Back to Tools
MailSenpai logo

MailSenpai

Partially Compliant

Italian email marketing platform and SMTP relay with a published Article 28 DPA and servers stated to be in the EU, from €13.49 a month. The operating company is not named in its documents.

🇮🇹Italy🇪🇺EU Hosted

Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.

Paidfrom €13.49/month
MailSenpai website screenshot

GDPR Compliance Data

Not independently verified
GDPR Status
Partially Compliant
HQ CountryItaly
OwnershipNot yet verified
Foreign Disclosure ExposureUS CLOUD Act / FISA 702
Data Hosting Location
European UnionPrivacy policy: "Platform, relay and CRM data are hosted on servers located in the European Union." Infrastructure page (dated 20 March 2020): "servers hosted in physical data centers located within the European Union (Hetzner, Aruba, Register, etc.)" (en.mailsenpai.com, read raw 2026-10-08). Vendor-stated.
EU Servers Available
Data Processing AgreementView DPA
Sub-processor ListView sub-processors
Schrems II Risk
Medium Risk
SCCs in Place
Last Verified8 October 2026

How we reached this

Documents read raw (curl, not WebFetch summary) 2026-10-08. PARTIAL. For: a published Data Processing Agreement (Annex A to the terms, updated 7 October 2026) that states it contains the provisions of art. 28 GDPR as interpreted in EDPB Opinion 14/2019 and names MailSenpai as Processor of Client Personal Data; EU hosting stated in the privacy policy, the SMTP page and the infrastructure page; sub-processors listed in DPA Appendix 3 (Cloudflare for network, CDN and client-uploaded images, plus Aruba, Hetzner and Register for servers); tracking data deleted after 12 months; consent and withdrawal of tracking logged with date, time and source. Against: (1) the contracting entity is never named. No company name, legal form, VAT number or registered address appears in the terms, DPA, privacy policy, contact page or footer; the privacy policy says only "Mailsenpai.com, Italy" and the terms "MailSenpai". Italy as HQ is supported by the exclusive jurisdiction of the Court of Trani (terms 13), a Milan phone number and "made in Italy" wording, but not by a registered entity, so ownership is recorded UNKNOWN and no parent or investor is stated. Founding "2016" is the vendor's claim; mailsenpai.com was registered 2018-05-01 (RDAP). (2) DPA Appendix 3 lists every sub-processor including Cloudflare as "Place of establishment: European Union" with "Transfer mechanism: N/A", although Cloudflare is US-parented; extraterritorialExposure is therefore US_CLOUD_ACT through Cloudflare, which holds client-uploaded images and proxies traffic, and Stripe handles payments. DPA 10.1 allows processing outside the EEA under transfer mechanisms to be indicated in Appendix 3, none of which are indicated. The privacy policy cites the EU-US Data Privacy Framework and Standard Contractual Clauses for Meta, Google and Stripe, not for the platform. (3) The infrastructure and security page is dated 20 March 2020. Reviews cited on the site (Capterra 4.7 from 30, G2 4.7 from 12, Trustpilot 4.4 from 12) were not independently verified. The listing request arrived in a spam folder. Open questions for the vendor: legal name, VAT number and registered office; whether Cloudflare processing is in the EU only and under what transfer mechanism; a current infrastructure document; why the MCP add-on page quotes EUR 9.90 for up to 20,000 emails against Basic at EUR 13.49 for 10,000.

About MailSenpai

Email Marketing and SMTP From Italy, With a Published DPA

MailSenpai sells two products: an email marketing platform for newsletters and automation, and SMTP Senpai, an SMTP relay and email API for transactional email. Both are bought self-serve with a card, and prices are public in euros, excluding VAT.

What It Covers

  • Email marketing: newsletters, automation and autoresponders, A/B testing of subject lines, scheduling, segmentation, unlimited subscribers on every plan and statistics
  • Templates: a drag-and-drop builder with over a thousand templates on the Plus plan
  • SMTP Senpai: SMTP relay and an API for transactional email, from 10,000 emails a month
  • B2B contact data: available through a partnership with Bancomail
  • AI assistants: an official remote MCP server with 70 tools, working with Claude, ChatGPT and Cursor, where sends and deletions need confirmation

Pricing

The email platform has a free 30-day demo (500 emails a day, one user, three lists), then Basic at €13.49 a month on an annual plan for 10,000 emails a month, and Plus at €89.49 a month on an annual plan for 270,000 emails a month with a dedicated IP. Smart is priced on the options chosen. SMTP Senpai starts at €12.90 a month on an annual plan for 10,000 emails, with a 14-day trial that asks for a card. There is no permanent free plan. The terms describe fixed terms of 3, 6, 12, 24 or 36 months with 30 days' notice, and the MCP add-on page quotes a price that does not match the Basic plan, so check the plan page before buying.

What the Documents Establish, and What They Do Not

MailSenpai publishes a Data Processing Agreement as Annex A to its terms, updated 7 October 2026, which states that it contains the provisions of Article 28 GDPR and names MailSenpai as processor of client personal data. The platform, relay and CRM data are stated to be on servers in the European Union, at Hetzner, Aruba and Register, and the DPA lists Cloudflare for network, CDN and storage of images clients upload.

Three things keep this listing at Partial. First, no document names the operating company: the terms and privacy policy say only "MailSenpai" and "Mailsenpai.com, Italy", with no legal form, VAT number or registered address. The Italian base rests on the court named in the terms (Trani), an Italian phone number and the vendor's own statement, and we have asked for the legal name. Second, the DPA lists Cloudflare as established in the European Union with no transfer mechanism, although Cloudflare is a US-parented company, and the privacy policy relies on the EU-US Data Privacy Framework and Standard Contractual Clauses for Stripe and the advertising providers. Third, the infrastructure page describing the data centres is dated March 2020.

The vendor says it has operated since 2016. The domain was registered in 2018, so we treat the year as a claim.

Where It Fits

For readers comparing email platforms, see also Brevo, MailerLite and the wider Email Marketing category.

Key Features

Email marketing: newsletters, automation and autoresponders
A/B testing of subject lines, scheduling and statistics
Segmentation and unlimited subscribers on every plan
Drag-and-drop template builder with over 1,000 templates (Plus)
SMTP relay and email API for transactional email (SMTP Senpai)
Official MCP server with 70 tools for Claude, ChatGPT and Cursor
Per-list tracking rules with consent and withdrawal logged

Pros & Cons

Published Data Processing Agreement referencing Article 28 GDPR, updated this month
Servers stated to be in the EU, with Hetzner, Aruba and Register named
Public euro pricing from €13.49 a month, unlimited subscribers on every plan
Separate SMTP relay and API for transactional email
Anonymous open tracking with consent and withdrawal logged
The operating company, legal form, VAT number and registered office are not named in any document
The DPA lists Cloudflare as EU-established with no transfer mechanism, although Cloudflare is US-parented
The infrastructure and security page is dated March 2020
No permanent free plan, only a 30-day demo, and terms describe fixed contract periods
Phone support is Italian only, and few third-party integrations are shown

Categories

MailSenpai GDPR & data protection: common questions

Is MailSenpai GDPR compliant?

Partly. MailSenpai meets some of the requirements, with caveats worth reading before you commit. data is hosted within the European Union, and a Data Processing Agreement is published.

Where does MailSenpai store data?

MailSenpai states: "Privacy policy: "Platform, relay and CRM data are hosted on servers located in the European Union." Infrastructure page (dated 20 March 2020): "servers hosted in physical data centers located within the European Union (Hetzner, Aruba, Register, etc.)" (en.mailsenpai.com, read raw 2026-10-08). Vendor-stated.". Data is hosted within the European Union.

Does MailSenpai offer a Data Processing Agreement (DPA)?

Yes. MailSenpai publishes a DPA at https://en.mailsenpai.com/tc/appendix-a/. A DPA is required under Article 28 GDPR whenever a provider processes personal data on your behalf.

What a DPA has to cover →

Is MailSenpai a European company?

We have not verified MailSenpai's ultimate ownership.

Is MailSenpai subject to the US CLOUD Act?

Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is.

Schrems II compliance checklist →

Who are MailSenpai's sub-processors?

MailSenpai publishes its sub-processor list at https://en.mailsenpai.com/tc/appendix-a/. Worth reading: a vendor hosting in the EU can still route data through non-EU sub-processors, which is where residency claims usually come apart.

Spotted something wrong?

Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.

If you work at MailSenpai and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.