Data residency
Your messages, events, suppressions and logs are stored and processed in the European Union.
wemail is hosted entirely in the European Union. Your account API, Console, database and event history run in the EU, and all of your data — message bodies, headers, attachments, events, suppressions, templates and logs — is stored and processed in the EU. There are no non-EU replicas of your content.
Where each part of the service runs
| Parameter | Type | Required | Description |
|---|---|---|---|
API & Console | Azure · West Europe (Netherlands) | Optional | The REST API, the SMTP submission endpoint, the web Console and all application services run on Microsoft Azure in the West Europe region. |
Database & queues | Azure · West Europe (Netherlands) | Optional | Message metadata, events, suppressions, templates, verification results and account data live in PostgreSQL and Redis inside the same Azure region. Encrypted at rest and in transit. |
Logs & monitoring | Azure · West Europe (Netherlands) | Optional | Application logs, delivery logs and operational metrics are collected and retained in the EU. They never leave the region. |
Email delivery | AWS · European Union | Optional | Outbound messages are handed to Amazon SES in an EU region for final delivery. Message content transits the delivery infrastructure and is not retained there beyond the delivery attempt itself. |
Tracking (opens/clicks) | Azure · West Europe (Netherlands) | Optional | First-party open and click tracking (track.wetik.io or your branded tracking domain) is served from the EU; tracking events are stored with the rest of your event history. |
Retention
Event history (delivered, bounced, opened, clicked, complained) drives Activity, Analytics, webhooks and exports and is retained 30 days on Free and 12 months on paid plans; the free workspace inside a paid organisation inherits the organisation’s window, and aggregated metrics accept windows up to 366 days. Full message content (bodies and attachments) is retained for 30 days and then removed, while the event record itself is kept for the plan window. Suppression lists and unsubscribe records never expire — they are a deliverability safeguard, not analytics data. Retention is enforced daily; data past its window is deleted permanently.
Sub-processors and the DPA
Microsoft Azure and Amazon Web Services (EU regions only) are our hosting sub-processors. The current sub-processor list, our GDPR commitments and the Data Processing Agreement are published on the GDPR page. The DPA incorporates the EU Standard Contractual Clauses where applicable; because storage and processing stay in the EU, no third-country transfer of your stored content takes place in normal operation.