FOR THE PERSON SENT HERE TO SAY NO

The questions on your form, answered before you ask them.

The short version
  • Data at rest is on Oracle Cloud in ca-toronto-1, Canada. Cloudflare R2 holds the encrypted backup snapshots (encrypted before upload; keys held by YS Progress).
  • Traffic passes through Cloudflare’s global edge, where TLS is terminated.
  • Three subprocessors, named and dated.
  • A DPA on every plan, including free.
  • No SOC 2, no ISO 27001, and no third-party penetration test yet.
Free tier: 10,000 messages a month, 3 Applications, 7-day message bodies — no card required.
Canadian hosting, one regionCustomer data at rest is on Oracle Cloud in ca-toronto-1, Canada. Backup snapshots are encrypted before they leave that infrastructure, with keys YS Progress holds, and stored with Cloudflare R2. There is no region picker, because there is one region.
A DPA on every planA processor’s obligation under GDPR Art. 28, not an upsell, and free accounts get the same contract. Transfers to YS Progress need no Standard Contractual Clauses, because Canada holds adequacy findings from the EU, the UK and Switzerland. Transfers to Cloudflare and Stripe rely on the EU–US Data Privacy Framework or on Standard Contractual Clauses.
Retention you configure, deletion you can seeSet how long message bodies are kept — down to zero — per account and per template. Expiry is a dated event in your audit log, not a silent disappearance.
Right to erasure, actually implementedAn erasure removes or hashes the address wherever it is stored, except in failed-job records (kept 7 days) and backups (within 35 days), and a ledger records the erasure.

Somebody wants to buy this and you have to decide whether it is allowed. You need to know where the data sits, who can read it, how long it is kept, how it gets deleted, and what happens when a data subject asks. All of it is written down, and the parts we do not have are written down too.

Read the DPA →Security page →
The processing agreement is included on every plan, including free.No SOC 2, no ISO 27001, no third-party penetration test yet. Those are stated on the security page rather than implied away.
WHAT WE DO NOT DO

We never send mail as if it were ours, and we never show a delivery we cannot prove.

There is no plan where we become your sender. Your server keeps your reputation. Where a mail server cannot report back, the record stops at the handoff and says so — no green tick standing in for a fact nobody has.

what we hold, and what we do not have yet →

Your transport. Your record.
Running in five minutes.

connect your mail server → name the product that will send → send a test message
Start free — no card requiredFree forever tier · caps pause, never auto-upgrade