# AhaSend

> Dutch transactional email API and SMTP relay on Hetzner infrastructure in Germany and Finland, with a complete published DPA and every sub-processor named by country.

- Website: https://ahasend.com
- Headquarters: Netherlands
- Pricing: Freemium
- Categories: [Email Deliverability](https://europeanmartech.eu/category/email-deliverability)

## Compliance and sovereignty

| Field | Value | Source |
| --- | --- | --- |
| GDPR status | GDPR Compliant | https://ahasend.com/privacy |
| Data hosting | European Union ("Cloud Hosting & Infrastructure: Hetzner Online GmbH (Germany/Finland, and optionally USA if you chose to use our US-based SMTP relay) and…) | https://ahasend.com/dpa |
| EU server available | Yes | — |
| DPA | Published DPA, read and linked | https://ahasend.com/dpa |
| Schrems II risk | Low Risk | — |
| SCCs in place | Yes | — |
| Ownership | European-owned | — |
| Foreign disclosure exposure | None known | — |

Compliance fields established from a manual read of the vendor's documents, 2026-09-01.

## Overview

AhaSend is a transactional email service from AhaSend B.V. in the Netherlands, providing a REST API and SMTP relay for the email your application sends: confirmations, resets, receipts and notifications. It runs on multi-region EU infrastructure, offers dedicated IPs with automated warm-up, and starts free at 1,000 emails a month.

## Transactional Email With the Paperwork Actually Done

AhaSend is a developer-facing sending service, competing with the transactional side of the large platforms. What makes it worth a close look here is not the API, which is conventional and well documented. It is that the compliance documentation is the best of any tool in this tranche, by a distance.

### The Product

- **REST API and SMTP relay** with official SDKs, a CLI and sandbox mode
- **Dedicated IPs** with automated warm-up, dedicated IP pools, and bring-your-own-IP at the top tier
- **Inbound email routing** and signed webhooks, so replies and events come back into your own system
- **Platform Partner features**: sub-accounts, DNS whitelabeling, per-domain DKIM selectors and bring-your-own-DKIM keys, which is what you need if you are reselling sending inside your own product
- **Reputation Shield** and typosquatting protection
- **Configurable retention**, from zero days upward, so you can choose not to have message bodies stored at all

Pricing starts at a genuine free tier of 1,000 emails a month with no card, on the same multi-region EU infrastructure as the paid plans. Pro covers 25,000 and Max 100,000, with flat-rate billing plus per-thousand overage, in USD or EUR. There are no long-term contracts.

### Named Sub-processors, With Countries

Most vendors write "we use third-party providers". AhaSend writes this:

> Cloud Hosting and Infrastructure: Hetzner Online GmbH (Germany/Finland, and optionally USA if you chose to use our US-based SMTP relay) and DA International Group Ltd (operating as AlphaVPS, Bulgaria) to host our Services and associated data.

Then it names the US ones separately and says exactly what each does: **Stripe** for payments, **PostHog** for analytics, **Cloudflare** for website security, all three relying on the EU-US Data Privacy Framework, and **Trackdesk** in Czechia for the affiliate programme. It commits to erasing personal data within 14 days of an account deletion request, and explains that billing records are kept seven years because Dutch tax law requires it.

The DPA at [ahasend.com/dpa](https://ahasend.com/dpa) is a real Article 28 agreement, not a compliance page: Annex 1 details of processing, Annex 2 technical and organisational measures, Annex 3 the live sub-processor list, with the online version declared authoritative.

### Where the Exposure Actually Sits

Your message content and recipient data sit on Hetzner in Germany and Finland, and Hetzner is German. AlphaVPS is Bulgarian. So the default configuration keeps the email itself entirely inside EEA-owned infrastructure, which is rarer than it sounds in this category.

Two caveats, both stated by the vendor rather than found by us. First, the US providers are real but touch adjacent data: Stripe sees your billing details, PostHog sees product analytics, Cloudflare fronts the website. Second, AhaSend offers an **optional US-based SMTP relay**. If you choose it, your message data does go to Hetzner's US infrastructure, under Standard Contractual Clauses. That is a choice you make, not a default, and this listing rates the default.

ISO 27001 is listed as pending rather than held, which the site says itself.

### Where It Fits

Compare with [EmailLabs](/tools/emaillabs) and [MessageFlow](/tools/messageflow) in Poland, and with the transactional layer of [Brevo](/tools/brevo) and [Mailjet](/tools/mailjet). Among European senders, this is the one to point a developer at when the question is "where does the data actually go". See [email deliverability](/category/email-deliverability).

## Features

- REST API and SMTP relay with official SDKs, CLI and sandbox mode
- Dedicated IPs with automated warm-up, plus dedicated IP pools and BYOIP
- Inbound email routing with signed webhook endpoints
- Sub-accounts, DNS whitelabeling and per-domain DKIM selectors for platform partners
- Configurable message retention starting at zero days
- Reputation Shield and typosquatting protection
- SPF, DKIM and DMARC authentication with automatic DKIM key rotation
- OIDC single sign-on, 2FA enforcement, scoped API keys and IP allow lists

## Pros

- Names every sub-processor with its country and purpose, which almost no vendor this size does
- Complete Article 28 DPA published with all three annexes, including the live sub-processor list
- Message data sits on Hetzner and AlphaVPS, both EEA companies, so no US provider holds the email
- Genuine free tier of 1,000 emails a month on the same EU infrastructure as paid plans
- Retention is configurable down to zero days, so you can choose not to store message bodies

## Cons

- The optional US-based SMTP relay moves message data to Hetzner US if you select it
- Stripe, PostHog and Cloudflare are US providers, though they touch billing, analytics and the website rather than email
- ISO 27001 is described as pending, not held
- Transactional sending only: no campaign builder, segmentation or automation
- Smaller company than the incumbents, which larger buyers will treat as a resilience question

---

Source: https://europeanmartech.eu/tools/ahasend · [llms.txt](https://europeanmartech.eu/llms.txt) · [Full sitemap](https://europeanmartech.eu/sitemap.xml)