the same domain resolves as well and carries six Mailjet-scoped rows, four of them US-owned, with Mailgun sitting in the intra-Sinch support and managed-services path rather than in the customer-sending backbone.

Pricing starts at US$9/month (Starter, 8,000 emails), roughly €8, with a free tier of 6,000 emails/month capped at 200/day. The affiliate program pays a relatively modest 15% per lead with a 30-day cookie, paid monthly via PayPal or bank transfer. Best fit: developer teams and marketers wanting a credible French email-API with ISO 27001 and an EU-only data-residency story, who can accept a Swedish-listed parent with global operations. Procurement decisions in regulated industries should weigh the Google Cloud dependency, which the vendor now names openly, against the EU-only residency commitment.

Sub-processors

Sub-processor map · 6

Source ↗
  • Atlassian Corporation US
    United States

    Support ticket tracking, incident management

  • Google Cloud France SARL US
    France

    Cloud datacenters (hosting/infrastructure)

  • Mailgun Technologies, Inc. US
    United States

    Intra-Sinch email support / managed services

  • Stripe Payments Europe, Limited US
    Ireland

    Billing and payment systems

  • Zendesk, Inc. US
    United States

    Customer support platform

  • Mailjet SAS EU
    France

    Customer support, deployment, managed services (Sinch group)

5 of 6 sub-processors are US-incorporated. CLOUD Act exposure applies.
Certifications

Frameworks & certifications

ISO/IEC 27001
ACTIVE
SOC 2
ACTIVE
Informational · US framework
Features

Capability matrix

Automation Yes
Landing pages Yes
A/B testing Yes
Transactional email Yes
SMS marketing No
Built-in CRM No
Dedicated IP Yes
Free tier Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
Pricing

Pricing & tiers

FREEMIUM
from €8/mo
View pricing page ↗
Public documents

Public documents

  • Data Processing Addendum (DPA)
    sinch.com/legal…
    Open ↗
  • Sub-processors list
    sinch.com/legal…
    Open ↗
  • Terms of Service
    www.mailjet.com/legal…
    Open ↗
Alternatives

Alternatives in this category

Brevo
France · Founded 2012
EU-HOSTED

Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.

Public DPA Sub-processors Open source
FROM
€8/mo
CLOUD ACT
MATERIAL
CleverReach
Germany · Founded 2007
EU-HOSTED

German email marketing platform with EU-only customer data storage in Germany and Ireland and a permanently free Lite tier.

Public DPA Sub-processors Open source
FROM
€15/mo
CLOUD ACT
MATERIAL
EmailOctopus
United Kingdom · Founded 2014
EU-HOSTED

London-based low-cost email marketing (Three Hearts Digital, 2014), generous free tier, indie-friendly, campaign sending via Bird's EU infrastructure.

Public DPA Sub-processors Open source
FROM
€0/mo
CLOUD ACT
MATERIAL