Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Omnivery

VERIFIED
Email marketing · Czechia
Founded 2006 · omnivery.com ↗

Czech transactional email platform (SMTP relay and API) on its own physical infrastructure, no hyperscaler cloud for core sending.

In short

Omnivery, in the Email marketing category, is a European service with Czechia as its hosting location and at most minor, transient US exposure under the CLOUD Act.

Assessment notes

Czech s.r.o. running its core sending stack on its own physical infrastructure with EU-only data at rest (vendor-confirmed 2026-07-17, customer-selectable per-domain residency), a publicly readable Art. 28-compliant DPA with immediate message-content deletion, a public sub-processor list and TAYLLORCOX-issued ISO 27001/27017/27018/27701; the only US touchpoints are a sales-only subsidiary with no data access, marketing-site Google Analytics and an optional email-validation feature that is disabled by default, so exposure is minor rather than material, but the score is held at 4 rather than 5 because the specific EU data-centre country is not publicly named, a US data location is being set up, and the EU-only/opt-in facts rest on vendor statements not yet reflected in public documentation.

CLOUD ACT
OWNERSHIP
SUB-PROCS
4 · 3 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Omnivery

Omnivery is a transactional email platform (SMTP relay plus REST API) operated by Omnivery s.r.o. in Chrášťany near Prague, Czech Republic. The product is the 2021 relaunch of Mailkit, a Czech email-delivery vendor founded in 2006 by Jakub Olexa (still CEO), and it targets developers and businesses sending transactional and notification email who want an alternative to US-hosted senders such as SendGrid, Mailgun, Postmark, SparkPost and Bird.

Its central differentiator is genuine: unlike most of the category, Omnivery runs its core sending stack on its own physical infrastructure rather than AWS, Azure or Google Cloud, and states it never stores email content. The company holds a stack of ISO certifications issued by the Czech body TAYLLORCOX, including ISO 27001, 27017, 27018 and 27701 (a 7-certificate PDF is published on the site), plus HIPAA readiness and CSA / M3AAWG / Signal Spam memberships. The Data Processing Agreement, privacy policy and sub-processor list are all public and readable without a sales gate, which is a strong transparency signal for the category.

On sovereignty the picture largely holds up, with caveats worth knowing. The vendor confirms (July 2026) that the EU is currently its only data location, that data residency is customer-selectable per sending domain, and that storage can also be on-premise or dedicated to a single customer or domain. The US subsidiary, Omnivery US Inc. (Austin, Texas), is sales-only with no technical access to customer data, and the Google LLC entry in the privacy policy covers Google Analytics on the marketing site rather than the customer data path. The three US-owned sub-processors on the GDPR page (Amazon Web Services, Filestack and Kickbox) serve an optional email-validation feature that is disabled by default and warns before it is enabled, and the vendor says it will move to an EU validation provider. Two things to watch: a US data location is being set up, and the specific EU data-centre country is still not named publicly. Pricing is quote-based with no free tier and no self-serve signup, an intentional anti-abuse measure. Best fit: EU teams that want a non-hyperscaler transactional sender with public compliance docs and can accept enterprise, contact-sales onboarding.

SUB-PROCESSORS

Sub-processor map · 4

Source ↗
  • Amazon Web Services, Inc. US
    United States

    E-mail validation (optional feature, disabled by default; processing in Ireland/EU region)

  • Filestack, Inc. US
    United States

    E-mail validation (optional feature, disabled by default)

  • J2 Martech Corp DBA Kickbox US
    United States

    E-mail validation (optional feature, disabled by default)

  • ProfiSMS s.r.o. EU
    Czechia

    SMS delivery

3 of 4 sub-processors are US-incorporated. Limited CLOUD Act exposure via these ancillary sub-processors.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
ISO/IEC 27017
ACTIVE
ISO/IEC 27018
ACTIVE
ISO27701
ACTIVE
FEATURES

Capability matrix

Automation No
Landing pages No
A/B testing No
Transactional email Yes
SMS marketing Yes
Built-in CRM No
Dedicated IP Yes
Free tier No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) Yes
COMPLIANCE & GOVERNANCE
Audit log Yes
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    omnivery.com/legal…
    Open ↗
  • Sub-processors list
    omnivery.com/legal…
    Open ↗
  • Terms of Service
    omnivery.com/legal…
    Open ↗
ALTERNATIVES

Alternatives in this category

Brevo
France · Founded 2012
EU-HOSTED

Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.

Public DPA Sub-processors Open source
FROM
€8/mo
CLOUD ACT
MATERIAL
CleverReach
Germany · Founded 2007
EU-HOSTED

German email marketing platform with EU-only customer data storage in Germany and a permanently free Lite tier.

Public DPA Sub-processors Open source
FROM
€15/mo
CLOUD ACT
MATERIAL
EmailOctopus
United Kingdom · Founded 2014
EU-HOSTED

London-based low-cost email marketing (Three Hearts Digital, 2014), generous free tier, indie-friendly, Amazon SES-backbone.

Public DPA Sub-processors Open source
FROM
€0/mo
CLOUD ACT
MATERIAL