Standard
BusinessTrains on your data in part
Data in the EU by default · DPA in the terms
Price: €13.50 / mo
Data
Brevo and the GDPR: AI training, data location and DPA
Standard: Trains on your data in part. Data in the EU by default · DPA in the terms.
Vendor: Brevo (Sendinblue SAS)Sales, marketing and supportChecked on How we check
Verdict
Is Brevo GDPR compliant?
No tool is GDPR compliant on its own: that depends on how your business uses it. This page shows the vendor's side, from its own pages. It is not legal advice.
Training
Does Brevo train on your data?
Trains on your data by default?
CheckedTrains on your data in part.
Partly: Brevo may use content and usage data to train its AI features only to improve the service for the customer, in particular fraud, phishing and spam prevention; its AI providers process data only to deliver the features
Source: brevo.comSection 6.7 'Control Center' (Terms version 1 Oct 2025)Checked on
Location
Where does Brevo store your data?
Where data is stored by default
CheckedEU: hosting at OVH (France) and Google Cloud (Belgium)
Source: brevo.comDPA Annex 2, 'Brevo Infrastructure Sub-Processors'Checked on
EU hosting on this plan
CheckedContract
Does Brevo sign a data processing agreement?
Data processing agreement (DPA)
CheckedDPA in the terms.
Yes. Brevo's DPA is Appendix 3 of its Terms of Service and applies automatically
Source: brevo.comAppendix 3 'Data Processing Agreement (DPA)'Checked on
Processors
Who else handles Brevo data?
Sub-processors (companies that handle the data for them)
Checked2 listed.
Public in DPA Annex 2: 5 infrastructure sub-processors (OVH, Google Cloud, Cloudflare, Zendesk, Omni), 12 optional service providers including AI providers OpenAI, Google Gemini, Anthropic and Langfuse, and 5 Brevo group companies
Source: brevo.comDPA Annex 2 'List of Sub-Processors'Checked on
EU–US Data Privacy Framework
CheckedEU or Swiss vendor.
Not applicable (EU-based vendor, Sendinblue SAS, Paris)
Source: brevo.comController paragraph ('Sendinblue, a French société par actions simplifiée')Checked on
Security
Which certifications and admin controls does Brevo have?
Security certifications
CheckedISO 27001:2022
Source: brevo.comSection on certification ('ISO 27001:2022-certified')Checked on
Admin controls for AI
CheckedYes, partly: the Control Center manages AI features for the account; fraud and spam detection and AI dashboards stay on
Source: brevo.comSection 6.7 'Control Center'Checked on
Price
What does Brevo cost?
Price, as shown in Germany
Checked€13.50 / mo.
EUR 13.50 per month billed yearly, or EUR 15 monthly (entry tier, 5,000 emails a month); VAT basis not stated
Source: brevo.comPlan card 'Standard' with Monthly / Yearly (-10%) toggle, EURChecked on
The vendor doesn't say: retention.
Alternatives
Brevo alternatives that don't train on your data
Other sales, marketing and support tools whose business plan doesn't train on your data and includes a DPA.
The five marks, in order: No AI training · EU hosting · DPA · Sub-processors listed · DPF or EU vendor. ✓ meets it, ✕ doesn't, – partly, ? not stated.
Tool · PlanVerdictYour five rules
- Pipedrive
Growth · €39 / user / mo
Says it doesn't train on your dataEU hosting available · DPA on request
✓✓✓✓✓
- Attio
Pro · €74 / user / mo
Doesn't train on your dataEU hosting not documented · DPA on request
✓?✓✓✓
- Dynamics 365 Sales
Professional · €56.30 / user / mo
Doesn't train on your dataEU hosting available · DPA on request
✓✓✓?✓
- folk
Standard · €22 / user / mo
Doesn't train on your dataEU hosting available · DPA on request
✓✓✓✓✕
- GetResponse Email Marketing
Marketer · €44.28 / mo
Doesn't train on your dataEU hosting not documented · DPA on request
✓?✓✓✓
If no plan gives you the training default or data location you need, the tool may not be the right fit. We design and build what your team is missing around your own rules, and keep it running after launch.
See what we buildNeed something your tools can't do?
We design and build what your team is missing, around the way you already work and the data rules you set.