# Amazon SES — Transactional Email

Amazon SES by Amazon Web Services EMEA SARL holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: Rest of world; sovereignty: 1 of 6 dimensions proven.

- Vendor: Amazon Web Services EMEA SARL (https://aws.amazon.com/ses/)
- Category: [Transactional Email](https://whats-best.ai/software/transactional-email.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/transactional-email/amazon-ses
- Alternatives: https://whats-best.ai/software/transactional-email/amazon-ses/alternatives ([markdown](https://whats-best.ai/software/transactional-email/amazon-ses/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Amazon Web Services EMEA SARL
- Headquarters: Incorporated in United States [S10]
- Data hosting: Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan: Not stated on the vendor’s pages as of 1 Nov 2026

## The panel's verdict

Amazon SES is an AWS platform for sending and receiving email using your own addresses and domains, sold with three plans — Essentials, Pro and Enterprise — plus à-la-carte rates. It comes out strongest on pricing transparency, scoring 8-9: per-1,000-email rates by volume tier applied marginally, fixed monthly charges of $105 and $500 per account and region, outbound à-la-carte at $0.10 per 1,000 emails and up to $200 in free credits make a bill computable, with only deliverability expert services priced through a support ticket. Deliverability, at 6-8, rests on Easy DKIM, dedicated IPs with managed warm-up, automatic hard-bounce suppression, inbox placement testing and blocklist monitoring. The weakest area is observability, at 4-5, where judges found no public information on a searchable per-message log, log retention periods, open and click events or webhook signatures and retries. The sending interfaces, at 5-6, are documented, but we found no public information on stored templates, batch sending or idempotency. Sovereignty, at 5-6, pairs a Luxembourg EMEA contracting entity with a US parent; no default region is stated. Score bands stayed narrow across every criterion.

**Speaks for it:**
- Pricing transparency scored 8-9, with per-1,000-email rates by volume tier applied marginally, fixed monthly charges of $105 and $500 per account and region, and up to $200 in free credits
- Deliverability tooling is evidenced from Easy DKIM with per-region CNAME records through dedicated IPs with managed warm-up, automatic hard-bounce suppression, inbox placement testing and blocklist monitoring
- Security controls are concrete: TLS 1.2 minimum with a require-secure-connection option, AES-256 at rest, customer-managed keys via KMS and CloudHSM, CloudTrail on by default, ISO 27001/27017/27018, SOC 1/2/3 and BSI C5
- Sending paths are documented: an HTTPS API, an SMTP relay that can front an existing mail server, a sandbox limited to verified identities and a mailbox simulator that never reaches real recipients
- Tenant containers isolate identities, configuration and reputation per sender, with 1,000 included per account and region and $0.005 per month for each additional tenant

**Held against it:**
- Observability scores sit at 4-5, with no public information found on a searchable per-message log, log retention periods, open and click events, or webhook signatures and retries
- The sending API clusters at 5-6, with no public information found on stored templates, batch sending, idempotency keys, scheduled sending or SDKs named by language
- Reliability and accounts scores range 4-6, with no public information found on a public status page with incident history or an uptime commitment with service credits
- Deliverability expert services are priced only through a support ticket, and support plans begin at $29 per month with higher tiers unpriced on the captured pages
- No default region for sending is stated, and the subprocessor pages note downstream providers may route and process data globally as necessary

**Best for:**
- You send at volume and need your annual bill computable from published per-unit prices before you commit
- You send for multiple clients or brands and need each sender's identities, configuration and reputation isolated from the others
- Your engineers already build on AWS and can assemble message history themselves from SNS notifications and CloudWatch or Firehose event export
- You need a documented SMTP relay in front of an existing mail server, with a sandbox and a mailbox simulator for testing without mailing real recipients

**Avoid if:**
- You need a searchable per-message log with the receiving server's answer and stated retention from day one — observability is the lowest-scoring criterion at 4-5
- Your developers want stored templates, batch sending, idempotency keys and language-named SDK guides documented before a migration — the sending API sits at 5-6
- You cannot commit without a public status page with incident history and an uptime commitment with service credits — reliability and accounts scores range 4-6
- You need the sending chain evidenced as staying within Europe — ask the vendor: the public pages we read do not show it

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The SaaS Developer | The Platform Engineer | The Shop Operator | The Data Protection Officer | The Agency Lead | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Sending API, SMTP & developer experience | 2.5/5 | 2.5/5 | 2.5/5 | 3/5 | 2.5/5 | 2.5/5 |
| Deliverability & sender reputation | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 4/5 | 3/5 |
| Message logs, events & webhooks | 2/5 | 2/5 | 2.5/5 | 2/5 | 2.5/5 | 2.5/5 |
| Message data, retention & security | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Reliability, accounts & support | 2.5/5 | 2/5 | 3/5 | 2.5/5 | 3/5 | 2.5/5 |
| European sovereignty | 2.5/5 | 3/5 | 2.5/5 | 3/5 | 3/5 | 2.5/5 |
| Pricing transparency | 4/5 | 4/5 | 4/5 | 4.5/5 | 4.5/5 | 4/5 |
| **Weighted verdict** | **3/5** | **3/5** | **3/5** | **3/5** | **3.5/5** | **3/5** |

### The judges

- **The SaaS Developer** (v1.0): Backend developer at a twelve-person B2B SaaS in Hamburg, built on Laravel, that sends sign-up confirmations, password resets, invoices and weekly digests to 40,000 users. Has replaced the mail driver once already and does not want to again. Wants an official driver for the framework, templates with variables, a test mode that never reaches a real inbox, signed webhooks for bounces, and a log that answers "did this user get the reset mail?" without opening a ticket.
- **The Platform Engineer** (v1.0): Platform engineer at a fintech in Frankfurt whose customers sign in with a one-time code sent by email, so a delay of three minutes is an outage. Is on call for it. Reads the status page history before the feature list, wants the SLA in writing with credits, mail queued and retried during an incident, delivery latency per mailbox provider, alerts on bounce spikes, and scoped API keys that can be rotated without a deploy.
- **The Shop Operator** (v1.0): Runs a Shopware shop for kitchen equipment in Germany and Austria with 900 orders a week. Order confirmations, invoices and shipping notices went out through the hosting provider's mail server until a customer found theirs in spam and the support inbox filled up. Wants guided SPF and DKIM set-up a non-specialist can follow, a plugin for the shop, order mail kept apart from the newsletter, and someone to ask when Gmail starts refusing.
- **The Data Protection Officer** (v1.0): In-house data protection officer at a health software company whose appointment reminders and lab-result notices carry patients' names. Treats the sending service as a processor like any other. Reads the DPA, the subprocessor list and the retention section first: whether message bodies are stored and for how long, whether open tracking can be turned off, which entity signs, and whether the EU region covers the logs as well as the mail.
- **The Agency Lead** (v1.0): Technical lead at a web agency in Cologne that builds and runs thirty client applications, from a booking portal to a membership site, each sending its own mail from the client's domain. Wants one account with a sub-account, keys and limits per client, domains verified by API, roles so a client can see their own logs and nothing else, and a price per client that can be written into a maintenance contract.
- **The Skeptic** (v1.0): Has seen "99% deliverability" with no method behind it, "dedicated IPs" that shared a pool with bulk senders, "EU hosting" that covered the API endpoint but not the logs, and seven days of log retention discovered during an incident on day eight. Reads that a vendor is "trusted by thousands of developers" and asks how bounces are suppressed, what is stored per message, which entity signs the DPA — and what moving away would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: 1 of 6 dimensions proven.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Incorporated in US | 0/2 | [S10] |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Audit reports available: yes [S11]
- Breach notification: yes · without undue delay [S11]
- C5 ens: yes · yes [S11]
- Cispe code: yes [S11]
- Compliance programs: yes [S10]
- Customer data control: yes · yes [S11]
- Dkim: Easy DKIM email authentication [S4]
- DPA sccs: yes · yes [S11]
- Dpf participation: yes · yes · yes [S10]
- Encryption in transit: yes [S10]
- Identity verification before disclosure: yes [S10]
- ISO 27001: yes [S11]
- ISO 27017: yes [S11]
- ISO 27018: yes [S11]
- Partner solutions: yes [S11]
- Pci dss: yes [S10]
- Professional services: yes [S11]
- S3 encryption kms: client-side · yes [S3]
- Shared responsibility: yes [S11]
- SOC reports: yes · yes · yes · yes [S11]
- Swiss fdpa: yes [S11]
- Tls: opportunistic · 1.2 · yes [S3]
- UK GDPR: yes [S11]
- UK idta: yes [S11]

**Data**
- Content access restriction: yes [S9]
- No content movement: yes [S9]
- Region selection: yes [S9]
- Retention policy: retention as long as needed for stated purposes or required by law; deletion per applicable law [S10]

**Integrations**
- API encryption: yes [S11]
- Cloudwatch firehose: Email sending events to CloudWatch or Firehose [S4]
- Iam: IAM access control [S4]
- S3 lambda kms: Received emails stored in S3; Lambda triggers; optional KMS encryption [S4]
- Sending interfaces: AWS SDK, SMTP interface, direct API calls [S4]
- Smtp endpoints: SES provides SMTP endpoint addresses; port varies with connection method [S5]
- Sns: SNS notifications for bounces, complaints, deliveries [S4]

**Legal**
- Acceptance mechanism: Effective on clicking 'I Accept' or on first use of Services [S9]
- Account requirements: valid email · valid payment method [S9]
- Anti assignment: yes [S9]
- Arbitration US: AWS Inc., Canada, Korea, Singapore, Indonesia contracting parties · yes [S9]
- Breach cure period: 30 [S9]
- Change notice service discontinuation: 12 [S9]
- Confidentiality period: 5 [S9]
- Customer content ownership: yes [S9]
- Ip indemnification: yes [S9]
- Language: English [S9]
- Last updated: 2026-10-29 [S9]
- Liability cap: fees paid in the 12 months before liability arose [S9]
- Modification mechanism: yes [S9]
- Notice last updated: 2026-05-18 [S10]
- Resale prohibited: yes [S9]
- Reverse engineering prohibited: yes [S9]
- Role: yes · yes [S11]
- SLA change notice: 90 [S9]
- Termination for convenience aws notice: 30 [S9]
- Termination for convenience customer: yes [S9]
- Third party content terms: yes [S9]
- US entity: Amazon Web Services, Inc. · 410 Terry Avenue North, Seattle, WA 98109-5210 [S10]
- Warranty disclaimer: yes [S9]

**Pricing**
- Alacarte archiving: 2 · 0.19 [S8]
- Alacarte byoip: 24.95 · 256 · 6387.2 [S8]
- Alacarte email addons: 0.415 · 0.125 · 0.125 · 0.1875 [S8]
- Alacarte email validation: 0.01 · 0.01 [S8]
- Alacarte global endpoints: 0.03 [S8]
- Alacarte inbound: 0.09 · 0.1 [S8]
- Alacarte ingress endpoints: yes · 50 [S8]
- Alacarte mail manager processing: 0.15 [S8]
- Alacarte managed dedicated ip: 0.08 · contact us · 0.04 · 0.02 · 15 [S8]
- Alacarte outbound: 0.12 · 0.1 [S8]
- Alacarte overview: yes · no [S8]
- Alacarte standard dedicated ip: 24.95 [S8]
- Alacarte vdm global: 12 · 5 · 25 · 12.5 · 25 · 10 · 1250 [S8]
- Alacarte vdm ses: 5000 · 0.0005 · 0.07 · 0.02 · 0.05 [S8]
- Billing frequency: monthly [S9]
- Des pricing: no [S3]
- Enterprise assessment: yes · subscribed 12+ months with 6B+ trailing emails [S8]
- Essentials tier1: 0-10M emails/month · 0.22 · 0.23 · 0.16 [S8]
- Fee increase notice: 30 [S9]
- Fixed monthly charge: 105 · 500 [S8]
- Free plan duration: 6 · 12 [S8]
- Free tier: 12 · 3000 [S3]
- Free tier: yes · 200 [S8]
- Free tier credits 2025: 200 · 6 · 12 [S3]
- Late payment interest: 1.5 [S9]
- Marginal tiers: marginal [S8]
- Model: volume-based on emails sent and received · no [S4]
- New accounts default: Essentials · 2026-07-21 · yes [S8]
- Open ingress endpoint footnote: 50 · 1 [S8]
- Pay as you go: pay-as-you-go [S2]
- Plan change timing: immediately [S8]
- Taxes exclusive: yes [S9]
- Tenants included: 0.005 · 1000 [S8]
- Tier2: 10-100M emails/month · 0.17 · 0.18 · 0.14 [S8]
- Tier3: >100M emails/month · 0.12 · 0.13 · 0.11 [S8]
- Vdm sees deliverability included: 1 · 1 · 5 · 5 · 12 · 25 · 1250 [S8]

**Product**
- Account level suppression list: manual add/remove individually or in bulk via SES API v2 or console · yes [S7]
- Advertising sharing: no · yes [S10]
- Analytics: Sender statistics reports and email deliverability tools [S2]
- Archiving: Add-on on all plans [S8]
- Attachment virus scanning: yes [S3]
- Attachments: yes [S3]
- Audit logging: yes [S11]
- Authenticated ingress endpoint: yes [S8]
- Benefits: Send high-volume emails · Improve email deliverability · Simplify email management · Optimized secure communication [S2]
- Children policy: 18 [S10]
- Cloudtrail default: yes [S11]
- Content filtering: yes [S3]
- Cookies use: yes · yes [S10]
- Custom mail from shared across regions: yes [S7]
- Data collection types: information you give us · automatic information · information from other sources [S10]
- Data processing: yes [S11]
- Data transfer assessment whitepaper: yes [S11]
- Ddos protection: paid subscription · yes [S11]
- Dedicated ip pools: yes · yes [S3]
- Default deny: yes [S11]
- Delivery guarantee: no [S3]
- Description: Email platform for sending and receiving email using your own email addresses and domains [S4]
- Dkim: yes · yes · yes [S3]
- Dmarc: yes [S3]
- Easy dkim cname records: CNAME records generated via console or API, added to domain DNS [S7]
- Easy dkim per region: yes [S7]
- Encryption at rest scope: yes · EBS · S3 · Glacier · RDS [S11]
- Encryption options: yes · yes · yes [S11]
- Endpoint types: yes [S7]
- Enterprise positioning: stay resilient globally, isolate sending reputation across workloads [S8]
- Feedback loop: yes [S3]
- Global deliverability: Analytics based on a representative sample of sending across every provider domains send through, not just Amazon SES [S6]
- Global deliverability features: campaign analytics · inbox placement rates · inbox placement testing · blocklist monitoring [S6]
- Global endpoints: Add-on · yes · Add-on [S8]
- Global suppression list: yes · 14 [S3]
- Hsm: yes [S11]
- Iam: yes · no [S11]
- Inbound smtp not imap: no [S7]
- Inbound spam verdicts: yes · yes [S3]
- Ip options: dedicated IPs · shared IPs · bring your own IPs [S2]
- Key management: yes · yes [S11]
- Mail manager email processing: yes [S8]
- Mailbox simulator: yes · yes [S3]
- Managed dedicated ips: yes · yes · Add-on [S8]
- Max message size: 10 · 40 [S3]
- MFA: virtual · hardware · yes [S11]
- Multi region availability: SES is available in several AWS Regions, each with multiple Availability Zones [S7]
- No selling of personal information: no [S10]
- Open ingress endpoint: Add-on · yes · Add-on [S8]
- Opt out advertising: Your Privacy Choices link · yes [S10]
- Outbound sending: SES API · SMTP · AWS SDK · yes [S8]
- Personal data discovery: yes [S11]
- Plan positioning: higher deliverability with dedicated infrastructure and proactive reputation protection [S8]
- Plans count: 3 · Essentials · Pro · Enterprise [S8]
- Pricing model: pay-as-you-go · volume of emails sent and received · no [S8]
- Receiving features: autoresponders, unsubscribe systems, customer support ticketing from incoming emails [S4]
- Sandbox: yes [S3]
- Sandbox per region: yes [S7]
- Sandbox removal requests: yes · yes [S7]
- Scope exclusion customer content: no [S10]
- Security features count: 500+ [S11]
- Sending authorization region scope: yes [S7]
- Sending limits: recipients · recipients_per_second · 24 [S3]
- Sending limits per region: yes [S7]
- Ses deliverability: Insights and recommendations for email sent through Amazon SES: monitor delivery rates, track engagement, identify reputation issues [S6]
- Ses deliverability dashboard: yes · account · ISP · sending identity · configuration set · tenant [S6]
- Smtp credentials not access keys: yes [S5]
- Smtp credentials per region: yes [S7]
- Smtp credentials pre 2019: 2019-01-10 · delete and replace older credentials [S7]
- Smtp credentials region scoped: yes [S5]
- Smtp email server integration: Existing email servers can relay all outgoing mail through SES [S5]
- Smtp endpoints: yes [S7]
- Smtp feedback forwarding: Feedback forwarding sends bounces/complaints/deliveries to MAIL FROM; Reply-To is not used [S5]
- Smtp interface: yes [S3]
- Smtp minimum message fields: Minimum SMTP exchange requires source address, destination address, message data [S5]
- Smtp programmatic: Applications can send email programmatically via the SMTP interface [S5]

**Subprocessors**
- Categories: 4 · AWS infrastructure entities · AWS service providers · third-party service providers · AWS European Sovereign Cloud entities [S12]
- Downstream routing note: AWS End User Messaging · Amazon Simple Notification Service · yes [S12]
- Last updated: 2026-10-30 [S12]
- Page purpose: Lists AWS sub-processors engaged per the AWS Data Processing Addendum to process Customer Data [S12]
- Route53 domain registration: Amazon Route 53 · Domain registration · Germany · Key-Systems GmbH [S12]
- Service improvement opt out: yes [S12]
- Service providers: application and media services and networking · service improvement · customer-initiated support [S12]
- Sovereign cloud separate: yes [S12]
- Sovereign infrastructure: Amazon Data Services European Sovereign Cloud GmbH · Germany [S12]
- Sovereign support: Amazon Development Centre Ireland Limited (Ireland) · Amazon Web Services EMEA SARL (France, Germany, Ireland, Italy) [S12]
- Support no data by default: no [S12]
- Third party purposes: A2P messaging · geolocation services [S12]
- Types: 3 · yes [S11]
- Update notice: 30 · yes [S12]

**Support**
- Billing dashboard: AWS Billing Dashboard [S3]
- Channels: yes · 29 [S3]
- GDPR guidance: yes · yes [S11]

21 more facts on the canonical page: https://whats-best.ai/software/transactional-email/amazon-ses

## Questions

### Is Amazon SES European?

No. whats-best.ai classifies Amazon SES as Rest of world. Its vendor, Amazon Web Services EMEA SARL, is incorporated in United States, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/14127).

### Where does Amazon SES store data?

Not stated on the vendor’s pages as of 1 Nov 2026.

### Does Amazon SES have a free plan?

Not stated on the vendor’s pages as of 1 Nov 2026.

### What are the best alternatives to Amazon SES?

As of 2 Nov 2026, the panel rates [Lettermint (3.5/5)](https://whats-best.ai/software/transactional-email/lettermint), [Bird Email API (formerly SparkPost) (3/5)](https://whats-best.ai/software/transactional-email/bird-email-api) and [Postmark (3/5)](https://whats-best.ai/software/transactional-email/postmark) highest among the other 15 Transactional Email products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Lettermint](https://whats-best.ai/software/transactional-email/lettermint) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Amazon SES alternatives](https://whats-best.ai/software/transactional-email/amazon-ses/alternatives).

## Head-to-head

- [Amazon SES vs Twilio SendGrid Email API](https://whats-best.ai/compare/amazon-ses-vs-sendgrid.md)

## What this page leaves out

- 14 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 12 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 7 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 5 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 sovereignty dimension could not be confirmed on the vendor’s own pages and is shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage: https://aws.amazon.com/ses/ (checked 2026-11-01)
- [S2] Vendor homepage (German): https://aws.amazon.com/de/ses/ (checked 2026-11-01)
- [S3] Features page (FAQ): https://aws.amazon.com/ses/faqs/ (checked 2026-11-01)
- [S4] Documentation: https://docs.aws.amazon.com/ses/latest/dg/Welcome.html (checked 2026-11-01)
- [S5] Documentation (SMTP interface): https://docs.aws.amazon.com/ses/latest/dg/send-email-smtp.html (checked 2026-11-01)
- [S6] Documentation (Virtual Deliverability Manager): https://docs.aws.amazon.com/ses/latest/dg/vdm.html (checked 2026-11-01)
- [S7] Documentation (regions): https://docs.aws.amazon.com/ses/latest/dg/regions.html (checked 2026-11-01)
- [S8] Pricing page: https://aws.amazon.com/ses/pricing/ (checked 2026-11-01)
- [S9] Terms of service (AWS Customer Agreement): https://aws.amazon.com/agreement/ (checked 2026-11-01)
- [S10] Privacy policy: https://aws.amazon.com/privacy/ (checked 2026-11-01)
- [S11] Security / trust page (GDPR): https://aws.amazon.com/compliance/gdpr-center/ (checked 2026-11-01)
- [S12] Subprocessor list: https://aws.amazon.com/compliance/sub-processors/ (checked 2026-11-01)
- [S13] Legal notice — found from the homepage: https://aws.amazon.com/legal/ (checked 2026-11-01)

---

Cite as: whats-best.ai, "Amazon SES — Transactional Email", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/transactional-email/amazon-ses

Corrections: https://whats-best.ai/correct/1275?target=page