As of 2 Nov 2026, the panel rates Lettermint 3.5/5 and Postmark 3/5 in Transactional Email. Weighted by what each judge cares about, 4 of the 6 judges pick Lettermint and 1 picks Postmark, 1 calls it a tie. Lettermint scores higher on 3 of 7 criteria (European sovereignty, Message data, retention & security and Message logs, events & webhooks). Postmark scores higher on 4 of 7 criteria (Pricing transparency, Deliverability & sender reputation, Reliability, accounts & support, plus 1 more). Provenance — Lettermint: EU-Made; Postmark: Rest of world. Ratings are the AI panel’s opinion, formed from public evidence: how scores are made.
Six criteria, two clear poles. Lettermint is ahead on sovereignty, 8.7 against 4.0, with 6 judges leaning Lettermint and 0 leaning Postmark; its verdict cites EU-only hosting, storage and processing on the vendor's own infrastructure and an automatically applicable Article 28 GDPR data processing agreement, while Postmark's cites contracting under Illinois law and storage in United States data centres. Data and security: 7.2 against 6.0, 6 judges to 0. Postmark is ahead on pricing transparency, 7.0 against 3.8, 6 judges to 0, and on deliverability, 7.5 against 6.8, where 3 judges lean Postmark and 3 tie. Observability leans Lettermint 3 judges to 0 with 3 ties; sending API and reliability and accounts lean Postmark 2 judges to 0 with 4 ties each. Weighted totals span 6 to 7.3 for Lettermint and 5.8 to 6.8 for Postmark, the developer's tie at 6.8 to 6.8; there is no overall winner.
Choose Lettermint if
You need EU-only hosting, storage and processing on the vendor's own infrastructure, plus an automatically applicable Article 28 GDPR data processing agreement — sovereignty leans Lettermint 6 judges to 0, 8.7 against 4.0.
Your security review requires independently audited ISO/IEC 27001:2022 certification — data and security leans Lettermint 6 judges to 0, 7.2 against 6.0.
Your subprocessor list must stay short: the verdict names only UpCloud and Postmastery in the Netherlands and OVH Cloud in Germany as handling email.
You are a data protection officer — the weighted total reads 7.3 for Lettermint against 5.8 for Postmark.
You want the higher observability mean — 3 judges lean Lettermint, 0 lean Postmark, 3 tie, 7.0 against 6.5.
Choose Postmark if
You need published prices to budget from — pricing transparency leans Postmark 6 judges to 0, 7.0 against 3.8; Lettermint's captured pricing page shows the free tier's 300 monthly emails but no euro prices for paid plans.
Deliverability is your top priority — 3 judges lean Postmark, 0 lean Lettermint, 3 tie, means 7.5 against 6.8, resting on manual vetting of every new sender and free custom Return-Path and DKIM.
Your team builds against the sending API — means 7.0 against 6.7, with 2 judges leaning Postmark and 4 tying.
You are an agency lead — the weighted total reads 6.4 for Postmark against 6 for Lettermint.
You want reliability documentation — reliability and accounts leans Postmark 2 judges to 0 with 4 ties, 6.2 against 5.7, and no public status page or incident history was found for Lettermint.
Read this comparison as one judge. Each weighs the same scores by what they care about.
The Data Protection Officer
In-house data protection officer at a health software company whose appointment reminders and lab-result notices carry patients' names. Treats the sending service as a processor like any other. Reads the DPA, the subprocessor list and the retention section first: whether message bodies are stored and for how long, whether open tracking can be turned off, which entity signs, and whether the EU region covers the logs as well as the mail.
Lettermint
This judge's pick
Postmark
Criterion by criterion
Sending API, SMTP & developer experience
Lettermint
The sending surfaces are thoroughly documented: a REST API with a downloadable OpenAPI schema and playground, an SMTP relay with host, ports and authentication mechanisms specified, official SDKs for named languages including Laravel and Symfony, a CLI and an MCP server, batch sending up to 500 emails per request, scheduled sending and a sandbox mode with simulated results. We found no public information on stored templates with versions, API idempotency keys or a migration guide, which is what keeps this below the highest level.
Postmark
A fully documented REST API with endpoints and error codes, an SMTP relay on token authentication, vendor-maintained official libraries for eight named languages plus community libraries, batch sending capped at 500 messages and 50 MB, a test token and sandbox mode, inbound email parsed to a webhook, an official CLI, and migration guides from six named competitors. We found no public information on idempotency keys, scheduled sending, template versioning or an OpenAPI specification, which is what keeps it short of the top level.
Deliverability & sender reputation
Lettermint
SPF, DKIM and DMARC are required before sending, with a hosted and rotated DKIM key and a CNAME return path whose SPF record the vendor maintains; transactional and broadcast mail leave on separate, already-warmed IP pools on the vendor's own network, hard bounces are suppressed automatically, and delivery speed per mailbox provider is published live. We found no public information on a vetting policy for shared pools, feedback loops, or a statement on the Gmail and Yahoo bulk-sender requirements.
Postmark
SPF, DKIM and DMARC set-up with a free custom return path, every new sender manually vetted before sending, transactional and broadcast traffic kept on completely separate infrastructures including IP ranges, dedicated IPs from 300,000 messages a month with managed warm-up and overflow to the shared pool, feedback loops and blacklist monitoring handled by the vendor, automatic suppression, and delivery times published per mailbox provider on a public Time to Inbox page. We found no public information on a stated compliance position for the Gmail and Yahoo bulk-sender rules, or on BIMI or custom tracking domains.
Message logs, events & webhooks
Lettermint
The Email Activity view is searchable by sender, recipient, subject, status, project, route and tag, with per-message event timelines and the source, HTML and plain-text content of each send; retention is stated in the data processing agreement at twenty-eight days for messages and no more than fourteen for application, delivery and security logs, and webhooks are HMAC-signed with a documented schedule of twelve attempts over roughly fourteen hours plus a deliveries API and test deliveries. We found no public information on alerts for bounce or complaint spikes or on streaming export to external tools, and message retention is fixed at twenty-eight days rather than configurable or extendable by plan.
Postmark
Message activity and logs viewable by role, 45 days of full content history stated with a customisable seven-to-365-day range, seven webhook event types with a documented six-attempt retry schedule, health tracked per event type with pausing on persistent failure, and a webhook statistics endpoint plus statistics by tag. From my chair the notable gap is integrity, not visibility: the captured pages state webhooks are not signed with HMAC, and we found no public information on alerts for bounce or complaint spikes or on exporting events to a log tool.
Message data, retention & security
Lettermint
The data processing agreement documents exactly what is stored per message and for how long, forbids sale or advertising use, and gives a twenty-four-hour breach-notification window; enforced TLS can be set per route or overridden for a single email without fallback, mail is encrypted at rest and in transit at TLS 1.2 or higher, tokens are scoped with IP allow-listing, custom roles and activity logs exist, and ISO/IEC 27001:2022 is independently audited. We found no public information on two-factor authentication, SSO for the dashboard, switching open and click tracking off per stream or message, shortening the twenty-eight-day content retention, or the scope of the ISO certificate.
Postmark
The DPA names what is processed (metadata, email address, message content), content retention is 45 days by default and adjustable from 7 to 365 days, open and click tracking are switchable per message, there are server- and account-level tokens, IP allow-listing, two-factor authentication on every plan that the owner can require, encryption at rest stated, deletion of recipient data through a data removal API, and SOC 2 certified data centres with a SOC 2 report offered as the audit alternative. I must flag two findings before any health data goes near this: the terms state the vendor may view, copy and internally use messaging content to train and improve the service, and outbound TLS is opportunistic, falls back to unencrypted and the customer cannot control the TLS version; we also found no public information on SSO or an audit log.
Reliability, accounts & support
Lettermint
Teams get granular custom roles with project-level access and self-escalation blocked, sandbox projects provide a separate environment, support runs from Europe across tickets, email and Discord with a written service level agreement for enterprise customers on the Pro plan, and the infrastructure spans multiple availability zones with encrypted backups at a separate German provider. We found no public information on a public status page with incident history, on service credits, or on queueing and retry of mail during incidents, and migration assistance is not described.
Postmark
Separate servers per application with plan limits and up to ten message streams each, three roles with a documented permission matrix plus an observer role, redundant data centres in multiple locations with N+2 redundancy and geographic load balancing, free premium support, migration guides, and WordPress, Zapier and framework integrations. We found no public information on an uptime SLA or service credits, on queueing and retry of mail during incidents, or on support response times per plan, so I cannot take reliability as contractually backed.
European sovereignty
Lettermint
The contracting entity is Lettermint B.V. of Zwolle, registered in the Dutch trade register and governed by Netherlands law; all hosting, storage and processing sit in the EU on the vendor's own infrastructure and network, with no US cloud, CDN or proxy in the chain, and the subprocessor list names every provider with its role, location and whether it touches email — UpCloud and Postmastery in the Netherlands, OVH Cloud in Germany, all European, with backups at the German provider. An Article 28 GDPR data processing agreement applies automatically and is countersigned on request; what is not published in the captured pages is the scope of the ISO 27001 certificate and an explicit statement that the founders are European, which keeps this just short of fully evidenced end-to-end sovereignty.
Postmark
The contracting entity is AC PM, LLC, an ActiveCampaign company under Illinois law, personal information is stored in AWS data centres, and the terms have the customer consent to processing and storage in the United States and other countries; we found no public information on an EU region covering messages, logs or account data, and the DPA's reliance on the Data Privacy Framework and the Standard Contractual Clauses confirms transfers out of the EEA are contemplated. There are real mitigations — an executable DPA with SCC modules two and three governed by Irish law, DPF certification, an Article 27 EU representative in Germany, and a published sub-processor page with change notifications — but the named sub-processor list with locations was not captured, so I place this between the levels: above a bare DPA, well short of EU processing.
Pricing transparency
Lettermint
The free tier's three-hundred-email monthly limit, euro billing exclusive of VAT, upgrade-downgrade-cancel-anytime terms, SEPA transfer on every plan and a one-time sixty-euro credit for students and startups are public, and paid plans are shown with no monthly limit and one shared volume across email types. We found no public information on the per-tier prices or on the amounts of the overage fee and the dedicated-IP add-on, so a real annual cost cannot be computed from the captured pages.
Postmark
Four tiers priced publicly with their overage rate per thousand messages (Free at $0.00/mo with 100 emails/month, Basic at $15.00/mo with extras at $1.80/1,000, Pro at $16.50/mo at $1.30/1,000, Platform at $18.00/mo at $1.20/1,000), dedicated IPs at $50/month per IP with no setup fees, DMARC monitoring at $14/month per domain, custom retention starting at $5/month, no rollover of unused email, and monthly auto-renewal cancelled through the service. What stops me going higher: the retention add-on is a starting price rather than a computable figure, high-volume pricing is on request, and we found no public information on VAT treatment.
Sovereignty, side by side
Dimension
Lettermint
Postmark
Legal entity
Not determined
Not determined
Hosting location
Not determined
Not determined
Hosting options
Not determined
Not determined
Open source
Not determined
Not determined
Data processing agreement
Not determined
Not determined
Transfer impact assessment
Not determined
Not determined
Facts, side by side
Only facts both products carry under the same definition — anything else would not be a fair row.
As of 2 Nov 2026, the panel rates Lettermint higher: 3.5/5 against 3/5. Weighted by what each judge cares about, 4 of the 6 judges pick Lettermint and 1 picks Postmark, 1 calls it a tie. Which one fits depends on the criteria that matter to you; the table on this page shows both side by side, and each judge’s reading has its own page. Both were scored by the same AI bench under the same rubric, from public evidence only, as the methodology describes.
Is Lettermint or Postmark European?
Lettermint is European (EU-Made). Postmark is not European by provenance (Rest of world). Provenance is read from each company’s own legal pages: who builds it and who owns it.
Do Lettermint and Postmark have a free plan?
As of 2 Nov 2026, both vendors’ own pages state a free plan. Each product page links the pricing page it was read from.