Postmark
Security and trust center evidence
Send transactional and marketing emails and get them to the inbox on time, every
Summary
Postmark has , and 1 expired in the CertReports index, last verified 2 Nov 2026. The strongest row is EU-US Data Privacy Framework: Inactive. This page is independent of the vendor’s own trust centre: dates, sources and caveats come from CertReports captures.
Reviewer brief
As of 05 Oct 2026, Postmark's status under the EU-US Data Privacy Framework is recorded as expired, with the public record marking it Inactive. The Data Privacy Framework entry for Postmark was originally issued on 20 Jul 2017, as reflected in the record dated 05 Oct 2026, with no renewal shown since. No public evidence found for a SOC 2 Type II report as of 05 Oct 2026. No public evidence found for a HIPAA BAA as of 05 Oct 2026. No public evidence found for a PCI DSS listing as of 05 Oct 2026.
- EU-US Data Privacy Framework: expired, status Inactive, originally issued 20 Jul 2017 (as of 05 Oct 2026).
- SOC 2 Type II report: no public evidence found (as of 05 Oct 2026).
- HIPAA BAA and PCI DSS: no public evidence found (as of 05 Oct 2026).
Facts only, each dated; nothing here is inferred, scored or advised. Brief generated 10 Oct 2026; it is regenerated whenever a row changes.
Among communications and cpaas vendors
0verified rows
Category median 1, across 45 indexed communications and cpaas vendors. Postmark has no registry-verified row yet, like 36 percent of them; its evidence is vendor-stated or reported.
Compare with similar vendors
Pick your own comparisonCompliance grid
Legal artefacts
No DPA, BAA or subprocessor list has been captured from a public page yet. Registry rows above do not depend on this. Check the vendor trust centre.
Subprocessors
No subprocessor list captured yet.
Change history
- 29 Sep 2026First indexed by CertReports1 evidence row across 1 framework entered the index.
Similar vendors with evidence
Related by product tags and the Communications and CPaaS category, ranked by shared tags, description similarity and overlapping evidence. Never by popularity.
SendGrid
Communications and CPaaS
SendGrid's trusted email API and marketing campaigns platform is now available through
Twilio
Communications and CPaaS
Build amazing customer experiences on the Twilio platform with APIs for SMS, RCS, voice, and email, plus conversational AI for smarter
Five9
Communications and CPaaS
Five9 delivers reliable cloud contact centre and AI services that empower organisations to deliver extraordinary customer
OneSignal
Communications and CPaaS
Engage customers through personalized omni-channel messaging
Evidence against regulations
All regulations for PostmarkHow much of each regulation’s vendor requirements Postmark’s public evidence reaches.
Reviewing a vendor on public evidence
All articlesWhat Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
What Is a Trust Centre? Vendor Evidence vs Office Settings
Solomon Amos · 28 Oct 2026 · 10 min read