Skip to content
CLOUD Act flagged on every listing
EU VETTED

rapidmail

VERIFIED
Email marketing · Germany
Founded 2008 · rapidmail.com ↗

Freiburg-based German email marketing tool hosting customer data exclusively on German servers, no public-cloud hyperscaler.

In short

rapidmail, in the Email marketing category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Freiburg-based GmbH (Positive Group) hosting customer email data exclusively on a German data-centre campus in Frankfurt that holds ISO 27001 and PCI-DSS, with explicit avoidance of public hyperscaler clouds for customer data and SCC-protected US transfers limited to marketing-site analytics. EU-owned, EU-hosted on own infrastructure with no US hyperscaler dependency, and the only US transfers are marketing-site analytics that never touch customer mailing data, so under a customer-data-at-rest definition CLOUD Act exposure is none.

CLOUD ACT
Ownership
Sub-procs
3 · 0 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
Jump to
Overview

About rapidmail

rapidmail is a Freiburg-headquartered German email marketing platform operated by Positive Group Deutschland GmbH (Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau; Amtsgericht Freiburg HRB 706983), founded in 2008; rapidmail is the product brand of that GmbH rather than a separate legal entity. The German company sits under the French Positive Group (Hem, France, formerly Sarbacane Software), which acquired rapidmail in 2021, with founder-CEO Mathieu Tarnus as majority shareholder and the French funds IDI and EMZ Partners as minority investors, so the ownership chain is EU end to end with no US investor, but the ultimate parent is French rather than German. It positions itself as a fully GDPR-compliant ESP for SMBs in DACH and is one of the cleanest "Made in Germany" data-residency stories in the email-marketing category: customer email data and subscriber lists are hosted exclusively on servers located within Germany, in data centres described as ISO 27001 and PCI-DSS certified (those certificates belong to the data-centre operator, not to rapidmail itself), and the company explicitly avoids public hyperscaler clouds (no AWS, no GCP, no Azure) for product workloads.

The privacy policy (last updated May 2025) is transparent about marketing-site sub-processors (Google Analytics/Ads/reCAPTCHA, HubSpot, Hotjar, Mixpanel, LinkedIn Insight, Bing Ads, Matomo, Axeptio), but these touch the website and lead funnel rather than customer email data, and any US transfers are covered by Standard Contractual Clauses under Art. 46 GDPR. The AVV names the product-side sub-processors and every one of them is EU-incorporated: uvensys GmbH (Linden, Germany) as the server host, Scoria Labs GmbH (Germany) for CaptchaFox bot protection, optional on subscription forms, and Gleap GmbH (Austria) for customer support and user feedback. The data protection officer is Nils Möllers of Keyed GmbH, a German external DPO firm. Customer satisfaction signals are strong (97% across 2,600+ reviews), and OMR Reviews has ranked rapidmail as a category Leader.

The product is in German and English. Best fit: small and mid-sized German-speaking businesses, associations, and e-commerce shops who want a no-fuss, DSGVO-konformes Newsletter tool with an unambiguous "data stays in Germany" answer for procurement and a German-speaking support team. Limitations to verify before procurement-grade buying: SSO/SAML and audit-log capabilities are not advertised on the public pages reviewed. The AVV itself is a full PDF that downloads from the help centre without a login, but it can only be executed once an account has been activated, so the signed agreement is not fully self-serve.

Sub-processors

Sub-processor map · 3

Source ↗
  • Gleap GmbH EU
    Austria

    SaaS for customer support and user-feedback analysis

  • Scoria Labs GmbH EU
    Germany

    Bot and spam protection (CaptchaFox), optional on online subscription forms

  • uvensys GmbH EU
    Germany

    Hosting of the servers at locations within Germany

Zero US-incorporated sub-processors.
Certifications

Frameworks & certifications

ISO/IEC 27001
ACTIVE
Features

Capability matrix

Automation Yes
Landing pages No
A/B testing Yes
Transactional email Yes
SMS marketing No
Built-in CRM Yes
Free tier No
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
Pricing

Pricing & tiers

PAID
Custom pricing

Contact vendor for tier or volume pricing.

View pricing page ↗
Public documents

Public documents

  • Data Processing Addendum (DPA)
    www.rapidmail.de/hilfe…
    Open ↗
  • Sub-processors list
    www.rapidmail.com/data-protection…
    Open ↗
  • Terms of Service
    www.rapidmail.com/general-terms-and-conditions…
    Open ↗
Alternatives

Alternatives in this category

Brevo
France · Founded 2012
EU-HOSTED

Paris-headquartered multi-channel customer-engagement platform with email, SMS, CRM, automation, ISO 27001 and a public DPA.

Public DPA Sub-processors Open source
FROM
€8/mo
CLOUD ACT
MATERIAL
CleverReach
Germany · Founded 2007
EU-HOSTED

German email marketing platform with EU-only customer data storage in Germany and Ireland and a permanently free Lite tier.

Public DPA Sub-processors Open source
FROM
€15/mo
CLOUD ACT
MATERIAL
EmailOctopus
United Kingdom · Founded 2014
EU-HOSTED

London-based low-cost email marketing (Three Hearts Digital, 2014), generous free tier, indie-friendly, campaign sending via Bird's EU infrastructure.

Public DPA Sub-processors Open source
FROM
€0/mo
CLOUD ACT
MATERIAL

Featured in these guides