Skip to main content
Under GDPR Article 28, any organization that processes personal data on behalf of a controller must have a Data Processing Agreement (DPA) in place. mySMTP acts as a processor for your email delivery, so controllers need a signed DPA to meet their compliance obligations.

​
Why you need a DPA with mySMTP

When you send emails through mySMTP, the service processes email addresses, message content, attachments, and sending logs on your behalf. The GDPR requires a written contract (DPA) that sets out the subject matter, duration, nature and purpose of processing, and the obligations and rights of the controller.

​
Download the DPA

English DPA

Download the English version of the mySMTP Data Processing Agreement.

Danish DPA

Download the Danish version of the mySMTP Data Processing Agreement.

​
How to sign or accept the DPA

1

Download the DPA

Choose the language version above that applies to your organization.
2

Read the terms

Review the processing details, subprocessor provisions, and security measures described in the document.
3

Sign or accept

Follow the instructions provided on the DPA page to sign or accept the agreement.
4

Keep for your records

Retain a copy of the signed or accepted DPA for your GDPR documentation.

​
Where mySMTP stores your data

All SMTP infrastructure, including servers, email content, attachments, and sending logs, is hosted in the EU. mySMTP does not use US cloud services for SMTP infrastructure.

​
Questions about the DPA

If you need changes to the standard DPA or have compliance questions, contact support@mysmtp.com.