Compliance
Compliance you can forward to legal.
Certifications, agreements, and data handling — documented in plain language.
✓SOC 2 Type IIIndependently audited controls covering security, availability, and confidentiality. Report available under NDA.
✓GDPREU data residency on Enterprise. DPA with EU SCCs for cross-border transfers. Data deletion on request.
✓DPASigned data processing agreements covering roles, sub-processors, and breach notification obligations.
Sub-processors
Who touches your data.
Cloud hostingGCP (US / EU regions)Application hosting and data storage
Email deliveryRegional MX partnersLast-hop SMTP relay and bounce processing
Error trackingSentryException telemetry (metadata only)
Data handling
Your data, spelled out.
What we store
Account details, sending domains, contacts you upload, templates, message metadata, and content for the retention window of your plan.
What we never sell
Your data. No advertising, no data brokerage, no model training on customer content.
Retention
Event and metadata: per-plan window (7 days Free → 30 days Scale → custom Enterprise). Message content: deleted after delivery confirmation.
Deletion
Account deletion removes all data within 30 days, including backups. EU/US residency honored end-to-end.
Need the paperwork?
DPA, SCCs, sub-processor list, and SOC 2 report — available on request.