Register No. 037
Is GatewayAPI European?
Yes. GatewayAPI is under verified European control.
ONLINECITY’s 2026 report describes its group as Danish-owned and ONLINECITY.IO ApS as wholly owned. GatewayAPI names Thomas Hofmann, Birol Altinok and Martin Pløger as co-owners. Together these primary disclosures support European control; the report is not a shareholder audit.
Latest
Nothing new on file since the check on 14 September 2026. Seen news about GatewayAPI? Send it with a source.
- Controlled by
- Thomas Hofmann, Birol Altinok and Martin Pløger via Danish-owned ONLINECITY Group; operator ONLINECITY.IO ApS
- Control sits in
- Denmark
- Seat
Denmark- Last checked
About GatewayAPI
GatewayAPI, operated by ONLINECITY.IO ApS in Denmark, provides APIs for sending and receiving SMS, delivery reports, number lookups and virtual numbers. It supports notifications, verification codes and two-way messaging; RCS and email are additional channels.
Evidence 2
- GatewayAPI operator and named co-ownersgatewayapi.com ↗
- ONLINECITY 2026 ISAE 3000 report, section 4: Danish-owned group and wholly owned operatorcms.onlinecity.io ↗
Sources were opened and read on the date of the check. Registers and websites change; if one of these no longer says what we cite it for, tell us.
Product
GatewayAPI
gatewayapi.com ↗SMS API from a Danish-owned group
The separate GatewayAPI.eu setup uses Hetzner in Germany and Finland. GatewayAPI.com uses Google Cloud in EU regions and has a different support and subprocessor schedule. Select the EU setup when registering or arrange a migration if European infrastructure ownership matters to your application.
- Instead of
- Twilio
- Pricing
- Usage-based SMS prices vary by destination and volume. Account creation is free, but sending, virtual numbers, shortcodes and other extras can incur charges. A free account is not a recurring free messaging plan.
- Suits
- Developers who need SMS with a separately selectable European hosting setup
Operations
Who runs the parts of the service we could observe from outside, checked 14 September 2026. A provider's control can differ from where its servers stand.
| Part | Provider | Provider control | What we saw |
|---|---|---|---|
| Core hosting | Hetzner · Germany / Finland | European | GatewayAPI.eu setup only. Appendix B identifies SMS database hosting at Hetzner; this setup must be selected at signup or arranged through migration. [1] [2] |
| Core hosting | Google Cloud · Belgium; redundancy in Ireland, Denmark, Netherlands and Finland | Not European | GatewayAPI.com setup only. The DPA identifies a Belgian primary communication database and other EU redundancy locations under Google control. [1] |
| Email delivery | HeySender ApS · Denmark (supplier address in DPA) | Unknown | Both setup schedules list email delivery/transmission. The supplier address does not establish the complete processing region or ultimate provider ownership. [1] [2] |
| Supporting service | ZIMAW Technology Company Limited · Vietnam | Unknown | Technical support and customer service for GatewayAPI.com customers only. Listed in the .com DPA; absent from the .eu schedule. Ultimate supplier ownership not established. [1] [2] |
| Message delivery | Google / RCS Business Messaging · EU; third-country transfers permitted | Not European | Optional RCS under Appendix D of the .com DPA. Google and its subprocessors can process data outside the EU/EEA; this does not describe the separate .eu SMS setup. [1] |
| Public website | Google Cloud | Not European | A 34.22.164.93 · AS396982 [1] [2] |
| Incoming email | Google Workspace | Not European | MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 aspmx2.googlemail.com · 10 aspmx3.googlemail.com [1] |
| Outgoing email | Google Workspace | Not European | Business-domain gatewayapi.com SPF _spf.google.com; authorization does not prove customer SMS or WhatsApp messages use this provider. [1] |
| Outgoing email | stspg-customer.com | Unknown | Business-domain gatewayapi.com SPF stspg-customer.com; authorization does not prove customer SMS or WhatsApp messages use this provider. [1] |
| Outgoing email | HubSpot | Not European | Business-domain gatewayapi.com SPF 143597192.spf08.hubspotemail.net; authorization does not prove customer SMS or WhatsApp messages use this provider. [1] |
| Outgoing email | send.heysender.com | Unknown | Business-domain gatewayapi.com SPF send.heysender.com; authorization does not prove customer SMS or WhatsApp messages use this provider. [1] |
| Outgoing email | Zendesk | Not European | Business-domain gatewayapi.com SPF mail.zendesk.com; authorization does not prove customer SMS or WhatsApp messages use this provider. [1] |
| Public website | Hetzner | European | Separate gatewayapi.eu public endpoint: A 49.12.23.114 · AS24940 [1] [2] |
Core hosting is in the EU for both setups, with different provider ownership. The .com DPA additionally lists support in Vietnam and optional Google RCS transfers outside the EU/EEA. International delivery and email services have their own data paths. The public website and business email also use Google; no fully European supply chain is verified.
Badge
GatewayAPI can show its verified European ownership with a badge that links back to this page. If the verdict ever changes, the badge stops working.
Also available in black and white, and as a compact badge: change blue to black or white, or ownership to ownership-compact.