Yes. Postkit is GDPR-native by design. All data is stored exclusively in EU data centers (Hetzner, Vienna and Frankfurt). A Data Processing Agreement is included at every plan tier, and suppression management is built in.

Exclusively within the European Union. Postkit runs on Hetzner Cloud in Vienna and Frankfurt. Your data never leaves the EU and no US cloud providers are involved.

Yes. Postkit offers step-by-step migration guides for Resend, SendGrid, and Postmark. The API surface is designed to feel familiar to developers coming from any of these providers.

Yes. Postkit receives, parses (full MIME), and stores inbound emails with attachments on EU-hosted S3-compatible storage. Inbound messages are queryable via the REST API and can trigger webhooks.

The default rate limit is 10 requests per second per organization, with 2 requests per second for batch sends. Every response includes standard X-RateLimit headers, and 429 responses include Retry-After.

Both. Postkit offers a REST API for modern applications and an SMTP relay for legacy systems or anything that speaks SMTP.

Yes. Postkit is designed for agent use — idempotency keys defend against retry-loop duplicates, signed webhooks let agents subscribe to replies, and inbound parsing gives agents a real inbox. A dedicated MCP server for Claude and OpenAI function calling is coming soon.

Postkit is built on top of Postal, an open-source SMTP engine. The Postkit API layer (templates, webhooks, auth, inbound, billing) is proprietary, but the delivery foundation is open.