SMS APIs

sms.to

SMS and WhatsApp API operated from Cyprus

CyprusEU Ownership reviewed, controller unresolvedHigh non-EU dependency

Scope verdict

Ownership reviewed, controller unresolved

The terms identify Intergo Telecom Ltd, and its team page names Marios Italos as CEO. The reviewed primary sources do not establish current shareholdings or voting control. Registration and management in Cyprus alone do not establish European ultimate control.

How we classify services

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 6 non-European infrastructure or email dependencies across 5 providers: Cloudflare, Freshworks, Google, Mailgun, Meta / WhatsApp. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

sms.to is operated by Intergo Telecom Ltd in Cyprus. Its APIs and web tools support SMS sending and receiving, verification messages and number lookups, with WhatsApp and Viber as additional channels. It suits applications that need several ways to contact customers.

The Cypriot operator is identifiable, but public management information does not establish its current ultimate owners. Its policies also do not identify an EU-only backend and backup configuration, so this listing does not carry the EU-hosted label.

Pricing

SMS rates vary by destination; other channels and numbers have separate pricing. A trial is available. Although the pricing page advertises no commitments, the published terms specify an initial 12-month term unless otherwise agreed. Check the applicable agreement before purchasing.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Core service hosting

Undisclosed backend and backup providers

Provider control not verified
Location
EEA or adequacy-decision area; exact regions undisclosed
Observed
The privacy policy does not promise EU-only processing. The separate website statement names Amazon and Google, without identifying all API databases or backups. Public API routing alone cannot establish their location.

Core service hosting

Hetzner

European provider
Location
Public API ingress; storage and backup regions not established
Observed
Public API endpoint api.sms.to: A 116.203.200.88, 116.203.125.205, 88.198.168.146 · AS24940. Identifies a network entry point only; not a complete backend or subprocessor inventory.

Message delivery channel

Meta / WhatsApp

Non-European provider
Location
Not disclosed
Observed
Optional WhatsApp channel advertised by sms.to. The reviewed public policies do not establish EU-only processing for this channel.

Why this matters

The service documents Meta / WhatsApp for message delivery. When this channel is used, message content and recipient details can pass through this non-European provider. The cited source describes the channel and any location limits.

Public website

Cloudflare

Non-European provider
Observed
A 141.193.213.11, 141.193.213.10 · AS209242

Why this matters

Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 1 aspmx.l.google.com · 5 alt1.aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Google Workspace

Non-European provider
Observed
Business-domain sms.to SPF _spf.google.com; authorization does not prove customer SMS or WhatsApp messages use this provider.

Why this matters

This domain authorises Google Workspace to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Mailgun

Non-European provider
Observed
Business-domain sms.to SPF mailgun.org; authorization does not prove customer SMS or WhatsApp messages use this provider.

Why this matters

This domain authorises Mailgun to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Freshworks

Non-European provider
Observed
Business-domain sms.to SPF _spf.freshsales.io; authorization does not prove customer SMS or WhatsApp messages use this provider.

Why this matters

This domain authorises Freshworks to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in SMS APIs

View all →