Data processing agreement (dpa) — Resend

Cited by

Facts read from this source

• DPA entity Report an error

  “between Plus Five Five, Inc. ("Company" or "Resend") and Customer”

• DPA last updated Report an error

  “Last update: December 31st, 2025”

• Covered laws Report an error

  “(i) the California Consumer Privacy Act (“CCPA”), (ii) the General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”) and the EU GDPR as it forms part of the law of England and Wales”

• Company role Report an error

  “Company is a processor”

• CCPA service provider Report an error

  “Company is a service provider for the purposes of the CCPA (to the extent it applies)”

• Return or delete Report an error

  “Following completion of the Services, at Customer's choice, Company shall return or delete Customer's Personal Data, unless further storage of such Personal Data is required or authorized by applicable law.”

• List URL Report an error

  “A list of Company's current Authorized Sub-Processors (the “List”) is available to Customer at https://resend.com/legal/subprocessors”

• Change notice Report an error

  “Company shall specifically inform the Customer in writing of any intended changes to that list through the addition or replacement of sub-processors at least fourteen (14) days in advance”

• Objection Report an error

  “If Customer reasonably objects to an engagement in accordance with Section 4.2, and Company cannot provide a commercially reasonable alternative within a reasonable period of time, Customer may discontinue the use of the affected Service”

• Primary region Report an error

  “Customer acknowledges that Company's primary processing operations take place in the United States”

• Sccs governing law Report an error

  “In Clause 17 (Option 1), the EU SCCs will be governed by Irish law.”

• Sccs UK Report an error

  “ex-UK Transfers are made pursuant to the UK SCCs”

• Dpf certified Report an error

  “The Company complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF”

• Dpf ftc Report an error

  “The Company is subject to the investigatory and enforcement powers of the Federal Trade Commission (FTC).”

• Breach notification Report an error

  “In the event of a Personal Data Breach, Company shall, without undue delay, inform Customer of the Personal Data Breach”

• Breach assistance Report an error

  “provide Customer with reasonable cooperation and assistance necessary for Customer to comply with its obligations under the GDPR with respect to notifying (i) the relevant Supervisory Authority and (ii) Data Subjects affected”

• Audit records Report an error

  “Company shall maintain records sufficient to demonstrate its compliance with its obligations under this DPA, and retain such records for a period of three (3) years after the termination of the Agreement.”

• Audit rights Report an error

  “such audit shall only be performed during business hours and occur no more than once per calendar year”

• Dpia assistance Report an error

  “provide Customer with reasonable cooperation and assistance where necessary for Customer to comply with its obligations under the GDPR to conduct a data protection impact assessment”

• Subject request forwarding Report an error

  “Company will advise the Data Subject to submit their request to Customer and Customer will be responsible for responding to such request”

• Retention deletion period Report an error

  “When the Customer terminates their use of the Services, we delete their user/customer data within 90 days of the account termination.”

• Tracking Report an error

  “The Customer also has the option to enable open/link tracking and other analytics/tracking of recipient actions”

• Export deletion product Report an error

  “Resend enables customers to request deletion or export of their account and data”

• Hosting certifications Report an error

  “The physical and environmental security controls of such providers are audited for SOC 2 Type II and ISO 27001 compliance”

• MFA SSO Report an error

  “We support two-factor authentication via social login as well as Single-Sign On.”

• Encryption Report an error

  “We make HTTPS encryption (also referred to as SSL or TLS) available on all our interfaces.”

• Pen testing Report an error

  “We maintain relationships with industry-recognized penetration testing service providers for annual penetration tests.”

• Importer address Report an error

  “Address: 2261 Market Street #5039 San Francisco, CA 94114”

2 facts read from this page are not shown because they could not be confirmed on the page as captured.

Scores citing this record

• The Agency Lead Message data, retention & security
• The Agency Lead European sovereignty
• The Data Protection Officer Deliverability & sender reputation
• The Data Protection Officer Message data, retention & security
• The Data Protection Officer European sovereignty
• The Shop Operator Message data, retention & security
• The Shop Operator European sovereignty
• The Platform Engineer Deliverability & sender reputation
• The Platform Engineer Message data, retention & security
• The Platform Engineer European sovereignty
• The SaaS Developer Deliverability & sender reputation
• The SaaS Developer Message data, retention & security
• The SaaS Developer European sovereignty
• The Skeptic Message data, retention & security
• The Skeptic European sovereignty