# Elastic Email API — Transactional Email

Elastic Email API by Elastic Email Inc. holds a panel rating of 2.5/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: Rest of world; sovereignty: not determined.

- Vendor: Elastic Email Inc. (https://elasticemail.com/email-api)
- Category: [Transactional Email](https://whats-best.ai/software/transactional-email.md)
- Provenance (editorial classification): Rest of world
- Canonical page: https://whats-best.ai/software/transactional-email/elastic-email
- Alternatives: https://whats-best.ai/software/transactional-email/elastic-email/alternatives ([markdown](https://whats-best.ai/software/transactional-email/elastic-email/alternatives.md))
- Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: Elastic Email Inc.
- Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting: Default not stated; pages mention the EU, United States and Canada [S10]
- Free plan: Yes, per the vendor’s own page [S1]

## The panel's verdict

Elastic Email Inc., a Canadian corporation, sells this transactional email service with a documented REST API v4, an SMTP relay and official libraries for twelve languages; the sending API scores 6 to 7, the top of this bench's range. Reliability and accounts shows the widest spread, 5 to 7, over the same facts: judges credit unlimited sub-accounts, each with its own IP, domain and credit limit, managed through the API, and mark it down for finding no public information on an uptime SLA, service credits or incident history — only a Status link. Observability sits at a uniform 6, with webhooks signed using HMAC-SHA256, secret rotation and a 24-hour retry, though signing is restricted to Pro plans. Sovereignty is the weak point at 3 to 4: a Canadian entity under British Columbia law, hosting across the EU, the United States and Canada, and subprocessors named only by category. Pricing transparency holds at 5, with public tiers — Starter $19 and Pro $49 per month for up to 50,000 emails/month — but unpriced add-ons.

**Speaks for it:**
- Documented REST API v4 and SMTP relay with official libraries for twelve languages, idempotency keys and a stated limit of 20 concurrent connections.
- Unlimited sub-accounts, each with its own IP, domain and custom credit limit, manageable through the API, with custom branding for reselling.
- Webhooks signed with HMAC-SHA256, with secret rotation, a 24-hour retry window and a five-minute replay tolerance.
- SPF, DKIM and DMARC set-up guided in the help centre, with a DMARC generator and DKIM keys generated by the vendor.
- Public plan tiers from a free plan at $0 per month for up to 3,000 emails/month, also quoted as 100 emails a day, to Starter at $19 and Pro at $49 per month.

**Held against it:**
- We found no public information on an uptime SLA, service credits or an incident history — the developer pages show a Status link.
- The security page claims no certification such as ISO 27001 or SOC 2, and we found no public information on encryption at rest.
- Sovereignty scores fall to 3 to 4: a Canadian contracting entity under British Columbia law, hosting across the EU, the United States and Canada, and subprocessors named only by category.
- Copies of sent emails may be permanently erased after fourteen days at the vendor's sole discretion, with no public information on configurable retention.
- The private-IP and Dedicated Support add-ons are offered unpriced, and we found no public information on an overage rate per additional thousand messages.

**Best for:**
- You run an agency or reseller operation and need unlimited sub-accounts, each with its own IP, domain and sending credit limit, to keep clients apart.
- Your developers integrate over the published REST API v4 or SMTP relay, with official libraries in languages from PHP to Go.
- You need signed webhook event delivery with secret rotation feeding your own systems.
- You want to start at no cost on the free plan, $0 per month for up to 3,000 emails/month, with instant setup and no credit card required.

**Avoid if:**
- You need processing confined to the EU — the contracting entity is Elastic Email Inc. under British Columbia law, and we found no public information on an EU-only hosting region or an EU contracting entity.
- Your procurement requires a certification such as ISO 27001 or SOC 2 — the security page describes safeguards but claims no certification.
- You send one-time codes or password resets that must survive an outage — we found no public information on an uptime SLA or on mail being queued and retried during incidents.
- You must compute an exact annual cost in advance — the private-IP and Dedicated Support add-ons are listed unpriced and the judges could not compute a yearly figure from the public pages.

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion.

| Criterion | The SaaS Developer | The Platform Engineer | The Shop Operator | The Data Protection Officer | The Agency Lead | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Sending API, SMTP & developer experience | 3.5/5 | 3.5/5 | 3/5 | 3/5 | 3.5/5 | 3/5 |
| Deliverability & sender reputation | 3/5 | 3/5 | 3/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| Message logs, events & webhooks | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 |
| Message data, retention & security | 3/5 | 3/5 | 3/5 | 3/5 | 2.5/5 | 2.5/5 |
| Reliability, accounts & support | 3.5/5 | 2.5/5 | 3/5 | 3/5 | 3/5 | 2.5/5 |
| European sovereignty | 1.5/5 | 2/5 | 2/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| Pricing transparency | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 |
| **Weighted verdict** | **3/5** | **3/5** | **3/5** | **2.5/5** | **2.5/5** | **2.5/5** |

### The judges

- **The SaaS Developer** (v1.0): Backend developer at a twelve-person B2B SaaS in Hamburg, built on Laravel, that sends sign-up confirmations, password resets, invoices and weekly digests to 40,000 users. Has replaced the mail driver once already and does not want to again. Wants an official driver for the framework, templates with variables, a test mode that never reaches a real inbox, signed webhooks for bounces, and a log that answers "did this user get the reset mail?" without opening a ticket.
- **The Platform Engineer** (v1.0): Platform engineer at a fintech in Frankfurt whose customers sign in with a one-time code sent by email, so a delay of three minutes is an outage. Is on call for it. Reads the status page history before the feature list, wants the SLA in writing with credits, mail queued and retried during an incident, delivery latency per mailbox provider, alerts on bounce spikes, and scoped API keys that can be rotated without a deploy.
- **The Shop Operator** (v1.0): Runs a Shopware shop for kitchen equipment in Germany and Austria with 900 orders a week. Order confirmations, invoices and shipping notices went out through the hosting provider's mail server until a customer found theirs in spam and the support inbox filled up. Wants guided SPF and DKIM set-up a non-specialist can follow, a plugin for the shop, order mail kept apart from the newsletter, and someone to ask when Gmail starts refusing.
- **The Data Protection Officer** (v1.0): In-house data protection officer at a health software company whose appointment reminders and lab-result notices carry patients' names. Treats the sending service as a processor like any other. Reads the DPA, the subprocessor list and the retention section first: whether message bodies are stored and for how long, whether open tracking can be turned off, which entity signs, and whether the EU region covers the logs as well as the mail.
- **The Agency Lead** (v1.0): Technical lead at a web agency in Cologne that builds and runs thirty client applications, from a booking portal to a membership site, each sending its own mail from the client's domain. Wants one account with a sub-account, keys and limits per client, domains verified by API, roles so a client can see their own logs and nothing else, and a price per client that can be written into a maintenance contract.
- **The Skeptic** (v1.0): Has seen "99% deliverability" with no method behind it, "dedicated IPs" that shared a pool with bulk senders, "EU hosting" that covered the API endpoint but not the logs, and seven days of log retention discovered during an incident on day eight. Reads that a vendor is "trusted by thousands of developers" and asks how bounces are suppressed, what is stored per message, which entity signs the DPA — and what moving away would cost.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Hosting location | Not determined | — | — |
| Hosting options | Not determined | — | — |
| Open source | Not determined | — | — |
| Data processing agreement | Not determined | — | — |
| Transfer impact assessment | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Applicable regulations: CAN-SPAM · CASL · GDPR [S7]
- Background checks: yes [S10]
- Breach notice: yes [S8]
- Complaint deadline: 6 [S7]
- Content violation form: https://elasticemail.com/report-content-violation [S7]
- DPA available: yes [S8]
- DPA downloadable: yes [S9]
- DPA GDPR compliant: yes [S9]
- DPA last updated: 2018-05-25 [S9]
- GDPR DPA: yes [S7]
- GDPR guide: yes [S9]
- Nda: yes [S10]
- No certifications claimed: no [S8]
- Out of court dispute resolution: yes [S7]
- Password hashing: yes [S10]
- Safeguards: yes · need to know + confidentiality obligations [S8]
- Ssl API: yes [S10]
- Ssl smtp: yes [S10]

**Data**
- Access rights: yes [S8]
- Account deletion: 30 · yes [S8]
- Backups: yes [S10]
- Collection types: name · email address · other contact information [S8]
- Disclosure legal requests: yes [S8]
- GDPR definition: yes [S8]
- Inactivity deletion: 1 year · 30 [S8]
- International transfer: Canada · United States · EU [S8]
- Minors: no [S8]
- Multi tenancy: yes [S10]
- No selling: yes [S8]
- Portability: yes [S8]
- Redundancy: yes [S10]
- Tenure: yes [S8]
- Third party subcontractors: web hosts · payment processors · delivery and logistics providers · social network integrators · membership vendors [S8]
- Unsubscribes after termination: 60 · yes [S7]
- Usage data anonymized: yes [S8]
- User content retention: 30 [S7]
- Web beacons: open and click tracking to measure campaign success [S8]

**Hosting**
- Ddos: yes [S10]
- Physical security: Constant video surveillance and motion detection sensor monitoring. [S10]
- Regions: EU · United States · Canada [S10]

**Integrations**
- API auth: Access Token / API key · yes [S3]
- API libraries: 12 [S1]
- API libraries: yes [S4]
- API license: MIT [S3]
- API rate limit: 600 · 20 [S3]
- Bigcommerce: sync subscribers' data from forms and pop-ups to mailing list · yes [S4]
- Bit integrations: yes [S4]
- Canva: two-way design/image transfer · yes [S4]
- Categories: Analytics · CMS · Contact management · eCommerce · Email templates · Google · Notification management · Project management · Sending emails · Signup forms · Workflow automation · yes [S4]
- Client libraries: Github repository · yes [S3]
- Direct http: yes [S12]
- Docs: yes · yes · yes [S1]
- Elastic API: yes [S7]
- Featured cloudways: Cloudways · yes [S4]
- Featured wordpress sender: WordPress Sender · yes [S4]
- Featured zapier: Zapier · yes [S4]
- Gravity smtp: WordPress email delivery · yes [S4]
- Ifttt: yes [S4]
- Integrately: yes [S4]
- Lindy: AI agents/workflow automation · yes [S4]
- Mailwizz: yes [S4]
- Mautic: install plugin, fill in API key · yes [S4]
- Mobile message: SMS alerts alongside email campaigns · yes [S4]
- Official libraries: Python · PHP · JavaScript · Java · C# · Go · Ruby · Rust · Angular (TypeScript) · Axios (TypeScript) · Perl · Bash [S12]
- Pagination: 6 [S4]
- Partner program: yes [S4]
- Pipedrive: yes [S4]
- Poper: yes [S4]
- Rest API v4: https://elasticemail.com/developers/api-documentation/rest-api · v4 [S12]
- Savemyleads: Facebook Lead Ads · Google Leads Forms · TikTok · Webhooks · yes [S4]
- Shopify new order notification: integration · Shopify · notification when a new item is ordered and paid for [S19]
- Webhook one per URL: one webhook per URL per account [S16]
- Webhooks: yes · yes [S5]
- Wordpress plugin: WordPress Sender · yes [S1]
- Wordpress plugin: yes [S7]
- Wp mail smtp: yes [S4]

**Legal**
- Address: Elastic Email, 329 Howe St PMB 2135, Vancouver, BC V6C 3N2, Canada [S7]
- Arbitration: Victoria, BC, Canada · yes [S7]
- Class action waiver: yes [S7]
- Company name: Elastic Email Inc. [S6]
- Entity: Canada [S10]
- Entity name: Elastic Email Inc. [S7]
- Governing law: Province of British Columbia, Canada [S7]
- Jurisdiction: Canada (British Columbia and federal privacy commissioners named) [S8]
- Last updated: 2018-05-25 [S8]
- Last updated: July 22, 2025 [S7]
- Location canada: Vancouver · 329 Howe St PMB 2135 · BC · Canada · V6C 3N2 [S6]
- Location poland: Szczecin · ul. Koński Kierat 13 · Poland · 70-563 [S6]

**Pricing**
- Addon dedicated support: yes [S5]
- Addon private ips: yes [S5]
- Credit expiry: 12 [S7]
- Currency: USD [S7]
- Dispute window: 60 [S7]
- Enterprise contact: yes · more than 1,000,000 contacts [S5]
- Free daily limit: 100 [S5]
- Free plan: 3,000 emails/month · 0 [S5]
- Free tier: Free · 0 · 0 · 3000 [S1]
- Free tier: 100 [S14]
- Free tier: 100 [S18]
- No refunds suspended: no [S7]
- Pro features: Inbound Email Processing · Webhooks · Reseller Features · User Management · Sub Accounts · Custom rDNS [S5]
- Pro plan: 50,000 emails/month · 49 [S5]
- Refund window: 30 [S7]
- Signup: yes · no [S4]
- Slider range: 50,000 · 10,000,000 [S5]
- Smtp free tier: 100 [S2]
- Starter: Starter · 19 · 50000 [S1]
- Starter features: Email API and SMTP relay · Email Designer · Suppressions Management · Single & Bulk Email Verification · Tracking and Analytics · Customer Support [S5]
- Starter plan: 50,000 emails/month · 19 [S5]
- Stripe payments: Stripe [S7]
- Suppressions plans: Email API Starter · Email API Pro [S14]

**Product**
- 2FA available: yes [S17]
- 2FA variants: SMS, email, or SMS and email [S17]
- Access control: Access levels are defined for both our accounts, users and our administrators. We support a granular access model where only the required access needed can be granted for all stakeholders. [S10]
- AI openai: OpenAI · no [S7]
- API channel parameter: API channel specified via ChannelName parameter in Options object, e.g. POST /emails [S11]
- API documentation: yes [S1]
- API integration: yes · yes [S1]
- API key auth: api_key [S12]
- API key permissions: API keys have configurable permissions [S12]
- API key shown once: API key only shown once [S12]
- API keys: yes · yes [S1]
- API modules: Accounts · Campaigns · Contacts · Domains · Emails · Events · Files · InboundRoute · Lists · Security · Segments · Statistics · SubAccounts · Suppressions · Templates · Verifications · Webhook [S3]
- API rest architecture: REST API architecture with GET/POST/PUT/DELETE request types [S3]
- Auto credit billing: yes [S3]
- Campaign automation trigger: yes [S3]
- Campaign ax split: yes [S3]
- Campaign status enum: Deleted · Active · Processing · Sending · Completed · Paused · Cancelled · Draft [S3]
- Campaigns via smtp: Campaigns can be sent via self-hosted tools like Sendy or MailWizz; pay only for emails sent, not contacts stored [S2]
- Channel auto creation: yes [S11]
- Channel name max length: 191 [S11]
- Channels view: Created channels searchable in Activity>Channels tab [S11]
- Check suppressed reasons: yes [S14]
- Consent requirement: yes [S7]
- Custom headers setting: Custom headers option must be enabled in Settings>Advanced [S11]
- Daily send limit: yes [S3]
- Delivery optimization opt out: Delivery Optimization Engine · Advanced tab of Settings · yes [S8]
- Dkim benefit: yes [S13]
- Dkim documented in domain verification article: domain verification article, DKIM section [S13]
- Dkim keys generated: yes [S13]
- Dmarc generator: yes [S1]
- Domain verification: yes · yes · yes · yes [S3]
- Event logging: Event logging including password changes, password forgets, account email changes, payments, API Key changes/additions/deletions, exports and more. [S10]
- Free daily: 100 [S1]
- Free tier: yes · 100 [S6]
- Free tier: 100 emails/day · yes [S15]
- Free trial: yes [S4]
- Free trial available: yes [S19]
- Free trial note: 100 [S5]
- In house mta: Uses own in-house made mail transfer agent for deliverability [S2]
- In house mta: yes [S1]
- Inbound route module: yes [S3]
- Inbound routing: yes · yes [S1]
- Link tracking: None · Delete · Http · ExternalHttps · InternalCertHttps · LetsEncryptCert [S3]
- Login logging: Login log with details such as user agent, browser, IP. [S10]
- Modules: Email Marketing · Email API · Inbox [S6]
- Monitoring: 24/7 human monitoring of mail and automated protection against malicious content [S10]
- No coding required: yes [S2]
- No coding smtp: yes [S1]
- No contact management: no · yes [S14]
- Referral commission: 20 [S7]
- Referral payout method: PayPal [S7]
- Referral payout minimum: 100 · USD [S7]
- Reseller permission: yes [S7]
- Reseller support responsibility: yes [S7]
- Right to object restriction: yes · yes [S8]
- Security measures: 2FA, Secure API Keys, Granular user access, Automated alerts, SSO, GDPR compliance, Anti-spam protection [S1]
- Setup: Instant setup [S18]
- Setup time: SMTP credentials can be obtained in under a minute [S2]
- Smtp: SMTP feature listed [S14]
- Smtp channel header: Custom headers 'Channel' or 'X-ElasticEmail-Channel' set the SMTP sending channel [S11]

**Subprocessors**
- Payments: Stripe · PayPal · no [S10]

**Support**
- 24 7 contact: 24/7 [S12]
- API support email: support@elasticemail.com [S3]
- Availability: yes [S1]
- Availability: 24/7 [S11]
- Availability: Customer Support Team · 24/7 [S16]
- Cancellation email: support@elasticemail.com [S7]
- Channels: email · chat [S1]
- Delivery experts: SPF · DKIM · dedicated IP addresses [S1]
- Dkim essentiality: yes [S13]
- Help center: yes [S6]
- Integration contact: contact support for integration questions · yes [S4]
- Phishing contact: support@elasticemail.com [S10]

46 more facts on the canonical page: https://whats-best.ai/software/transactional-email/elastic-email

## Questions

### Is Elastic Email API European?

No. whats-best.ai classifies Elastic Email API as Rest of world.

### Where does Elastic Email API store data?

The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention the EU, United States and Canada as hosting locations, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/14174).

### Does Elastic Email API have a free plan?

Yes. Elastic Email API has a free plan, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/14079).

### What are the best alternatives to Elastic Email API?

As of 2 Nov 2026, the panel rates [Lettermint (3.5/5)](https://whats-best.ai/software/transactional-email/lettermint), [Bird Email API (formerly SparkPost) (3/5)](https://whats-best.ai/software/transactional-email/bird-email-api) and [Postmark (3/5)](https://whats-best.ai/software/transactional-email/postmark) highest among the other 15 Transactional Email products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Lettermint](https://whats-best.ai/software/transactional-email/lettermint) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Elastic Email API alternatives](https://whats-best.ai/software/transactional-email/elastic-email/alternatives).

## What this page leaves out

- 9 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 4 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 integrations fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement.

## Sources

- [S1] Vendor homepage (email API): https://elasticemail.com/email-api (checked 2026-11-01)
- [S2] Features page (SMTP relay): https://elasticemail.com/smtp (checked 2026-11-01)
- [S3] API documentation: https://elasticemail.com/developers/api-documentation/rest-api (checked 2026-11-01)
- [S4] Integrations page: https://elasticemail.com/integrations (checked 2026-11-01)
- [S5] Pricing page: https://elasticemail.com/email-api-pricing (checked 2026-11-01)
- [S6] Legal notice (company locations): https://elasticemail.com/contact (checked 2026-11-01)
- [S7] Terms of service: https://elasticemail.com/resources/usage-policies/terms-of-use (checked 2026-11-01)
- [S8] Privacy policy: https://elasticemail.com/resources/usage-policies/privacy-policy (checked 2026-11-01)
- [S9] Data processing agreement (dpa): https://elasticemail.com/resources/usage-policies/data-processing-addendum (checked 2026-11-01)
- [S10] Security / trust page: https://elasticemail.com/resources/usage-policies/security (checked 2026-11-01)
- [S11] Sending API, SMTP & developer experience — found from sitemap: http://help.elasticemail.com/en/articles/3119570-channels-for-smtp-and-api (checked 2026-11-01)
- [S12] Sending API, SMTP & developer experience — found from sitemap: http://help.elasticemail.com/en/articles/2376694-how-to-send-emails-via-api (checked 2026-11-01)
- [S13] Deliverability & sender reputation — found from sitemap: http://help.elasticemail.com/en/articles/6379963-importance-of-spf-and-dkim-on-your-domain (checked 2026-11-01)
- [S14] Deliverability & sender reputation — found from sitemap: https://elasticemail.com/suppressions (checked 2026-11-01)
- [S15] Message logs, events & webhooks — found from sitemap: https://elasticemail.com/webhooks (checked 2026-11-01)
- [S16] Message logs, events & webhooks — found from sitemap: http://help.elasticemail.com/en/articles/17578018-webhook-request-signing-and-json-delivery (checked 2026-11-01)
- [S17] Message data, retention & security — found from sitemap: http://help.elasticemail.com/en/articles/2783376-how-to-secure-account-with-two-factor-authentication (checked 2026-11-01)
- [S18] Reliability, accounts & support — found from sitemap: https://elasticemail.com/subaccounts (checked 2026-11-01)
- [S19] Reliability, accounts & support — found from sitemap: https://elasticemail.com/integrations/shopify (checked 2026-11-01)
- [S20] Code repository (open-source licence) — found from the homepage: https://github.com/elasticemail (checked 2026-11-01)

---

Cite as: whats-best.ai, "Elastic Email API — Transactional Email", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/transactional-email/elastic-email

Corrections: https://whats-best.ai/correct/1283?target=page