Dotdigital
Partially CompliantListed UK customer engagement platform for enterprise email, SMS and cross-channel marketing, with a Rotterdam-based EEA representative and DPO.
Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.
Paid
GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | United Kingdom |
| Ownership | Non-European |
| Foreign Disclosure Exposure | US CLOUD Act / FISA 702 |
| Data Hosting Location | Unknown |
| EU Servers Available | |
| Data Processing Agreement | Not verified |
| Sub-processor List | Not verified |
| Schrems II Risk | Medium Risk |
| SCCs in Place | |
| Last Verified | 1 September 2026 |
How we reached this
UK legal entity: Dotdigital is a trading name of dotdigital EMEA Limited, company number 03762341, registered office No. 1 London Bridge, London SE1 9BG, from the privacy policy read 2026-09-01. Notably better European structure than most UK vendors: the Article 27 EEA representative is a real Dutch entity, Dotdigital B.V., Posthoornstraat 11, 3011WD Rotterdam, and the Data Protection Officer sits there, reachable at privacy@dotdigital.com. Exposure US_CLOUD_ACT on the company's own statement that it "complies with the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework" and that some affiliates are based outside the EEA. A DPF certification is the lawful mechanism for US transfers and its presence indicates the transfer is being handled properly, but it exists because data goes to the US, and a buyer should choose Dotdigital knowing it is a global platform rather than an EU-resident one. PARTIAL: no hosting region is stated for the platform anywhere in the privacy policy, and no sub-processor list or DPA was located at a public URL, which is a surprising gap for a vendor of this size. Ownership NON_EU because the UK is a third country under GDPR, covered by a reviewable adequacy decision, with the Investigatory Powers Act reaching data held by UK providers.
About Dotdigital
The Enterprise End of UK Martech
Dotdigital is one of the larger independent marketing platforms in the UK and among the more established names in this directory. The product covers cross-channel campaign management, marketing automation, segmentation and personalisation, with deep integrations into commerce platforms, and it competes with the enterprise tier rather than with a newsletter tool.
The European Position
For a UK company, Dotdigital's European structure is more considered than most:
- The EEA representative under Article 27 is Dotdigital B.V., Posthoornstraat 11, 3011WD Rotterdam, and the Data Protection Officer sits there too, reachable at privacy@dotdigital.com
- The UK representative is dotdigital EMEA Limited
- The company is regulated as controller under both the Data Protection Act 2018 and GDPR
Having a real Dutch entity carrying the Article 27 role, rather than a rented mailbox in Ireland, is a meaningful signal about how seriously the European market is taken.
The Part That Constrains the Rating
Dotdigital states that it complies with the EU-U.S. Data Privacy Framework, the UK Extension to it, and the Swiss-U.S. Data Privacy Framework, and that some of its affiliates are based outside the EEA.
A DPF certification is not a red flag. It is the lawful mechanism for transferring personal data to the US and it is what a responsible multinational does. But it only exists because data goes to the US. So a buyer choosing Dotdigital should understand they are choosing a global platform with American processing in the chain, operating that transfer properly, rather than a European platform that keeps data inside the EU. Those are different products, and for many teams the first is the right answer.
The privacy policy names no hosting region for the platform itself, and no sub-processor list or DPA was located at a public URL, which for a vendor of this size is a surprising gap.
The Company
Dotdigital, a trading name of dotdigital EMEA Limited, company number 03762341, registered office No. 1 London Bridge, London SE1 9BG.
Where It Fits
Against Spotler and Symplify at the enterprise end, and ExpertSender for e-commerce specifically. Spotler is the EU-owned comparison to make. See marketing automation.
Key Features
Pros & Cons
Categories
Dotdigital GDPR & data protection: common questions
Is Dotdigital GDPR compliant?
Partly. Dotdigital meets some of the requirements, with caveats worth reading before you commit. Dotdigital is based in United Kingdom, outside the EU/EEA.
Where does Dotdigital store data?
We could not locate a clear statement of where Dotdigital hosts data. Ask the vendor directly, or check their privacy policy and sub-processor list before signing.
Does Dotdigital offer a Data Processing Agreement (DPA)?
We could not locate a published DPA for Dotdigital. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.
What a DPA has to cover →Is Dotdigital a European company?
No. Dotdigital is based in United Kingdom, outside the EU/EEA. It may still be a sound choice (EU hosting and a signed DPA matter more than a flag) but the ownership is not European.
Is Dotdigital subject to the US CLOUD Act?
Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is.
Schrems II compliance checklist →Related Tools
Brevo
All-in-one marketing platform with email, SMS, CRM, and automation. French company, EU data hosting.
MailerLite
Email marketing and automation platform from Lithuania. EU data processing.
rapidmail
German email marketing with data exclusively hosted in Germany.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Dotdigital and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.