Core service hosting
Beyond.pl
Provider control not verified- Location
- EEA
- Observed
- Colocation and backup in the approved customer-data processing schedule; a Polish supplier address alone does not establish ultimate ownership.
EmailLabs
Transactional email service from Poland
PolandEUFree plan Ownership reviewed, controller unresolvedHigh non-EU dependencyScope verdict
Ownership reviewed, controller unresolved
Vercom's H1 2026 report confirms that cyber_Folks retains control and describes the July voting agreement. cyber_Folks has a dispersed public share register, including Polish founder interests; its September merger disclosures do not establish an ultimate European controlling shareholder or bloc. The parent's Polish listing alone does not settle the verdict.
Operational dependency warning
Relies heavily on non-European providers
Current public evidence shows 6 non-European infrastructure or email dependencies across 4 providers: Amazon Web Services, Cloudflare, Google, NTT Global Data Centers EMEA. The reviewed operational path is therefore not entirely European.
EmailLabs is Vercom's transactional email platform from Poland. It provides SMTP relay and an API, templates, delivery events and analytics for applications sending receipts, account messages and notifications. It does not provide a general incoming mailbox.
Vercom S.A. remains controlled by cyber_Folks S.A. under a 2026 voting arrangement with Vercom's founders. The ultimate European-control requirement is still unresolved at the listed parent. The approved processing schedule specifies the EEA for hosting and backups, while including suppliers controlled outside Europe.
Pricing
Startup is free for up to 9,000 emails per month with a limit of 300 per day and one day of log retention. Paid Essential, Pro and Enterprise offers vary by volume and features. Advertised introductory discounts apply only to the first three months for new customers.
Data and operations
Infrastructure and email path
Verified operational dependencies, shown separately from ownership and from the service's core data hosting.
Core service hosting
NTT Global Data Centers EMEA
Non-European provider- Location
- EEA
- Observed
- Colocation and backup. European operations of the Japanese NTT group.
Why this matters
Reviewed evidence places NTT Global Data Centers EMEA in the core service path, so customer data may be processed under non-European control. Check the cited source for the documented region and scope.
Core service hosting
cyber_Folks
Provider control not verified- Location
- EEA
- Observed
- Hosting in the approved processing schedule; ultimate control remains unresolved.
Core service hosting
Amazon Web Services
US-controlled cloud- Location
- EEA
- Observed
- Backup processing listed in the customer-data schedule.
Why this matters
Reviewed evidence places Amazon Web Services in the core service path. Even when workloads stay in an EU region, the standard AWS infrastructure remains under US ultimate ownership. Treat it as the separately operated AWS European Sovereign Cloud only when the provider explicitly documents that deployment.
Supporting services
Cloudflare
Non-European provider- Location
- EEA (contractual processing area)
- Observed
- WAF security processing in the approved schedule; separate from the worldwide public website network.
Why this matters
The published disclosure lists Cloudflare for supporting services. Depending on the function, account or customer data may reach this non-European provider. See the source for the documented scope.
Public website
Cloudflare
Non-European provider- Observed
- A 141.101.90.106, 141.101.90.105, 141.101.90.107 · AS13335
Why this matters
Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.
Incoming business email
Google Workspace
Non-European provider- Observed
- MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com
- Evidence
- Current daily MX lookup ↗
Why this matters
Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.
Authorised outbound email
Google Workspace
Non-European provider- Observed
- Business-domain emaillabs.io SPF _spf.google.com; authorization does not prove customer email uses this sender.
- Evidence
- Live SPF record ↗
Why this matters
This domain authorises Google Workspace to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.
Authorised outbound email
EmailLabs
Provider control not verified- Observed
- Business-domain emaillabs.io SPF _spf.emaillabs.net.pl; authorization does not prove customer email uses this sender.
- Evidence
- Live SPF record ↗
Authorised outbound email
_spf.redlink.pl
Provider control not verified- Observed
- Business-domain emaillabs.io SPF _spf.redlink.pl; authorization does not prove customer email uses this sender.
- Evidence
- Live SPF record ↗
Authorised outbound email
_spf.ogicom.pl
Provider control not verified- Observed
- Business-domain emaillabs.io SPF _spf.ogicom.pl; authorization does not prove customer email uses this sender.
- Evidence
- Live SPF record ↗
More in Transactional email services
AhaSend
European transactional email on European infrastructure
NetherlandsEU hostedFree planEU controlled
Scaleway TEM
Transactional email from French provider Scaleway
FranceEU hostedFree plan♻EU controlled
Scaleway
Cloud computing platform from France
France♻EU controlled
rapidmail
Email marketing from Germany
GermanyEU hostedFree planEU controlled
Lettermint
Transactional email service hosted in the EU
NetherlandsEU hostedFree planEU controlled
