SaaS transparency ranking · Sales and marketing
Email marketing software
37 vendors · updated 2026-10-15 · 4 without enough data for a score
Email marketing platforms, ranked by what they publish about how they handle your subscriber data.
Public transparency score, not a product or security rating. Transparency means: published on the vendor's own site, readable without a login, found by us at the addresses we checked.
+5points above the median of every category we measure
- Email marketing22
- All categories17
- A0 0%
- B4 12%
- C4 12%
- D5 15%
- E3 9%
- F17 52%
- Data processing agreement14, filter to these
- Subprocessor list6, filter to these
- Data location stated11, filter to these
- Status page with history13, filter to these
- Band B4, filter to these
- Band C4, filter to these
-
1
Mailgunmailgun.comTransparency 83/100 BBand B
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: found
10 found2 gapsGaps Subprocessor list, security.txt (RFC 9116)Transparency alternatives
-
2
Customer.iocustomer.ioTransparency 78/100 BBand B
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
8 found4 gapsGaps No third-party tracking before consent, Uptime SLA with a figure, +2Transparency alternatives
-
3
ActiveCampaignactivecampaign.comTransparency 74/100 BBand B
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: found
9 found3 gapsGaps Data location stated, No third-party tracking before consent, +1Transparency alternatives
-
4
EmailOctopusemailoctopus.comTransparency 70/100 BBand B
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: found
7 found5 gapsGaps Status page with history, No third-party tracking before consent, +3Transparency alternatives
-
5
Klaviyoklaviyo.comTransparency 65/100 CBand C
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
7 found5 gapsGaps Data location stated, No third-party tracking before consent, +3Transparency alternatives
-
6
Buttondownbuttondown.comTransparency 61/100 CBand C
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
7 found5 gapsGaps Data location stated, Status page with history, +3Transparency alternatives
-
7
Mailchimpmailchimp.comTransparency 57/100 CBand C
- Data processing agreement: found
- Subprocessor list: found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
6 found6 gapsGaps Status page with history, HTTPS enforced with HSTS, +4Transparency alternatives
-
8
Omnisendomnisend.comTransparency 57/100 CBand C
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: found
- Named privacy contact: found
7 found5 gapsGaps Subprocessor list, Data location stated, +3Transparency alternatives
-
9
Postmarkpostmarkapp.comTransparency 52/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: found
6 found6 gapsGaps Subprocessor list, Data location stated, +4Transparency alternatives
-
10
CleverReachcleverreach.comTransparency 48/100 DBand D
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: found
6 found6 gapsGaps Data processing agreement, Subprocessor list, +4Transparency alternatives
-
11
Emailableemailable.comTransparency 48/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
5 found7 gapsGaps Subprocessor list, Data location stated, +5Transparency alternatives
-
12
Kitkit.comTransparency 48/100 DBand D
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: found
- Named privacy contact: not found
5 found7 gapsGaps Subprocessor list, Status page with history, +5Transparency alternatives
-
13
Elastic Emailelasticemail.comTransparency 43/100 DBand D
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
5 found7 gapsGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
14
Brevobrevo.comTransparency 36/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not found
- Named privacy contact: not found
4 found7 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +5Transparency alternatives
-
15
MailBlustermailbluster.comTransparency 30/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
16
Mailcoachmailcoach.appTransparency 26/100 EBand E
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
17
Mailmodomailmodo.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
18
SendFoxsendfox.comTransparency 22/100 FBand F
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Subprocessor list, Data location stated, +8Transparency alternatives
-
19
Substacksubstack.comTransparency 22/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
3 found9 gapsGaps Data processing agreement, Subprocessor list, +7Transparency alternatives
-
20
Campaign Monitorcampaignmonitor.comTransparency 19/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not measured
- Public pricing: found
- Certifications named: found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
3 found8 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +6Transparency alternatives
-
21
AWeberaweber.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
22
Benchmark Emailbenchmarkemail.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
23
MailPoetmailpoet.comTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
24
Sendersender.netTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
25
Warmboxwarmbox.aiTransparency 17/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
26
Brick Street CONNECTbrickstreetsoftware.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): found
- Notice before subprocessors change: not found
- Named privacy contact: not found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
27
Emailchefemailchef.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
28
Flodeskflodesk.comTransparency 13/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
2 found10 gapsGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
29
inwiseinwise.comTransparency 13/100 FBand F
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Subprocessor list, Data location stated, +9Transparency alternatives
-
30
Cloudycloudy.emailTransparency 9/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
31
Inxmailinxmail.deTransparency 5/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not found
- Named privacy contact: found
1 found10 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +8Transparency alternatives
-
32
Rapidmailrapidmail.deTransparency 4/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: found
1 found11 gapsGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
33
Pinpointepinpointe.comTransparency 0/100 FBand F
- Data processing agreement: not found
- Subprocessor list: not found
- Data location stated: not found
- Status page with history: not found
- Public pricing: not found
- Certifications named: not found
- Uptime SLA with a figure: not found
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not measured
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not found
- Named privacy contact: not found
0 found11 gaps1 not measuredGaps Data processing agreement, Subprocessor list, +9Transparency alternatives
-
Constant Contactconstantcontact.comNot enough data: 4 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: found
- Public pricing: not measured
- Certifications named: not measured
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not found
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
1 found3 gaps8 not measuredGaps HTTPS enforced with HSTS, No third-party tracking before consent, +1
-
MailerLitemailerlite.comNot enough data: 6 of 12 criteria measured, so no transparency score
- Data processing agreement: found
- Subprocessor list: not found
- Data location stated: not measured
- Status page with history: not found
- Public pricing: not measured
- Certifications named: not found
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: not found
- No third-party tracking before consent: not found
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
1 found5 gaps6 not measuredGaps Subprocessor list, Status page with history, +3
-
Mailjetmailjet.comNot enough data: 0 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not measured
- Public pricing: not measured
- Certifications named: not measured
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: not measured
- No third-party tracking before consent: not measured
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
0 found0 gaps12 not measuredNothing measured, so no score
-
Moosendmoosend.comNot enough data: 0 of 12 criteria measured, so no transparency score
- Data processing agreement: not measured
- Subprocessor list: not measured
- Data location stated: not measured
- Status page with history: not measured
- Public pricing: not measured
- Certifications named: not measured
- Uptime SLA with a figure: not measured
- HTTPS enforced with HSTS: not measured
- No third-party tracking before consent: not measured
- security.txt (RFC 9116): not measured
- Notice before subprocessors change: not measured
- Named privacy contact: not measured
0 found0 gaps12 not measuredNothing measured, so no score
-
Tick 2 vendors to compare them. 0 of 2 selected 1 of 2 selected 2 of 2 selected More than 2 selected. A comparison sets 2 side by side.
Not in the ranking
We could not measure this product with our method, so it is listed here instead of being scored. This says something about our method, not about the vendor.
- SendGrid – We followed this address on 2026-09-06 to https://www.twilio.com/en-us/sendgrid. Our domain-based checks could no longer isolate this product at its original address.
Before the demo
Email marketing software: a buying checklist
Follow a subscriber from signup to the next platform.
Start with a reproducible audience
Create a new subscriber, an existing contact with changed preferences, a duplicate and a previously unsubscribed test address. Record the expected state before importing them. Build a segment from two fields, change one field and inspect who enters or leaves. Ask whether segmentation is evaluated when a campaign is scheduled or when it is sent. Keep the expected and actual recipient lists together. If contacts arrive from another system, test a delayed update and decide which system owns each field.
Verify setup and the received message
Ask the vendor to demonstrate the authentication setup for your sending domain and explain how your team notices a broken configuration. Inspect the headers of a message delivered to a test mailbox rather than relying only on a green dashboard indicator. Test the plain-text version, links and mobile rendering. Google publishes separate requirements for all senders and bulk senders to personal Gmail accounts; use its current guidance for the relevant scope. A successful test delivery does not guarantee future inbox placement.
Unsubscribe, then repeat the original import
Unsubscribe one test address using the message interface and another using the link in the message body. Check the state in the platform and any connected contact system. Reimport the original list and inspect a new campaign preview: establish whether either address would become eligible again and what explicit action would be required. Check the scope of suppression across lists, brands and automations. Keep marketing preferences separate from the handling of operational messages and ask the responsible reviewer to define the intended policy.
Full trial checklist and CSV worksheet
A trial you can repeat
Use a small list of consenting colleagues and addresses your team controls. Give every platform the same audience, campaign and expected recipient list. Keep a copy of the message, its headers and the resulting subscriber export. Your trial should explain who receives a message and why, including when someone should stop receiving it. A polished email template is only one part of that workflow.
Google describes authentication and subscription requirements for sending to personal Gmail accounts, with additional requirements for bulk senders. Our audience, billing and migration exercises are editorial trial tasks. They do not establish deliverability or legal compliance for a product. Google: email sender guidelines. Source reviewed 2026-10-03. The trial questions are editorial guidance, not additional measured criteria.
Narrow it down
Each of these lists the Email marketing vendors that meet one condition, with the source for each, and appears only where at least 8 of them meet it.
- Email marketing vendors with public pricing 25
- Email marketing vendors with a published DPA 14
- Email marketing vendors with notice before subprocessors change 10
- Email marketing vendors with a status page with history 13
- Email marketing vendors with a named privacy contact 14
This category, criterion by criterion
How this market does on each criterion, with its own share and how it compares with the rest.
- Data processing agreement
- Subprocessor list
- Data location stated
- Status page with history
- Public pricing
- Certifications named
- Uptime SLA with a figure
- HTTPS enforced with HSTS
- No third-party tracking before consent
- security.txt (RFC 9116)
- Notice before subprocessors change
- Named privacy contact
Head-to-head comparisons
Each comparison lists only the criteria where the two differ, with the source for every one. All comparisons.
Every result links its source on the vendor page. A grey segment means we could not measure it, not that it is missing. See how we score.