Your messages never leave France
Compute, database and object storage are at OVHcloud, in Roubaix and Gravelines. No replication outside the territory, no American service in the path of a message.
Data sovereignty
Knowing where your data is should not take an investigation
We validate electronic signature journeys: we know what it is to justify every link in the chain to an auditor, and to discover that a supplier replicates your data on a continent nobody signed off. This page exists so you do not have to write to us to get it.
One sub-processor outside the strict European perimeter
Stripe, to take payment. It never sees the content of a message: only your billing identity. We say so rather than hiding it behind a story of total sovereignty.
The DPA is downloaded, not negotiated
The data processing agreement is available online, signed, without going through a salesperson or waiting for a procurement cycle. The annexes list the sub-processors and the technical measures.
Encryption at rest and in transit
TLS required on the API, STARTTLS on inbound SMTP, encrypted volumes and object storage. API keys are stored hashed, never in clear.
Retention you choose short
Three days by default, up to 90 depending on the plan, and a performance mode that stores nothing at all. The best protection for test data remains not keeping it.
Deletion on request, without friction
Purge an inbox, an organisation or a whole account from the app, effective immediately, backups included within 30 days.
Sub-processors
The full list, kept up to date
Every addition is announced to account administrators thirty days in advance.
| Sub-processor | Role | Location | Data concerned | Transfer outside the EU |
|---|---|---|---|---|
| OVHcloud | Hébergement, calcul, base de données, stockage objet | Roubaix et Gravelines (France) | Toutes les données de service : messages, pièces jointes, métadonnées, comptes | Aucun transfert hors UE |
| Stripe Payments Europe | Encaissement, facturation, TVA | Irlande (entité européenne), groupe de droit américain | Nom, email de facturation, adresse, moyen de paiement. Aucune donnée de message | Possible vers les États-Unis, encadré par les clauses contractuelles types |
| Brevo | Emails transactionnels du service (vérification, alertes, factures) | France | Adresse email et contenu des notifications | Aucun transfert hors UE |
| Plausible Analytics | Mesure d’audience du site public | Union européenne, auto-hébergé | Statistiques agrégées, sans cookie ni identifiant individuel | Aucun transfert hors UE |
What we do not claim
The limits, stated plainly
A sovereignty story with no caveats is a sales pitch. Here are ours.
We are not SecNumCloud qualified and will not be tomorrow. If your requirements demand it, tell us — but do not take our word for it.
We are not ISO 27001 certified at this stage. Our technical measures are documented in the DPA annexes, and auditable on request.
Our terms ask you not to send real personal data into test inboxes. We know it happens anyway: that is why default retention is three days and why encryption at rest is not optional.
Your first inbox in two minutes
The free plan asks for no card. If you are migrating from Mailosaur, the compatibility layer saves you from rewriting your tests.