MailSenpai
Partially CompliantItalian email marketing platform and SMTP relay with a published Article 28 DPA and servers stated to be in the EU, from €13.49 a month. The operating company is not named in its documents.
Subject to the US CLOUD Act: a US parent company can be compelled to disclose data it holds, including data stored in the EU.
Paidfrom €13.49/month
GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | Italy |
| Ownership | Not yet verified |
| Foreign Disclosure Exposure | US CLOUD Act / FISA 702 |
| Data Hosting Location | European UnionPrivacy policy: "Platform, relay and CRM data are hosted on servers located in the European Union." Infrastructure page (dated 20 March 2020): "servers hosted in physical data centers located within the European Union (Hetzner, Aruba, Register, etc.)" (en.mailsenpai.com, read raw 2026-10-08). Vendor-stated. |
| EU Servers Available | |
| Data Processing Agreement | View DPA |
| Sub-processor List | View sub-processors |
| Schrems II Risk | Medium Risk |
| SCCs in Place | |
| Last Verified | 8 October 2026 |
How we reached this
Documents read raw (curl, not WebFetch summary) 2026-10-08. PARTIAL. For: a published Data Processing Agreement (Annex A to the terms, updated 7 October 2026) that states it contains the provisions of art. 28 GDPR as interpreted in EDPB Opinion 14/2019 and names MailSenpai as Processor of Client Personal Data; EU hosting stated in the privacy policy, the SMTP page and the infrastructure page; sub-processors listed in DPA Appendix 3 (Cloudflare for network, CDN and client-uploaded images, plus Aruba, Hetzner and Register for servers); tracking data deleted after 12 months; consent and withdrawal of tracking logged with date, time and source. Against: (1) the contracting entity is never named. No company name, legal form, VAT number or registered address appears in the terms, DPA, privacy policy, contact page or footer; the privacy policy says only "Mailsenpai.com, Italy" and the terms "MailSenpai". Italy as HQ is supported by the exclusive jurisdiction of the Court of Trani (terms 13), a Milan phone number and "made in Italy" wording, but not by a registered entity, so ownership is recorded UNKNOWN and no parent or investor is stated. Founding "2016" is the vendor's claim; mailsenpai.com was registered 2018-05-01 (RDAP). (2) DPA Appendix 3 lists every sub-processor including Cloudflare as "Place of establishment: European Union" with "Transfer mechanism: N/A", although Cloudflare is US-parented; extraterritorialExposure is therefore US_CLOUD_ACT through Cloudflare, which holds client-uploaded images and proxies traffic, and Stripe handles payments. DPA 10.1 allows processing outside the EEA under transfer mechanisms to be indicated in Appendix 3, none of which are indicated. The privacy policy cites the EU-US Data Privacy Framework and Standard Contractual Clauses for Meta, Google and Stripe, not for the platform. (3) The infrastructure and security page is dated 20 March 2020. Reviews cited on the site (Capterra 4.7 from 30, G2 4.7 from 12, Trustpilot 4.4 from 12) were not independently verified. The listing request arrived in a spam folder. Open questions for the vendor: legal name, VAT number and registered office; whether Cloudflare processing is in the EU only and under what transfer mechanism; a current infrastructure document; why the MCP add-on page quotes EUR 9.90 for up to 20,000 emails against Basic at EUR 13.49 for 10,000.
About MailSenpai
Email Marketing and SMTP From Italy, With a Published DPA
MailSenpai sells two products: an email marketing platform for newsletters and automation, and SMTP Senpai, an SMTP relay and email API for transactional email. Both are bought self-serve with a card, and prices are public in euros, excluding VAT.
What It Covers
- Email marketing: newsletters, automation and autoresponders, A/B testing of subject lines, scheduling, segmentation, unlimited subscribers on every plan and statistics
- Templates: a drag-and-drop builder with over a thousand templates on the Plus plan
- SMTP Senpai: SMTP relay and an API for transactional email, from 10,000 emails a month
- B2B contact data: available through a partnership with Bancomail
- AI assistants: an official remote MCP server with 70 tools, working with Claude, ChatGPT and Cursor, where sends and deletions need confirmation
Pricing
The email platform has a free 30-day demo (500 emails a day, one user, three lists), then Basic at €13.49 a month on an annual plan for 10,000 emails a month, and Plus at €89.49 a month on an annual plan for 270,000 emails a month with a dedicated IP. Smart is priced on the options chosen. SMTP Senpai starts at €12.90 a month on an annual plan for 10,000 emails, with a 14-day trial that asks for a card. There is no permanent free plan. The terms describe fixed terms of 3, 6, 12, 24 or 36 months with 30 days' notice, and the MCP add-on page quotes a price that does not match the Basic plan, so check the plan page before buying.
What the Documents Establish, and What They Do Not
MailSenpai publishes a Data Processing Agreement as Annex A to its terms, updated 7 October 2026, which states that it contains the provisions of Article 28 GDPR and names MailSenpai as processor of client personal data. The platform, relay and CRM data are stated to be on servers in the European Union, at Hetzner, Aruba and Register, and the DPA lists Cloudflare for network, CDN and storage of images clients upload.
Three things keep this listing at Partial. First, no document names the operating company: the terms and privacy policy say only "MailSenpai" and "Mailsenpai.com, Italy", with no legal form, VAT number or registered address. The Italian base rests on the court named in the terms (Trani), an Italian phone number and the vendor's own statement, and we have asked for the legal name. Second, the DPA lists Cloudflare as established in the European Union with no transfer mechanism, although Cloudflare is a US-parented company, and the privacy policy relies on the EU-US Data Privacy Framework and Standard Contractual Clauses for Stripe and the advertising providers. Third, the infrastructure page describing the data centres is dated March 2020.
The vendor says it has operated since 2016. The domain was registered in 2018, so we treat the year as a claim.
Where It Fits
For readers comparing email platforms, see also Brevo, MailerLite and the wider Email Marketing category.
Key Features
Pros & Cons
Categories
MailSenpai GDPR & data protection: common questions
Is MailSenpai GDPR compliant?
Partly. MailSenpai meets some of the requirements, with caveats worth reading before you commit. data is hosted within the European Union, and a Data Processing Agreement is published.
Where does MailSenpai store data?
MailSenpai states: "Privacy policy: "Platform, relay and CRM data are hosted on servers located in the European Union." Infrastructure page (dated 20 March 2020): "servers hosted in physical data centers located within the European Union (Hetzner, Aruba, Register, etc.)" (en.mailsenpai.com, read raw 2026-10-08). Vendor-stated.". Data is hosted within the European Union.
Does MailSenpai offer a Data Processing Agreement (DPA)?
Yes. MailSenpai publishes a DPA at https://en.mailsenpai.com/tc/appendix-a/. A DPA is required under Article 28 GDPR whenever a provider processes personal data on your behalf.
What a DPA has to cover →Is MailSenpai a European company?
We have not verified MailSenpai's ultimate ownership.
Is MailSenpai subject to the US CLOUD Act?
Yes. US authorities can compel disclosure of data held by a US company or its subsidiaries, regardless of the country the servers sit in. EU hosting alone does not remove this, the question is who controls the data, not where the disk is.
Schrems II compliance checklist →Who are MailSenpai's sub-processors?
MailSenpai publishes its sub-processor list at https://en.mailsenpai.com/tc/appendix-a/. Worth reading: a vendor hosting in the EU can still route data through non-EU sub-processors, which is where residency claims usually come apart.
Related Tools

Brevo
All-in-one marketing platform with email, SMS, CRM, and automation. French company, EU data hosting.

MailerLite
Email marketing and automation platform. Its DPA allows processing worldwide, with SCCs for transfers.

rapidmail
German email marketing with data exclusively hosted in Germany.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at MailSenpai and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.