Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.
- FROM
- €8/mo
- CLOUD ACT
- MATERIAL
A single roll-up of ownership and CLOUD Act exposure.
Czech transactional email platform (SMTP relay and API) on its own physical infrastructure, no hyperscaler cloud for core sending.
Omnivery, in the Email marketing category, is a European service with Czechia as its hosting location and at most minor, transient US exposure under the CLOUD Act.
Czech s.r.o. running its core sending stack on its own physical infrastructure with EU-only data at rest (vendor-confirmed 2026-07-17, customer-selectable per-domain residency), a publicly readable Art. 28-compliant DPA with immediate message-content deletion, a public sub-processor list and TAYLLORCOX-issued ISO 27001/27017/27018/27701; the only US touchpoints are a sales-only subsidiary with no data access, marketing-site Google Analytics and an optional email-validation feature that is disabled by default, so exposure is minor rather than material, but the score is held at 4 rather than 5 because the specific EU data-centre country is not publicly named, a US data location is being set up, and the EU-only/opt-in facts rest on vendor statements not yet reflected in public documentation.
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
Where ultimate control over the operating company sits.
Omnivery is a transactional email platform (SMTP relay plus REST API) operated by Omnivery s.r.o. in Chrášťany near Prague, Czech Republic. The product is the 2021 relaunch of Mailkit, a Czech email-delivery vendor founded in 2006 by Jakub Olexa (still CEO), and it targets developers and businesses sending transactional and notification email who want an alternative to US-hosted senders such as SendGrid, Mailgun, Postmark, SparkPost and Bird.
Its central differentiator is genuine: unlike most of the category, Omnivery runs its core sending stack on its own physical infrastructure rather than AWS, Azure or Google Cloud, and states it never stores email content. The company holds a stack of ISO certifications issued by the Czech body TAYLLORCOX, including ISO 27001, 27017, 27018 and 27701 (a 7-certificate PDF is published on the site), plus HIPAA readiness and CSA / M3AAWG / Signal Spam memberships. The Data Processing Agreement, privacy policy and sub-processor list are all public and readable without a sales gate, which is a strong transparency signal for the category.
On sovereignty the picture largely holds up, with caveats worth knowing. The vendor confirms (July 2026) that the EU is currently its only data location, that data residency is customer-selectable per sending domain, and that storage can also be on-premise or dedicated to a single customer or domain. The US subsidiary, Omnivery US Inc. (Austin, Texas), is sales-only with no technical access to customer data, and the Google LLC entry in the privacy policy covers Google Analytics on the marketing site rather than the customer data path. The three US-owned sub-processors on the GDPR page (Amazon Web Services, Filestack and Kickbox) serve an optional email-validation feature that is disabled by default and warns before it is enabled, and the vendor says it will move to an EU validation provider. Two things to watch: a US data location is being set up, and the specific EU data-centre country is still not named publicly. Pricing is quote-based with no free tier and no self-serve signup, an intentional anti-abuse measure. Best fit: EU teams that want a non-hyperscaler transactional sender with public compliance docs and can accept enterprise, contact-sales onboarding.
E-mail validation (optional feature, disabled by default; processing in Ireland/EU region)
E-mail validation (optional feature, disabled by default)
E-mail validation (optional feature, disabled by default)
SMS delivery
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Amazon Web Services, Inc. | United States | E-mail validation (optional feature, disabled by default; processing in Ireland/EU region) | US |
| Filestack, Inc. | United States | E-mail validation (optional feature, disabled by default) | US |
| J2 Martech Corp DBA Kickbox | United States | E-mail validation (optional feature, disabled by default) | US |
| ProfiSMS s.r.o. | Czechia | SMS delivery | EU |
Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.
German email marketing platform with EU-only customer data storage in Germany and a permanently free Lite tier.
London-based low-cost email marketing (Three Hearts Digital, 2014), generous free tier, indie-friendly, Amazon SES-backbone.