Lettermint B.V. - Trust Center

All our servers and databases are located within the European Union (specifically France and Germany) with OVH Group SA. We do not use US-based regions to ensure your data remains under EU jurisdiction.

Yes. We act as a Data Processor under GDPR. Our Data Processing Agreement (DPA) is available for all customers, covering how we handle, protect, and process personal data on your behalf.

We prioritise EU-based vendors. Any necessary global sub-processors are vetted for Data Privacy Framework compliance and undergo rigorous Transfer Impact Assessments (TIAs).

We enforce TLS 1.2 or 1.3 for all email transmissions. If a recipient server does not support TLS, we fallback to plaintext to ensure emails get delivered.

All persistent data, including subscriber lists and message logs, is encrypted using LUKS-based AES-256 at the storage layer.