Data processing agreement (dpa) — Mailjet Email API

Cited by

Facts read from this source

• DPA version Report an error

  “Version 8 – Date of release: 29 October 2025”

• Scc incorporated Report an error

  “The Standard Contractual Clauses and, if required, the UK Addendum, having Sinch act as data importer with the Customer acting as data exporter are incorporated as part of this DPA.”

• Scc version Report an error

  “the current version as at the date of this DPA is as annexed to European Commission Decision 2021/914 (EU) of June 4, 2021”

• Scc modules Report an error

  “Module 2 (Controller-to-Processor) will apply where Sinch acts as Customer’s data processor; Module 3 (Processor-to-Processor) will apply where Sinch acts as Customer sub-processor.”

• Scc governing law Report an error

  “Option 1 of Clause 17 (Governing law) shall apply and the laws of Sweden shall govern the Standard Contractual Clauses;”

• Scc supervisory authority Report an error

  “For the purpose of Clause 13 (Supervision), IMY, the Swedish Data Protection Authority (Integritetsskyddsmyndigheten) shall act as competent supervisory authority;”

• EU US dpf email Report an error

  “(2) for Sinch Email, the EU-US Data Privacy Framework (EU-US DPF) and the UK Extension to the EU-U.S DPF, as set forth by the U.S Department of Commerce”

• ISO 27001 Report an error

  “Sinch has also applied an Information Security Management System (ISMS), according to ISO/IEC 27001:2022.”

• Audit evidence Report an error

  “Sufficient evidence includes providing either: (i) a certification as to compliance with ISO 27001or other standards implemented by Sinch (scope as defined in the certificate); or (ii) an audit or attestation report of an independent third party.”

• Breach notification Report an error

  “Sinch shall notify the Customer without undue delay once Sinch becomes aware of a personal data breach affecting the Customer’s Personal Data.”

• Deletion after termination Report an error

  “Within ninety (90) days following termination of the account, Sinch shall delete all personal data processed pursuant to this DPA, unless Customer requests the return of personal data as described in Paragraph 11(a) above.”

• Return format Report an error

  “Sinch shall provide a copy of the Customer’s Data in a form that can be read and processed further.”

• Subprocessor notification Report an error

  “Sinch shall notify the Customer, through such mechanism, thirty (30) days’ in advance of any intended changes concerning the addition or replacement of any Sub-processor.”

• Subprocessor list URL Report an error

  “The current sub-processors for the Services are set out at https://sinch.com/legal/data-protection-agreement-sub-processors/ (“Sub-processor List”).”

• Subprocessor general authorization Report an error

  “The Customer hereby gives a general authorization to Sinch to appoint sub-processors in accordance with this Paragraph 13 and Annex 1.”

• Data subject request tools Report an error

  “Sinch provides specific tools in order to assist customers in replying to requests received from data subjects. These include our APIs and interfaces to search event data, suppressions, and retrieve message content.”

• Dpia assistance Report an error

  “Sinch shall, taking into account the nature of the processing and the information available, provide reasonable assistance to the Customer at the Customer’s cost, with any data protection impact assessments and prior consultations with supervisory authorities or other competent regulatory authorities as required”

• Independent controller for transmission Report an error

  “when processing personal data in the course of providing communication services as part of the Services, including the transmission and exchange of SMS via telecommunications networks and other messages and communications, including emails, voice, and other media via other communication platforms, regardless of whether Customer acts as a controller or processor, Sinch acts as an independent data controller, and not as joint controller”

• Services scope Report an error

  “Under the Principal Agreement, Sinch provides certain services such as messaging, email, voice calls and other communication services, as further detailed in the Principal Agreement, to the Customer which involves the processing of personal data.”

• Data types Report an error

  “may include name, email, telephone numbers, IP address and other personal data included in the contact lists and message or call content.”

• No sensitive data Report an error

  “Annex IB (Description of Transfer) shall be further completed by specifying that no sensitive data shall be transferred.”

• Encryption at rest transit Report an error

  “Encrypt data at rest on servers, applications, and databases (AES256 Minimum). Encrypt data in transit (TLS 1.2 or higher).”

• Encrypted storage Report an error

  “Information uploaded to the Services, including message content, is stored in an encrypted format when processed by the Sinch Infrastructure.”

• International transfers Report an error

  “Customer acknowledges and agrees that, in connection with the performance of the Services under the Agreement, Sinch may transfer personal data within its company group. These transfers are necessary to provide the Services globally.”

• DPA precedence Report an error

  “the provisions of this DPA shall prevail.”

• Argentina deviation Report an error

  “the processing of personal data will be carried out in accordance with Law No. 25.326 (“Personal Data Protection Law of the Republic of Argentina”)”

• Uruguay deviation Report an error

  “such as, but not limited to, Law No. 18.331, Regulatory Decree No. 414/009, and Law No. 19.670”

• Mexico deviation Report an error

  ““Applicable Data Protection Laws” means the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP”)”

• CCPA covered Report an error

  “including the California Consumer Privacy Rights Act of 2020, which amends the California Consumer Privacy Act of 2018 Cal. Civ. Code § 1798.100 et seq (“CCPA”)”

• Termination linkage Report an error

  “This DPA and the Standard Contractual Clauses will terminate contemporaneously and automatically with the termination of the Principal Agreement.”

• Copyright Report an error

  “Copyright © 2026 Sinch All Rights Reserved.”

3 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Lead Message logs, events & webhooks
• The Agency Lead Message data, retention & security
• The Agency Lead Reliability, accounts & support
• The Agency Lead European sovereignty
• The Data Protection Officer Message data, retention & security
• The Data Protection Officer Reliability, accounts & support
• The Data Protection Officer European sovereignty
• The Shop Operator Message data, retention & security
• The Shop Operator Reliability, accounts & support
• The Shop Operator European sovereignty
• The Platform Engineer Message logs, events & webhooks
• The Platform Engineer Message data, retention & security
• The Platform Engineer Reliability, accounts & support
• The Platform Engineer European sovereignty
• The SaaS Developer Message data, retention & security
• The SaaS Developer Reliability, accounts & support
• The SaaS Developer European sovereignty
• The Skeptic Message logs, events & webhooks
• The Skeptic Message data, retention & security
• The Skeptic Reliability, accounts & support
• The Skeptic European sovereignty