Free guide:winning new clients predictably in 2026 · freeFree guide: win clients predictablyGet it now →
EU compliance setup · beehiiv

beehiiv, set up GDPR-compliant

beehiiv is quick to set up, and that is exactly the problem: the newsletter is running before anyone has checked how the data gets to the US and whether sign-ups were confirmed.

Checked

What we looked up for beehiiv

01

Contracting party

The Terms of Use are an agreement with beehiiv Inc., a US company.Source: beehiiv.com · read on 3 October 2026

02

Hosting

According to the Trust Center, publication and subscriber data sit in AWS regions in the United States. No EU option is described there.Source: security.beehiiv.com · read on 3 October 2026

03

EU-US Data Privacy Framework

On 3 October 2026 the official list had no entry for beehiiv, neither active nor inactive.Source: dataprivacyframework.gov · read on 3 October 2026

04

Transfers to the US

For transfers, the privacy policy names regulator-approved Standard Contractual Clauses. The Data Privacy Framework appears neither there nor in the data protection addendum.Source: beehiiv.com · read on 3 October 2026

05

Data processing agreement

The Data Protection Addendum forms part of the terms between you and beehiiv and applies without a separate signature.Source: beehiiv.com · read on 3 October 2026

06

Double opt-in

Double opt-in is built in but optional. Once switched on, a new sign-up stays 'Pending' until the confirmation is clicked; Smart Nudge sends one reminder after 48 hours.Source: beehiiv.com · read on 3 October 2026

07

Proof of consent

The subscriber profile shows 'Subscribed on' with the date and time of sign-up.Source: beehiiv.com · read on 3 October 2026

08

Sending domain

With your own domain, beehiiv handles SPF and DKIM through CNAME records. Since February 2024 every custom domain also needs a DMARC record.Source: beehiiv.com · read on 3 October 2026

09

List import

Before every import you confirm that everyone on the list knowingly consented. beehiiv does not create any proof in the process.Source: beehiiv.com · read on 3 October 2026

This page is not legal advice and we are not a law firm. We report what the vendor itself documents, with a date. Vendors change their terms; the linked source in its current version always prevails.

Typical pitfall

Where beehiiv setups snag in Europe

01

US transfers without the Data Privacy Framework

Because beehiiv is not listed under the Data Privacy Framework, transfers rest on Standard Contractual Clauses. That is permitted but means more paperwork: a documented transfer impact assessment next to the entry in your records of processing is the usual practice.

02

Imported contacts have no proof

Double opt-in applies at sign-up. Imported contacts get in on nothing more than your tick in the import dialogue. You have to bring the proof for them from the old system; otherwise they need a re-opt-in.

Process

How we set up beehiiv

Fix the sign-up

Switch on double opt-in, write the confirmation email in the right language, check embedded forms and Smart Nudge. New subscribers only count after the click.

Domain and deliverability

Your own sending domain with SPF, DKIM and DMARC, so emails come from your domain and stay out of spam.

Existing list and records

Split the existing list into documented, re-opt-in and delete. Document the transfer on Standard Contractual Clauses and write the paragraph for your privacy notice.

Questions

What people ask about beehiiv

Is beehiiv GDPR compliant?

No tool is compliant on its own; it depends on the setup. beehiiv provides built-in double opt-in and a data protection addendum. The data sits in the US, though, and beehiiv relies on Standard Contractual Clauses rather than the Data Privacy Framework for transfers. You need to document that.

Is beehiiv certified under the EU-US Data Privacy Framework?

Not on 3 October 2026: the official list had no entry for beehiiv. The privacy policy names Standard Contractual Clauses as the basis for transfers.

Does beehiiv have double opt-in?

Yes, as an optional setting. Once on, every new sign-up stays 'Pending' until the confirmation is clicked, and Smart Nudge sends a reminder after 48 hours. It does not apply to imported contacts.

Where does beehiiv store data?

According to its Trust Center, in AWS regions in the United States. beehiiv describes no EU option.

Other tools

There is usually more than one tool

The setup costs € 890 for your whole stack. The other tools we have checked the same way:

Tell us how beehiiv runs for you.

Tell us which tools you use and where your contacts come from. In the first call we will tell you whether € 890 covers it or whether more needs fixing, honestly either way.

Request the setup