Skip to content
Independently verified · Quarterly re-audit
EU VETTED

rapidmail

VERIFIED
Email marketing · Germany
Founded 2008 · rapidmail.com ↗

Freiburg-based German email marketing tool hosting customer data exclusively in a Frankfurt ISO 27001 data centre, no public cloud.

In short

rapidmail, in the Email marketing category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Freiburg-based GmbH (Positive Group) hosting customer email data exclusively on a German data-centre campus in Frankfurt that holds ISO 27001 and PCI-DSS, with explicit avoidance of public hyperscaler clouds for customer data and SCC-protected US transfers limited to marketing-site analytics. EU-owned, EU-hosted on own infrastructure with no US hyperscaler dependency, and the only US transfers are marketing-site analytics that never touch customer mailing data, so under a customer-data-at-rest definition CLOUD Act exposure is none.

CLOUD ACT
OWNERSHIP
SUB-PROCS
2 · 0 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About rapidmail

rapidmail is a Freiburg-headquartered German email marketing platform operated by rapidmail GmbH (Positive Group Deutschland GmbH, Amtsgericht Freiburg HRB 706983), founded in 2008. It positions itself as a fully GDPR-compliant ESP for SMBs in DACH and is one of the cleanest "Made in Germany" data-residency stories in the email-marketing category: customer email data and subscriber lists are hosted exclusively in a Frankfurt data centre that holds ISO 27001 and PCI-DSS certifications, and the company explicitly avoids public hyperscaler clouds (no AWS, no GCP, no Azure) for product workloads.

The privacy policy (last updated May 2025) is transparent about marketing-site sub-processors (Google Analytics/Ads/reCAPTCHA, HubSpot, Hotjar, Mixpanel, LinkedIn Insight, Bing Ads, Matomo, Axeptio), but these touch the website and lead funnel rather than customer email data, and any US transfers are covered by Standard Contractual Clauses under Art. 46 GDPR. The data protection officer is Nils Möllers of Keyed GmbH, a German external DPO firm. Customer satisfaction signals are strong (97% across 2,600+ reviews), and OMR Reviews has ranked rapidmail as a category Leader.

The product is in German and English. Best fit: small and mid-sized German-speaking businesses, associations, and e-commerce shops who want a no-fuss, DSGVO-konformes Newsletter tool with an unambiguous "data stays in Germany" answer for procurement and a German-speaking support team. Limitations to verify before procurement-grade buying: SSO/SAML and audit-log capabilities are not advertised on the public pages reviewed, and the public DPA download URL was not directly resolvable at audit. DPA accessibility for non-enterprise tiers should be confirmed with the vendor.

SUB-PROCESSORS

Sub-processor map · 2

Source ↗
  • MEGASPACE Internet Service GmbH EU
    Germany

    Hosting of servers within Germany

  • uvensys GmbH EU
    Germany

    Hosting of servers within Germany

Zero US-incorporated sub-processors.
CERTIFICATIONS

Frameworks & certifications

ISO/IEC 27001
ACTIVE
FEATURES

Capability matrix

Automation Yes
Landing pages No
A/B testing Yes
Transactional email Yes
SMS marketing No
Built-in CRM Yes
Free tier No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    www.rapidmail.de/hilfe…
    Open ↗
  • Sub-processors list
    www.rapidmail.com/data-protection…
    Open ↗
  • Terms of Service
    www.rapidmail.com/general-terms-and-conditions…
    Open ↗
ALTERNATIVES

Alternatives in this category

Brevo
France · Founded 2012
EU-HOSTED

Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.

Public DPA Sub-processors Open source
FROM
€8/mo
CLOUD ACT
MATERIAL
CleverReach
Germany · Founded 2007
EU-HOSTED

German email marketing platform with EU-only customer data storage in Germany and a permanently free Lite tier.

Public DPA Sub-processors Open source
FROM
€15/mo
CLOUD ACT
MATERIAL
EmailOctopus
United Kingdom · Founded 2014
EU-HOSTED

London-based low-cost email marketing (Three Hearts Digital, 2014), generous free tier, indie-friendly, Amazon SES-backbone.

Public DPA Sub-processors Open source
FROM
€0/mo
CLOUD ACT
MATERIAL