# Mailjet Email API — Transactional Email Mailjet Email API by Mailjet SAS holds a panel rating of 3/5 from 6 AI judges (category median 3/5), as of 2026-11-01. Provenance: EU-Made; sovereignty: not determined. - Vendor: Mailjet SAS (https://www.mailjet.com/products/email-api/) - Category: [Transactional Email](https://whats-best.ai/software/transactional-email.md) - Provenance (editorial classification): EU-Made - Canonical page: https://whats-best.ai/software/transactional-email/mailjet-email-api - Alternatives: https://whats-best.ai/software/transactional-email/mailjet-email-api/alternatives ([markdown](https://whats-best.ai/software/transactional-email/mailjet-email-api/alternatives.md)) - Data as of: 2026-11-06 · evaluated 2026-11-01 · oldest source captured 2026-11-01 **AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology ## At a glance - Vendor: Mailjet SAS - Headquarters: Not stated on the vendor’s pages as of 1 Nov 2026 - Data hosting: Default not stated; pages mention United States, Europe and the EU [S7] - Free plan: Yes, per the vendor’s own page [S1] ## The panel's verdict Mailjet Email API, sold by Mailjet SAS of Paris under Sweden's Sinch group, is a transactional email service with weighted totals of 6.1 to 6.3. It is strongest on sovereignty, where scores sit at 7: the vendor's own pages state data is stored and processed in the EU, on Google Cloud in Frankfurt and Saint-Ghislain across two regions and six data centres, with a published DPA incorporating the 2021 standard contractual clauses under Swedish law and the Swedish authority IMY — though the privacy notice names AWS, MacStadium and Rackspace among hosting third parties, and the terms acknowledge affiliates outside the chosen jurisdiction. Reliability follows at 6 to 7, with a published 99.99% SLA offering 5% credits per thirty minutes capped at 50% of monthly fees. Pricing transparency and observability, both at 5 to 6, are weakest: the captured pages give no figure for the overage rate, and the bench found no public information on configurable log retention beyond the thirty days stated for event timestamps and counts. No criterion spans more than one point. **Speaks for it:** - Published 99.99% availability SLA for the API, SMTP and outbound delivery, with 5% credits per thirty minutes of downtime capped at 50% of monthly fees - Data storage and processing in the EU stated on the vendor's own pages — Google Cloud data centres in Frankfurt and Saint-Ghislain across two regions and six data centres — with a published DPA incorporating the 2021 standard contractual clauses - Four public tiers from free at $0 for 6,000 emails a month with 200 a day and no credit card required at sign-up to Premium at $29 for 15,000, with no setup fees and a one-month self-service term - Documented SMTP relay on ports 25, 465, 587 and 2525 and a REST send API, with official libraries for PHP, Ruby, Python, C#, Java and Node.js - Guided SPF, DKIM and DMARC set-up naming common DNS hosts, dedicated IPs with a support-built warm-up plan, and Certified Senders Alliance certification since 2014 **Held against it:** - Neither the overage rate per additional 1,000 emails nor dedicated-IP pricing appears on the captured pages - We found no public information on a sandbox or test mode, idempotency keys or batch sending - We found no public information on two-factor authentication, SSO, scoped API keys, IP allow-listing or an audit log - We found no public information on webhook signatures, retry schedules or the receiving server's answer on a bounce **Best for:** - You send from Europe and want a French contracting entity, storage on named Google Cloud regions in Frankfurt and Saint-Ghislain, and a published DPA with the 2021 standard contractual clauses - Your developers connect via SMTP relay or REST API and rely on official libraries for PHP, Ruby, Python, C#, Java or Node.js, starting on the free tier - You have no deliverability specialist in-house and want guided SPF, DKIM and DMARC set-up with a support-built IP warm-up plan - You want a written availability guarantee before committing — 99.99% with 5% service credits per thirty minutes of downtime **Avoid if:** - Your volumes fluctuate and the per-additional-1,000-email overage rate must be in your budget — the pricing page names the overage without giving a figure - Your compliance review requires a fully European processing chain — the privacy notice names AWS, MacStadium and Rackspace among hosting third parties, US providers for support and payments, and the terms acknowledge affiliates outside the chosen jurisdiction - You need the vendor to enforce separation of transactional and marketing traffic — the guidance says most customers separate the streams themselves with different sending addresses, sub-accounts or custom headers ## Scores by judge and criterion Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price, or the judge found no public information on that criterion. | Criterion | The SaaS Developer | The Platform Engineer | The Shop Operator | The Data Protection Officer | The Agency Lead | The Skeptic | | --- | --- | --- | --- | --- | --- | --- | | Sending API, SMTP & developer experience | 3/5 | 3/5 | 3/5 | 3/5 | 3.5/5 | 3/5 | | Deliverability & sender reputation | 3/5 | 3/5 | 3.5/5 | 3/5 | 3.5/5 | 3/5 | | Message logs, events & webhooks | 3/5 | 3/5 | 2.5/5 | 3/5 | 3/5 | 3/5 | | Message data, retention & security | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | 3/5 | | Reliability, accounts & support | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3/5 | 3.5/5 | | European sovereignty | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 | | Pricing transparency | 3/5 | 3/5 | 2.5/5 | 2.5/5 | 2.5/5 | 2.5/5 | | **Weighted verdict** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** | **3/5** | ### The judges - **The SaaS Developer** (v1.0): Backend developer at a twelve-person B2B SaaS in Hamburg, built on Laravel, that sends sign-up confirmations, password resets, invoices and weekly digests to 40,000 users. Has replaced the mail driver once already and does not want to again. Wants an official driver for the framework, templates with variables, a test mode that never reaches a real inbox, signed webhooks for bounces, and a log that answers "did this user get the reset mail?" without opening a ticket. - **The Platform Engineer** (v1.0): Platform engineer at a fintech in Frankfurt whose customers sign in with a one-time code sent by email, so a delay of three minutes is an outage. Is on call for it. Reads the status page history before the feature list, wants the SLA in writing with credits, mail queued and retried during an incident, delivery latency per mailbox provider, alerts on bounce spikes, and scoped API keys that can be rotated without a deploy. - **The Shop Operator** (v1.0): Runs a Shopware shop for kitchen equipment in Germany and Austria with 900 orders a week. Order confirmations, invoices and shipping notices went out through the hosting provider's mail server until a customer found theirs in spam and the support inbox filled up. Wants guided SPF and DKIM set-up a non-specialist can follow, a plugin for the shop, order mail kept apart from the newsletter, and someone to ask when Gmail starts refusing. - **The Data Protection Officer** (v1.0): In-house data protection officer at a health software company whose appointment reminders and lab-result notices carry patients' names. Treats the sending service as a processor like any other. Reads the DPA, the subprocessor list and the retention section first: whether message bodies are stored and for how long, whether open tracking can be turned off, which entity signs, and whether the EU region covers the logs as well as the mail. - **The Agency Lead** (v1.0): Technical lead at a web agency in Cologne that builds and runs thirty client applications, from a booking portal to a membership site, each sending its own mail from the client's domain. Wants one account with a sub-account, keys and limits per client, domains verified by API, roles so a client can see their own logs and nothing else, and a price per client that can be written into a maintenance contract. - **The Skeptic** (v1.0): Has seen "99% deliverability" with no method behind it, "dedicated IPs" that shared a pool with bulk senders, "EU hosting" that covered the API endpoint but not the logs, and seven days of log retention discovered during an incident on day eight. Reads that a vendor is "trusted by thousands of developers" and asks how bounces are suppressed, what is stored per message, which entity signs the DPA — and what moving away would cost. ## European sovereignty — proven facts Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined. | Dimension | Finding | Points | Source | |---|---|---|---| | Legal entity | Not determined | — | — | | Hosting location | Not determined | — | — | | Hosting options | Not determined | — | — | | Open source | Not determined | — | — | | Data processing agreement | Not determined | — | — | | Transfer impact assessment | Not determined | — | — | ## Key facts Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources). **Compliance** - Arbitration: yes [S7] - Argentina deviation: Law No. 25.326 · Argentina [S9] - Article30 register: yes · Artikel 30 DSGVO [S18] - Article30 registry: yes [S17] - Audit evidence: ISO 27001 certification · independent third-party audit or attestation report [S9] - Beta terms: Test/Beta/early access services subject to separate Sinch Email Test Terms; SLAs do not apply to Unsupported Services [S8] - Bug bounty: yes · yes · HackerOne [S20] - CCPA covered: yes [S9] - Certifications: yes · yes · yes · yes [S1] - Certifications: yes · yes · EU-based data centers · yes · yes [S2] - Certifications list: CCPA · GDPR · ISO 27001 · PCI DSS · SOC 2 · CSA STAR Level 1 · HIPAA Compliant [S10] - Csa certified: Certified Senders Alliance · 2014 [S10] - Data confidentiality: no [S18] - Data subject rights: erasure · rectification · data portability · information · to be forgotten · restriction [S17] - Data subject rights: Löschung · Berichtigung · Datenübertragbarkeit · Auskunft · Vergessenwerden · Einschränkung [S18] - DPA available: yes [S6] - DPA available: yes [S17] - DPA available: Standard-AVV (Auftragsverarbeitungsvertrag) · yes [S18] - DPA location: DPA at https://sinch.com/legal/terms-and-conditions/other-sinch-terms-conditions/data-protection-agreement/ [S8] - DPA panel disputes: yes · yes [S7] - DPA precedence: yes [S9] - DPA sccs: yes · yes [S8] - DPA version: 8 · 2025-10-29 [S9] - Dpf certification: yes · yes [S7] - Encryption protocols: SSL · TLS [S18] - EU US dpf email: Sinch Email · yes [S9] - GDPR: yes · yes [S10] - GDPR: yes · yes · yes · yes · yes [S11] - GDPR: yes [S17] - GDPR compliance: yes [S18] - HIPAA: yes · yes [S10] - International transfers: yes · yes [S9] - ISO 27001: yes · ISO/IEC 27001:2022 [S9] - ISO 27001: yes · yes [S20] **Data** - Backup daily: multiple disks · daily · yes [S17] - Backup responsibility: Vendor backs up only per Service Order; customer responsible for regular backups [S8] - Breach notification: notify without undue delay [S9] - Confidentiality no third party: no [S17] - Customer data ownership: yes [S8] - Data subject request tools: APIs · interfaces to search event data · suppressions · retrieve message content [S9] - Deletion after termination: 90 · yes [S9] - Dpia assistance: Customer · yes [S9] - Encrypted storage: yes [S9] - Encryption at rest transit: AES256 minimum · TLS 1.2 or higher [S9] - Message routing data use: Vendor may view and use message routing data for general business purposes [S8] - No sensitive data: no [S9] - Return format: yes [S9] - Subprocessor general authorization: yes [S9] - Subprocessor list URL: https://sinch.com/legal/data-protection-agreement-sub-processors/ [S9] - Subprocessor notification: 10 business days · 30 [S9] - Usage data collection: Vendor collects usage data (Website, API, SMTP, filtering choices) [S8] **Hosting** - Data centers: Frankfurt, Germany · Saint-Ghislain, Belgium · Google Cloud Platform [S17] - Data centers: Frankfurt (Deutschland) · Saint-Ghislain (Belgien) · Google Cloud Platform [S18] - Data residency: EU · 2 · 6 [S20] - EU data centers: yes [S10] - Infrastructure: Google Cloud Platform · 3000 · 700 [S20] - Providers: Google Cloud Platform · AWS · MacStadium · Rackspace [S7] - Region: EU [S11] - Regions: United States · Europe · no [S7] **Integrations** - API languages: PHP · Ruby · Python · C# · Java · Node.js [S3] - Documentation: yes · minutes [S2] - External queuing: yes [S3] - Inbound parse: yes [S1] - Libraries: PHP · Ruby · Python · C# · Java · Node.js [S1] - Mailgun webhooks: Mailgun webhooks can send event data to other platforms or notify Slack and other tools [S15] - Protocols: SMTP relay · send API [S1] - Rest API: yes [S1] - Section: yes [S6] - Webhooks: delivery · opens · clicks · bounces [S1] - Webhooks: yes · , opens · clicks · bounce · block [S3] **Legal** - Assignment: Assignment requires consent except to Affiliate/successor in reorganization or sale [S8] - Aup reference: Acceptable Use Policy at https://www.mailgun.com/legal/aup/ [S8] - Claims limitation years: 2 [S8] - Class action waiver: yes [S8] - Controller entity: Sinch AB (publ) and subsidiaries including Mailgun, Mailgun Optimize, Mailjet and Email on Acid [S7] - Copyright: 2026 · Sinch [S9] - Governing law mailjet: Mailjet SAS/GmbH agreements: French law, Paris courts; Mailjet SaaS Ltd: England and Wales, London; Mailjet Emailing SL: Spain, Madrid [S8] - Indirect damages excluded: yes [S8] - Ip indemnification: Vendor indemnifies customer for third-party IP infringement claims from Service use [S8] - Liability cap: Liability capped at fees paid in the 12 months preceding the claim [S8] - Notice last updated: 2026-09-29 [S7] - Pen testing restriction: Penetration testing requires prior written consent and separate agreement [S8] - Provider brands: Sinch Email comprises the umbrella brands Mailgun, Mailjet, and Email on Acid [S8] - Reinstatement fee: 500 [S8] - Service modification right: Vendor may discontinue obsolete platforms and migrate to new infrastructure [S8] - SLA last revised: SLA last revised 01/14/2022 [S19] - Termination cure days: 45 [S8] - Termination linkage: yes [S9] - Termination nonpayment days: 10 [S8] - Terms last revised: 2025-01-15 [S8] - Warranty disclaimer: All implied warranties disclaimed to maximum extent permitted by law [S8] **Pricing** - Basis: emails sent per month [S1] - Billing cycle self service: yes · 30 · 1 [S8] - Cancel anytime: yes [S1] - Custom: yes [S6] - Custom plan: yes [S12] - Dedicated ip plans: Premium · Custom · yes · subject to compliance verification [S14] - Essential: 19 · 15000 [S6] - Essential unlimited contacts: essential · yes [S6] - Free: 200 · 0 · 6000 [S6] - Free contacts: free · 1000 [S6] - Free no credit card: no [S6] - Free signup: yes [S12] - Free tier: yes · no [S1] - Free tier: yes · yes [S2] - Free tier: yes [S11] - Invoice dispute window days: 120 [S8] - Late payment interest: 1.5 [S8] - Monthly no commitment: yes [S6] - No rollover: no [S6] - No setup fee: no [S11] - No setup fees: no [S1] - Overage billing: per 1000 emails [S6] - Payment methods: yes · yes · 50 [S6] - Payment terms days: 30 [S8] - Plan changes: yes · yes [S8] - Premium: 29 · 15000 [S6] - Price change notice: Self-service rate changes effective immediately upon Control Panel posting; contract customers at next renewal [S8] - Scale: 500000 · 6000 [S2] - SLA credit cap: 50 [S19] - SLA credit claim window: 30 [S19] - SLA credit exclusions: breach of ToS · denial of service attacks · virus activity · hacking attempts · circumstances outside Mailgun's control [S19] - SLA credit rate: monthly · 5 [S19] - Starter: 9 · 8000 [S6] **Product** - Advanced permissions: yes [S6] - Analytics: Real-time analytics dashboards [S2] - Anonymous tracking: yes [S10] - API documentation: yes [S3] - API guidance: yes [S4] - API reference: API Reference — endpoint-level reference docs for all APIs [S5] - Authentication custom domains only: yes · no [S13] - Authentication deliverability benefit: SPF & DKIM setup improves deliverability and inbox placement [S13] - Authentication dns setup: DNS records · access to domain hosting DNS records [S13] - Authentication records: SPF · DMARC · DKIM [S2] - Availability SLA: 99.9 [S20] - Backup policy: yes · yes [S18] - Consulting calls: yes [S4] - Content API: Content API — APIs to help with content for your email [S5] - Control panel definition: Control Panel: customer portal with pricing terms and support contacts [S8] - Custom extras: Dedicated TAM, IP strategy, blocklist monitoring, deliverability reports, activity logs, onboarding/training/consulting [S6] - Custom unlimited subaccounts: custom [S6] - Custom unlimited users: custom [S6] - Customers: 100K+ [S11] - Data confidentiality: only when required by law or explicitly authorized by customer [S10] - Data types: name · email · telephone numbers · IP address · contact list data · message or call content [S9] - Dedicated ip application: 3000 · 100000 · Customer Support team / online ticket system [S14] - Dedicated ip purpose: Dedicated IP gives full control of emails from own IP and helps optimize IP reputation for inbox placement [S14] - Dedicated ip volume recommendation: 5000 · 150000 · 100000 [S14] - Dedicated specialist: yes [S4] - Deliverability monitoring: Real-time tracking of opens, clicks, bounces, blocks [S2] - Deliverability services dedicated ips: yes · yes [S3] - Deliverability support: yes [S2] - Delivery guarantee: no [S8] - Developer channels: yes · yes · yes [S6] - Disaster recovery: yes [S10] - Drag and drop editor: yes [S3] - Encrypted daily backups: geographically separated environments within the EU · yes [S10] **Subprocessors** - Affiliates outside region: Affiliates/subcontractors may be based outside the customer's chosen data-storage jurisdiction [S8] - Customer engagement: Gainsight · Customer.io · Looker · Snowflake · Salesforce · Uservoice · Zapier · Zendesk [S7] - Data sale: no [S7] - Payment providers: Stripe · Chargify · Aria · Authorize.net [S7] - Website tools: Drift · Optimizely · VWO · Segment · Split.io · Google Analytics · GitHub · Unbounce · Twitter [S7] **Support** - Deliverability team: Support-Team für Zustellbarkeit bei Einrichtung, Überwachung und Aufrechterhaltung [S11] - Designated contacts only: no · yes [S8] - Docs: Dokumentation und entwicklerfreundliche Tools; Integration in Minuten [S11] - Documentation authentication: Documentation exists for authenticating domains with SPF & DKIM [S13] - Documentation available: Step-by-step documentation available for Parse API setup [S12] - Priority: premium · yes [S6] - Tam monitoring: Support teams and TAMs help monitor reputation, avoid blacklists, resolve deliverability issues [S14] - Ticket access: support ticket via customer control panel · yes [S19] 122 more facts on the canonical page: https://whats-best.ai/software/transactional-email/mailjet-email-api ## Questions ### Is Mailjet Email API European? Yes. whats-best.ai classifies Mailjet Email API as EU-Made. ### Where does Mailjet Email API store data? The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention United States, Europe and the EU as hosting locations, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/14214). ### Does Mailjet Email API have a free plan? Yes. Mailjet Email API has a free plan, per [the vendor’s page captured 1 Nov 2026](https://whats-best.ai/evidence/14189). ### What are the best alternatives to Mailjet Email API? As of 2 Nov 2026, the panel rates [Lettermint (3.5/5)](https://whats-best.ai/software/transactional-email/lettermint), [Bird Email API (formerly SparkPost) (3/5)](https://whats-best.ai/software/transactional-email/bird-email-api) and [Postmark (3/5)](https://whats-best.ai/software/transactional-email/postmark) highest among the other 15 Transactional Email products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [Lettermint](https://whats-best.ai/software/transactional-email/lettermint) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [Mailjet Email API alternatives](https://whats-best.ai/software/transactional-email/mailjet-email-api/alternatives). ## Head-to-head - [Mailjet Email API vs Brevo Transactional Email](https://whats-best.ai/compare/brevo-transactional-vs-mailjet-email-api.md) ## What this page leaves out - 12 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 4 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 3 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 3 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 2 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. - 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. - 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. - 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. - 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. ## Sources - [S1] Vendor homepage (email API): https://www.mailjet.com/products/email-api/ (checked 2026-11-01) - [S2] Features page (SMTP relay): https://www.mailjet.com/products/email-api/smtp-relay/ (checked 2026-11-01) - [S3] Features page (transactional email): https://www.mailjet.com/solutions/use-cases/transactional-email/ (checked 2026-11-01) - [S4] Features page (deliverability): https://www.mailjet.com/products/deliverability/expert-deliverability/ (checked 2026-11-01) - [S5] API documentation: https://dev.mailjet.com/ (checked 2026-11-01) - [S6] Pricing page: https://www.mailjet.com/pricing/ (checked 2026-11-01) - [S7] Privacy policy: https://www.mailjet.com/legal/privacy-policy/ (checked 2026-11-01) - [S8] Terms of service: https://www.mailjet.com/legal/terms/ (checked 2026-11-01) - [S9] Data processing agreement (dpa): https://sinch.com/legal/terms-and-conditions/other-sinch-terms-conditions/data-processing-agreement/ (checked 2026-11-01) - [S10] Security / trust page: https://www.mailjet.com/products/data-security-and-privacy/ (checked 2026-11-01) - [S11] Sending API, SMTP & developer experience — found from sitemap: https://www.mailjet.com/de/produkte/email-api/smtp-relay/ (checked 2026-11-01) - [S12] Sending API, SMTP & developer experience — found from sitemap: https://www.mailjet.com/products/email-api/parse-api/ (checked 2026-11-01) - [S13] Deliverability & sender reputation — found from sitemap: https://www.mailjet.com/email-playbook/deliverability/domain-authentication/ (checked 2026-11-01) - [S14] Deliverability & sender reputation — found from sitemap: https://www.mailjet.com/products/email-api/dedicated-ip/ (checked 2026-11-01) - [S15] Message logs, events & webhooks — found from sitemap: https://www.mailjet.com/products/email-api/event-api/ (checked 2026-11-01) - [S16] Message logs, events & webhooks — found from sitemap: https://www.mailjet.com/de/produkte/email-api/event-api/ (checked 2026-11-01) - [S17] Message data, retention & security — found from sitemap: https://www.mailjet.com/legal/security-privacy/ (checked 2026-11-01) - [S18] Message data, retention & security — found from sitemap: https://www.mailjet.com/de/rechtliches/sicherheit-datenschutz/ (checked 2026-11-01) - [S19] Reliability, accounts & support — found from sitemap: https://www.mailjet.com/legal/sla/ (checked 2026-11-01) - [S20] Reliability, accounts & support — found from sitemap: https://www.mailjet.com/products/email-api/infrastructure/ (checked 2026-11-01) --- Cite as: whats-best.ai, "Mailjet Email API — Transactional Email", AI panel analysis, as of 2026-11-06. https://whats-best.ai/software/transactional-email/mailjet-email-api Corrections: https://whats-best.ai/correct/1269?target=page