Skip to content

GDPR

An email API that keeps your data in Europe

Email addresses, names and message content are personal data. PostStack processes all of it inside the EU, under a European company, with the paperwork your DPO will ask for.

Get started freeRead the regions and data residency docs
  • 3,000 emails a month free
  • No credit card
  • Hosted in Finland
  • REST, SMTP and MCP

European from top to bottom

Operated by a Danish company and hosted in a Hetzner data centre in Helsinki, Finland. Not subject to the US CLOUD Act.

DPA for every customer

A data processing agreement under Article 28 is part of every account, with a public list of sub-processors.

Retention you control

Logs are kept for 14 to 90 days depending on plan, then deleted. Contacts and suppressions can be removed over the API when someone asks to be forgotten.

What it covers

Data residency
Sending, queuing, event storage, logs and backups all run in the EU. Nothing is mirrored outside it.
Transfers
No transfer to a third country is needed to send your email, so there is no transfer impact assessment to write for it.
Erasure requests
Delete a contact through the API or the dashboard, and keep the address suppressed if they asked never to be emailed again.
Security
TLS in transit, DKIM-signed mail, hashed API keys and a Trust Center describing how the platform is run.

Set it up in three steps

  1. 1

    Read the DPA

    It is published, and applies to your account from the moment you use the service.

  2. 2

    Check the sub-processors

    Each one, what it does and where it processes data.

  3. 3

    Send

    Use the API, SMTP or MCP — all of it stays in the EU.

What you’ll use

Email APISend transactional email from EU infrastructure with a single API call. Official TypeScript, Python, and Go SDKs, plus REST examples for every major language.SMTP relayA standards-compliant SMTP relay hosted in the EU. Drop it into WordPress, Laravel, Rails, nodemailer, or any SMTP client, and keep full tracking and webhooks.Contact management and segmentsStore contacts with typed custom properties, import them from CSV, and build rule-based segments for targeted email. Subscription topics and RFC 8058 one-click unsubscribe are handled for you.Mailboxes on your own domainEU-hosted email hosting with webmail included. Create mailboxes on your domain, let each person read and send at mail.poststack.dev, or connect any IMAP or POP3 client.

In the docs

Frequently asked questions

Is PostStack GDPR compliant?

PostStack is built to let you meet your GDPR obligations as a controller: it processes data only in the EU, signs a data processing agreement with every customer, publishes its sub-processors, and lets you delete personal data on request.

Why does the CLOUD Act matter for email?

The US CLOUD Act lets US authorities require US companies to hand over data they control, wherever it is stored. PostStack is a Danish company with no US parent, so it is not subject to it.

Where are your servers?

In a Hetzner data centre in Helsinki, Finland. Backups, logs and metrics stay in the EU as well.

Do you sign a DPA?

Yes. The DPA is part of every account and is published on poststack.dev/dpa, together with the list of sub-processors.

More use cases

Transactional emailPassword resets, receipts, magic linksNewslettersBroadcasts to segments, unsubscribe built inAI agentsLet Claude, Cursor and your agents send emailSaaS productsOnboarding, product email and your customers’ domainsE-commerceOrder confirmations, shipping and receiptsBusiness emailMailboxes on your domain, €1 a month

Send your first email today

3,000 emails a month free, forever. No credit card, and about five minutes from sign-up to the first message in your inbox.

Get started freeSee pricing