EU Transactional Email API — Operated Under EU Law

Operator under EU law

Infotech Pioneers Oy is a Finnish company subject to EU regulation. The operator’s jurisdiction — not just the data centre — is what GDPR Article 44 and your DPIA care about.

Pre-signed Article 28 DPA

Every paid plan includes a pre-signed Data Processing Agreement referencing Article 28 obligations, our current sub-processors and an EU jurisdiction clause. No legal back-and-forth.

Schrems II compatible

No third-country transfer in the processing chain — the Standard Contractual Clauses + Transfer Impact Assessment workflow does not apply. Cleaner DPIA for buyer-side legal review.

EU data residency roadmap

Current AWS region: us-east-1. Migration to eu-west-1 (Ireland) is planned for Q3 2026. All processing today is governed by Finnish law regardless of where it physically runs.

CLOUD Act outside scope

A Finnish company is not subject to US legal compulsion frameworks (CLOUD Act, FISA 702). For sectors that must document this exposure in procurement, this is a meaningful distinction.

Sub-processor transparency

Current sub-processor list is published and the DPA carries change-notice clauses. You see what we change and you can object before it takes effect.

Send your first email in under 5 minutes

Sign up, copy your sandbox key and make your first API call. The sandbox environment mirrors production — when you go live, only the key changes.

• ✓Sandbox key available immediately on signup
• ✓No DNS setup required for initial testing
• ✓Production key activates after domain verification
• ✓Same endpoints for sandbox and production

const res = await fetch(
  'https://app.nexuspromail.com/api/v1/api/send',
  {
    method: 'POST',
    headers: {
      'Authorization': 'Bearer YOUR_API_KEY',
      'Content-Type': 'application/json',
    },
    body: JSON.stringify({
      to: 'user@example.com',
      from: 'hello@yourdomain.com',
      subject: 'Your password reset link',
      html: '<p>Click here to reset...</p>',
    }),
  }
)
const data = await res.json()
// { success: true, messageId: 'msg_...' }

Sandbox key on signup

Test in a fully isolated sandbox environment. No DNS changes needed. Switch to production with one key rotation.

Webhooks for every event

Receive signed webhook calls for sent, delivered, opened, clicked, bounced and complained. Register up to 10 endpoints per account.

Suppression enforcement

The API checks your suppression list before every send. Unsubscribed and hard-bounced addresses are rejected at the API level, not just filtered.

Per-send analytics

Query open rates, click rates and bounce rates per message ID via the analytics API. No dashboard login required.

GDPR-compliant by default

GDPR-focused infrastructure operated under EU law. Suppression enforced. DSAR (erasure) endpoint included. DPA available on request.

Rate limiting by plan

API calls are rate-limited to match your plan's send quota. The usage endpoint lets you check remaining sends programmatically.