Core service hosting
OVHcloud
European provider- Location
- France
- Observed
- Hosting location in the current Brevo DPA.
Email marketing services · Marketing automation software · Transactional email services
Brevo
Email marketing and transactional email from France
FranceEUEU hostedFree plan Non-European controlledHigh non-EU dependencyScope verdict
Non-European controlled
The standard terms identify Sendinblue SAS, Paris RCS 498 019 298, at 9-17 rue Salneuve, 75017 Paris, as the operator. They select French law and the Commercial Court of Paris. European Commission case M.12141 identifies joint control by General Atlantic (US-controlled), Oakley Capital (Bermuda-controlled) and Armand Thiberge (France). General Atlantic confirms the financing closed in December 2025. Management and employees being the largest collective shareholder does not remove the investors' joint control, so Brevo is outside the directory's strict European-control recommendations.
Operational dependency warning
Relies heavily on non-European providers
Current public evidence shows 6 non-European infrastructure or email dependencies across 3 providers: Cloudflare, Google, Zendesk. The reviewed operational path is therefore not entirely European.
Brevo combines newsletter campaigns, automation and contact management with transactional email through an API or SMTP relay. It also offers SMS and other communication features, making it useful for teams combining marketing and application messages.
Brevo operates from France, but its completed 2025 financing introduced joint control involving General Atlantic, Oakley Capital and founder Armand Thiberge. The European Commission identifies the investment vehicles' ultimate control in the United States and Bermuda. Its core hosting locations are France and Belgium; this does not make ownership exclusively European.
Pricing
The Free plan allows up to 300 emails per day after account approval. Paid plans are Starter, Standard, Professional and Enterprise, with pricing based on volume and features. Pay-as-you-go email credits and separately priced communication services are also available.
Data and operations
Infrastructure and email path
Verified operational dependencies, shown separately from ownership and from the service's core data hosting.
Core service hosting
Google Cloud Platform
Non-European provider- Location
- Belgium
- Observed
- Hosting location in the current Brevo DPA; EU region of a US-controlled cloud provider.
Why this matters
Reviewed evidence places Google Cloud Platform in the core service path, so customer data may be processed under non-European control. Check the cited source for the documented region and scope.
Supporting services
Zendesk
Non-European provider- Location
- EU / USA
- Observed
- Support and ticketing. The DPA separately lists other optional services and overseas group support access.
Why this matters
The published disclosure lists Zendesk for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Public website
Cloudflare
Non-European provider- Observed
- A 172.64.150.216, 104.18.37.40 · AS13335
Why this matters
Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.
Incoming business email
Google Workspace
Non-European provider- Observed
- MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com
- Evidence
- Current daily MX lookup ↗
Why this matters
Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.
Authorised outbound email
Google Workspace
Non-European provider- Observed
- Business-domain brevo.com SPF _spf.google.com; authorization does not prove customer email uses this sender.
- Evidence
- Live SPF record ↗
Why this matters
This domain authorises Google Workspace to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.
Authorised outbound email
Zendesk
Non-European provider- Observed
- Business-domain brevo.com SPF mail.zendesk.com; authorization does not prove customer email uses this sender.
- Evidence
- Live SPF record ↗
Why this matters
This domain authorises Zendesk to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.
Germany
