Contracting party
For customers incorporated in Germany, Switzerland or Austria, the contracting party is Brevo GmbH in Berlin (Commercial Court Berlin-Charlottenburg, HRB 133191).
EU compliance setup · Brevo
Brevo, set up GDPR-compliant
Brevo is the European tool on this list: servers in the EU, and for Austria a contract with a German GmbH. That takes a lot of work off your hands, but not all of it.
- Facts checked on 3 October 2026, each with its source.
- Fixed price € 890 for your whole stack, not per tool.
- Technical setup, not legal advice.
What we looked up for Brevo
Hosting
According to its help centre, all hosting servers are in the EU: OVH as the primary host in France and Germany, plus Google Cloud in Belgium.
Processing outside the EU
The data processing agreement allows processing outside the EEA, for example by sub-processors such as Cloudflare. Brevo names Standard Contractual Clauses for this and, for the US, the EU-US Data Privacy Framework for as long as it remains valid.
Data processing agreement
The data processing agreement is an appendix to the Terms of Service and applies once you accept them when creating the account.
Double opt-in
Sign-up forms offer three confirmation options. With 'Double confirmation', which Brevo recommends, subscribers go through double opt-in.
Proof of consent
The date and time of confirmation are logged in the transactional logs, which Brevo explicitly names as proof of consent.
Sending domain
Without an authenticated domain, Brevo replaces the domain part of your sender address with an address on brevosend.com.
List import
For imports, Brevo requires consent that is no more than two years old and can be verified.
AI training
Brevo may use content and usage data to train its AI features, limited to improving the service, for example against fraud and spam.
This page is not legal advice and we are not a law firm. We report what the vendor itself documents, with a date. Vendors change their terms; the linked source in its current version always prevails.
Where Brevo setups snag in Europe
EU hosting does not mean EU-only
The servers are in the EU, yet the sub-processor list includes US services. Your privacy notice should therefore not claim that data never leaves the EU; it should name the transfer and its legal basis.
The proof lives in a log
Brevo records the confirmation in event and transactional logs. Logs are not an archive: if you still need the proof in three years, export it regularly.
How we set up Brevo
Fix the forms
All sign-up forms on 'Double confirmation', consent wording without a pre-ticked box, confirmation email in the right language.
Authenticate the domain
Brevo code, DKIM and DMARC on your domain, so the sender address stays yours and is not rewritten to brevosend.com.
List and records
Split the list by the two-year rule, re-opt-in for older contacts, Brevo GmbH as processor in your records, regular export of the logs.
What people ask about Brevo
Is Brevo GDPR compliant?
No tool is compliant on its own; it depends on the setup. Brevo brings a lot: EU hosting, for Austria a contract with Brevo GmbH in Berlin, double opt-in in the form and proof in the logs. What remains open are the US sub-processors and whether your list meets the two-year rule.
Where does Brevo store data?
According to its help centre, only on servers in the EU: OVH in France and Germany, Google Cloud in Belgium. Processing by sub-processors outside the EEA is still possible under the data processing agreement.
Who does an Austrian company contract with?
With Brevo GmbH in Berlin, not the French parent company. That is also the entity to name in your records of processing.
Can I import old contacts into Brevo?
Only if the consent is no more than two years old and can be verified. Anything older needs a re-opt-in first.
There is usually more than one tool
The setup costs € 890 for your whole stack. The other tools we have checked the same way:
Tell us how Brevo runs for you.
Tell us which tools you use and where your contacts come from. In the first call we will tell you whether € 890 covers it or whether more needs fixing, honestly either way.
Request the setup