UK sending · eu-west-2
Most transactional email providers are US companies sending from US infrastructure. YourMail dispatches every message through AWS SES in London, signs it with your domain's DKIM key, and gives you the retention and deletion controls a UK or EU customer will eventually ask you about.
Three concrete things, none of which require you to take our word for it — the DNS records are yours to inspect and the message headers are yours to read.
Every message is dispatched through AWS SES in eu-west-2. Not a US region with a European label on it — the send itself happens in London.
Your domain is verified with DKIM before it can send, and DMARC passes on DKIM alignment. That is what stops Gmail and Outlook filing your receipts as spam.
Delivery events reach your app over HMAC-SHA256-signed POSTs, so you can verify a payload came from us before you act on it.
Retention, portability and erasure are the three requests that turn up in every data-processing questionnaire. All three are settings in your dashboard, not a support conversation.
Choose a retention window of 30, 90 or 365 days. A background job strips the HTML, text and attachments off anything older while keeping the delivery metadata, so your audit trail survives without the content sitting around indefinitely.
One click produces a JSON snapshot of your account: domains, suppressions, webhooks, usage, and message metadata. Enough to answer a portability request without emailing us first — and it tells you if anything was too large to include rather than quietly trimming it.
Self-serve and immediate — it removes the sending identities, cancels the subscription, and hard-deletes every record belonging to your account. No support ticket, no waiting period.
Plenty of providers imply full data residency when what they mean is that one server is in the right country. We would rather be precise, because you may have to repeat this to your own compliance reviewer.
Sending happens in London. That is a guarantee: the SES region is eu-west-2, and your mail is dispatched from there.
We do not currently offer a blanket data-at-rest residency guarantee. The application database that stores your message metadata is managed infrastructure, and we are not going to assert a physical location we do not control end to end. If your procurement process requires a contractual residency commitment, talk to us before you sign up rather than after — we would rather lose the deal than misrepresent it.
What you can do today is bound the exposure: set a retention window so bodies are stripped on a schedule, and delete the account outright whenever you like.
The free tier needs no card, and you can send from our shared test address before you have verified a domain of your own.