MailSenpai
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based This listing EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
Octotech Solutions (trading as MailSenpai), Via E. Dandolo 29, 76123 Andria (BT), Italy; VAT IT07964530724 (VIES holder: Matera Riccardo, Via Gabriele Manthonè 2, 76123 Andria)
Italian email marketing platform with its own SMTP relay (SMTP Senpai); public DPA, platform and relay on Hetzner in Finland.
MailSenpai is a European service hosted in Finland, with at most minor, transient US exposure under the CLOUD Act. It is listed under Email marketing.
Assessment notes
Italian founder-run operator (Octotech Solutions, Andria; the VAT number is held by a natural person, so a sole proprietorship) with a public Art. 28 DPA whose Appendix 3 lists the sub-processors, and DNS confirms the platform app, the SMTP Senpai relay and the mail servers all run on Hetzner Cloud in Helsinki without a proxy in front; the only US-owned processor in the DPA is Cloudflare, limited to the public website and support portal, and Stripe billing plus Google reCAPTCHA on the login page are transient, so exposure is minor and the score is 4, not 5, because Cloudflare remains in the chain and the hosting list names providers as 'EU' with an open-ended 'etc.' on the infrastructure page.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor This listing A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 4 · 1 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Not assessed
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: No
Jump to
About MailSenpai
MailSenpai is an email marketing platform run from Andria, Italy, by Octotech Solutions, sending since November 2016 with a team of about fifteen. It covers newsletters and campaigns, lists and segmentation, signup forms, subject-line A/B tests, scheduling, autoresponders triggered by campaign events and per-send statistics, with a drag-and-drop template builder from the Plus plan. The same account includes SMTP Senpai, a relay for transactional mail from websites and apps (order confirmations, password resets, form notifications) over SMTP on relay.mailsenpai.com or a REST API, plus plugins and an MCP server for AI assistants.
The hosting story is simpler than the documents make it look. MailSenpai's DPA names Aruba, Hetzner and Register as hosting providers, all in the EU, and DNS shows the platform app, the relay and the mail servers on Hetzner Cloud in Helsinki, Finland, reached directly rather than through a CDN. The one US-owned processor in the DPA is Cloudflare, and only for the public website and support portal. Payments go through Stripe and the login page uses Google reCAPTCHA; neither holds subscriber lists, so CLOUD Act exposure is minor. The DPA is public as Annex A to the terms, with the sub-processors in its Appendix 3; the Italian text prevails over the English one, and the courts of Trani have jurisdiction. No certifications are attested by MailSenpai itself.
Pricing is in euro, excluding VAT, and billed annually: Basic from €13.49/month for 10,000 emails, Plus from €89.49/month for 270,000 emails with a dedicated IP, and a custom Smart plan with add-ons for automation, API access, white label and dedicated instances. Subscribers are unlimited on every plan, and a 30-day demo allows 500 emails a day. SMTP Senpai has its own permanent free plan (5,000 emails a month, one domain) and paid relay plans from €12.90/month. Best fit: Italian and other EU SMBs, agencies and B2B senders who want campaigns and transactional mail from one EU vendor with a short, documented processor chain.
Sub-processor map · 4
-
Cloudflare, Inc. USUnited States
DNS, CDN and web proxy for the public website and support portal only; not in front of the platform app, APIs, tracking, SMTP relay or mail servers (DPA Appendix 3, confirmed by DNS 2026-10-27)
-
Aruba S.p.A. EUItaly
Servers hosting the services (listed as "Aruba, EU"; role not visible in DNS)
-
Hetzner Online GmbH EUGermany
Servers hosting the services; DNS places the platform app, SMTP Senpai relay and mail servers in Hetzner Cloud Helsinki (FI)
-
Register EUItaly
Servers hosting the services (listed as "Register, EU"; presumed Register S.p.A., Italy; role not visible in DNS)
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Cloudflare, Inc. | United States | DNS, CDN and web proxy for the public website and support portal only; not in front of the platform app, APIs, tracking, SMTP relay or mail servers (DPA Appendix 3, confirmed by DNS 2026-10-27) | US |
| Aruba S.p.A. | Italy | Servers hosting the services (listed as "Aruba, EU"; role not visible in DNS) | EU |
| Hetzner Online GmbH | Germany | Servers hosting the services; DNS places the platform app, SMTP Senpai relay and mail servers in Hetzner Cloud Helsinki (FI) | EU |
| Register | Italy | Servers hosting the services (listed as "Register, EU"; presumed Register S.p.A., Italy; role not visible in DNS) | EU |
Source: the vendor’s published sub-processor list, read 27 Oct 2026.
Frameworks & certifications · none listed
Held by the provider that operates the hosting, not by MailSenpai itself.
Capability matrix
Table 2Capabilities of MailSenpai
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
France · €8/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
Germany · €15/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
-
United Kingdom · €0/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: No -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
Brevo
France
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€8/mo |
CleverReach
Germany
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€15/mo |
EmailOctopus
United Kingdom
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: No
|
€0/mo |