
Re:Shark
Partially CompliantAmsterdam outbound platform that automates the deliverability plumbing, configuring DNS, DMARC and DKIM, rotating domains and warming inboxes, on EU-only servers.

GDPR Compliance Data
Not independently verified| GDPR Status | Partially Compliant |
| HQ Country | Netherlands |
| Ownership | European-owned |
| Foreign Disclosure Exposure | Not yet verified |
| Data Hosting Location | European Union"EU-Based Servers: All data processing and storage occur within the European Union" (reshark.io/privacy, read 2026-09-01). Unqualified, and covering processing as well as storage. |
| EU Servers Available | |
| Data Processing Agreement | Not verified |
| Sub-processor List | Not verified |
| Schrems II Risk | Low Risk |
| SCCs in Place | |
| Last Verified | 1 September 2026 |
How we reached this
Dutch legal entity: "Re:Shark, part of The Ocean B.V., headquartered at John M. Keynesplein 12, 1066 EP Amsterdam, The Netherlands", from the privacy policy read 2026-09-01. A Data Protection Officer is named and reachable at that address. Hosting is EU on the vendor's own unqualified statement that all processing and storage occur within the European Union, which is why Schrems II risk is LOW. PARTIAL rather than COMPLIANT because the layer below that sentence is not published: no sub-processor list, and no DPA document located at a public URL. That matters more than usual here, because the product's function is processing other people's contact data, and because the advertised "waterfall enrichment" necessarily involves third-party data providers, many of which in this market are American. "All processing occurs in the EU" states a location, not a set of parties, so exposure is recorded as UNKNOWN rather than NONE. Ask for the sub-processor list and the DPA before signing.
About Re:Shark
Outbound With the Infrastructure Included
Most cold outreach tools hand you a sequencer and let you work out the sending infrastructure yourself. That is where campaigns actually die: misconfigured DNS, a single domain burned through overuse, cold inboxes hitting spam from the first send.
Re:Shark folds that layer into the product.
What Is Automated
- Automatic DNS, DMARC and DKIM configuration, rather than a documentation page telling you to do it
- Automatic domain rotation and inbox warm-up, so sending volume spreads across domains and reputation is built before real campaigns run
- Waterfall enrichment, which queries data providers in sequence rather than relying on one, so coverage is better than any single source
- Kai, an AI assistant for sequence and message work
- Credits-based usage, with volume scaling by plan
Pricing Is Not for Casual Use
Plug & Play is €295/month for one user, 750 credits, one domain and two inboxes, aimed at freelancers and small teams. Growth is €595/month for up to three users and 5,000 credits.
That is a serious commitment next to a €30/month sequencer, and it only makes sense if outbound is a real revenue channel for you rather than an experiment. The counter-argument is that the domains, inboxes and warm-up tooling you would otherwise buy separately are inside that number.
Amsterdam, EU-Only Servers
Published by The Ocean B.V., John M. Keynesplein 12, 1066 EP Amsterdam. The privacy policy is written under GDPR and Dutch data protection law, names a Data Protection Officer reachable by post at the Amsterdam address, and states plainly:
EU-Based Servers: All data processing and storage occur within the European Union.
That sentence is the reason this rates well. It is unqualified, it is in the vendor's own policy, and it covers processing as well as storage. What is missing is the layer below it: no sub-processor list is published, and no DPA document was located at a public URL. For a tool whose entire function is processing other people's contact data, both would be reasonable to ask for before signing, and their absence is why this reads PARTIAL rather than COMPLIANT.
Note also that "all processing occurs within the EU" says where, not who. Waterfall enrichment implies third-party data providers, and enrichment vendors in this space are frequently American. The policy does not name them.
Where It Fits
Sits alongside lemlist and Woodpecker among European outbound tools, with more infrastructure automation and a higher price. If you want the deliverability monitoring without the sequencer, the tools in email deliverability cover that separately.
Key Features
Pros & Cons
Re:Shark GDPR & data protection: common questions
Is Re:Shark GDPR compliant?
Partly. Re:Shark meets some of the requirements, with caveats worth reading before you commit. Re:Shark is a European company headquartered in Netherlands, data is hosted within the European Union.
Where does Re:Shark store data?
Re:Shark states: ""EU-Based Servers: All data processing and storage occur within the European Union" (reshark.io/privacy, read 2026-09-01). Unqualified, and covering processing as well as storage.". Data is hosted within the European Union.
Does Re:Shark offer a Data Processing Agreement (DPA)?
We could not locate a published DPA for Re:Shark. That does not mean one is unavailable. Many vendors provide it on request or inside the account area rather than publishing it. Ask before you sign.
What a DPA has to cover →Is Re:Shark a European company?
Yes. Re:Shark is headquartered in Netherlands and, as far as we can establish, European-owned.
Related Tools

Lemlist
French multi-channel sales outreach with AI personalization and a built-in lead database.

Kaspr
LinkedIn-based B2B contact finder with verified phone numbers and emails.

Cognism
B2B sales intelligence with phone-verified contacts and GDPR-compliant EMEA data.
Spotted something wrong?
Martech moves fast. Vendors change hosting regions, get acquired, publish a new DPA or rewrite their pricing, and they rarely announce it. We check what we publish and date every compliance review, but some of what you see here will be out of date before we catch it.
If you work at Re:Shark and something on this page is wrong, tell us and we will fix it. Readers, same invitation. Pointing us at the page that proves it gets it changed fastest.