Mailercloud
Partially CompliantLondon-registered email marketing platform whose own sub-processor list places its data centres with OVH US LLC in the United States, alongside Cloudflare, Sentry and Stripe.
Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.
Freemiumfrom $10/mo
GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | United Kingdom |
| Ownership | Non-European |
| Foreign Disclosure Exposure | US CLOUD Act / FISA 702 |
| Data Hosting Location | United StatesThe published sub-processor list names "OVH US LLC dba OVHcloud" under purpose "Data Centers", country "USA", transfer mechanism DPF (mailercloud.com/legal/subprocessors, read 2026-09-01). Every other named sub-processor is also American: Cloudflare Inc. (DNS, USA, DPF), Functional Software Inc. / Sentry.io (error logging, USA, DPF), OpenAI OpCo LLC (AI tool, USA), Stripe Inc (payments, USA, DPF). |
| EU Servers Available | |
| Data Processing Agreement | Not verified |
| Sub-processor List | View sub-processors |
| Schrems II Risk | High Risk |
| SCCs in Place | |
| Last Verified | 1 September 2026 |
How we reached this
UK legal entity: Luvia Digital Limited, Hamilton House, Mabledon Place, London WC1H 9BB, named as data controller in the privacy policy read 2026-09-01. dataHostingLocation is US, not EU, on the vendor's own published sub-processor list, which names OVH US LLC dba OVHcloud as the Data Centers provider with country USA. This is worth stating precisely because it is easy to misread: OVHcloud is a French company frequently reached for as the European cloud option, but the entity named here is its American subsidiary and the country column says USA, so this is not an EU deployment of a French provider. Every other named sub-processor is also American: Cloudflare, Sentry, OpenAI and Stripe. Transfers rely on the Data Privacy Framework, with OpenAI listed under EU Adequacy plus data minimisation, so sccInPlace is true on the documented safeguards. Schrems II risk HIGH and exposure US_CLOUD_ACT follow directly. Article 27 representative in the EU and UK is Euverify Ltd. Credit where due: publishing the sub-processor list at all is more than most competitors manage, and it is the only reason any of this is knowable. PARTIAL rather than worse because the transfer mechanisms are documented and the disclosure is complete. This tool was listed on the source map as a UK entry; a reader moving a subscriber list to keep it in Europe would be misled by that label, which is why the row is explicit.
About Mailercloud
A UK Company Running on American Infrastructure
Mailercloud is a straightforward email marketing platform: campaigns, drag-and-drop editing, automation, segmentation, signup forms and reporting, with a free tier and paid plans from around $10/month. On features and price it competes with EmailOctopus and MailerLite.
It appears here because it was listed as a UK entry on the map that prompted this expansion, and because what its own documents say is worth reading before that label does any work for you.
The Sub-processor List
To Mailercloud's credit, it publishes one. From mailercloud.com/legal/subprocessors:
| Sub-processor | Purpose | Country |
|---|---|---|
| OVH US LLC dba OVHcloud | Data Centers | USA |
| Cloudflare Inc. | DNS services | USA |
| Functional Software Inc. (Sentry.io) | Error logging | USA |
| OpenAI OpCo, LLC | AI tool | USA |
| Stripe Inc | Payment processing | USA |
The data centre line is the one that matters. OVHcloud is a French company and is often reached for as the European cloud answer, but the entity named here is OVH US LLC, its American subsidiary, and the country column says USA. That is not an EU deployment of a French provider. It is the US arm.
So on the vendor's own published evidence: a UK-registered company, running its data centres in the United States through an American subsidiary, with every other named sub-processor also American. Transfers are covered by the Data Privacy Framework and, for OpenAI, by what the list calls EU Adequacy with data minimisation.
Mailercloud has appointed Euverify Ltd as its Article 27 representative in the EU and UK.
Why This Listing Exists
Nothing above makes Mailercloud a bad product, and publishing the sub-processor list is genuinely more than most competitors do; it is the reason any of this is knowable.
But if you arrived here from a map of European email tools looking for somewhere to move your subscriber list so that it sits in Europe, this specific tool does not do that, and the country flag next to its name on that map would have told you the opposite. Recording it accurately is the point.
The Company
Luvia Digital Limited, Hamilton House, Mabledon Place, London, Greater London, WC1H 9BB, United Kingdom, named as data controller.
Where It Fits
If you want this price point with the data in Europe, Mailrelay is free at volumes Mailercloud charges for and states European data centres, and MailerLite and Sender are EU-owned. See email marketing.
Key Features
Pros & Cons
Categories
Mailercloud GDPR & data protection: common questions
Is Mailercloud GDPR compliant?
Partly. Mailercloud meets some of the requirements, with caveats worth reading before you commit. Mailercloud is based in United Kingdom, outside the EU/EEA, data is hosted in the United States.
Where does Mailercloud store data?
Mailercloud states: "The published sub-processor list names "OVH US LLC dba OVHcloud" under purpose "Data Centers", country "USA", transfer mechanism DPF (mailercloud.com/legal/subprocessors, read 2026-09-01). Every other named sub-processor is also American: Cloudflare Inc. (DNS, USA, DPF), Functional Software Inc. / Sentry.io (error logging, USA, DPF), OpenAI OpCo LLC (AI tool, USA), Stripe Inc (payments, USA, DPF).". Data is hosted in the United States.
Does Mailercloud offer a Data Processing Agreement (DPA)?
We could not locate a published DPA for Mailercloud. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.
What a DPA has to cover →Is Mailercloud a European company?
No. Mailercloud is based in United Kingdom, outside the EU/EEA. It may still be a sound choice (EU hosting and a signed DPA matter more than a flag) but the ownership is not European.
Is Mailercloud subject to the US CLOUD Act?
Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is. Standard Contractual Clauses are in place for transfers, which is the required safeguard but does not override a lawful US order.
Schrems II compliance checklist →Who are Mailercloud's sub-processors?
Mailercloud publishes its sub-processor list at https://www.mailercloud.com/legal/subprocessors. Worth reading: a vendor hosting in the EU can still route data through non-EU sub-processors, which is where residency claims usually come apart.
Related Tools
Brevo
All-in-one marketing platform with email, SMS, CRM, and automation. French company, EU data hosting.
MailerLite
Email marketing and automation platform from Lithuania. EU data processing.
rapidmail
German email marketing with data exclusively hosted in Germany.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Mailercloud and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.