Iterable
Iterable is a US based cross channel marketing automation platform that orchestrates email, SMS, push notifications and in app messaging from a single identity graph. Iterable identifies users via JavaScript SDK and server side events, builds rich behavioural profiles and triggers automated journeys. Personal data is processed on US infrastructure by default, with EU data residency available for Enterprise plans, requiring consent under GDPR and ePrivacy as well as documented cross border transfer safeguards.
What does Iterable do?
What is Iterable?
Iterable is a US cross channel marketing automation platform headquartered in San Francisco. Used by retailers, media companies and consumer apps, it orchestrates email, SMS, push notifications, in app messaging and direct mail from a single identity graph. Iterable combines server side event ingestion with a JavaScript SDK that tags web events and resolves them to identified profiles. The platform supports complex multi step journeys, audience segmentation and AI optimisation.
What data and cookies does Iterable collect?
The Iterable web SDK sets first party cookies (typically iterableEmailCampaignId and similar identifiers) to recognise the visitor and link page activity to the identified user record. Iterable processes email, phone, push tokens, behavioural events, custom user fields, transactional data and message engagement (open, click, unsubscribe). The dataset is rich and identity centric, which makes it sensitive under GDPR.
GDPR and ePrivacy implications
The Iterable cookies and SDK calls require ePrivacy consent before they fire on the website. Marketing emails, SMS and push notifications require GDPR Article 6(1)(a) consent collected at the right channel level. Iterable supports preference centres that align with the granular consent expected by EU regulators. Profiling for personalisation triggers transparency and right to object obligations under Article 21.
Consent requirements
Block the Iterable web SDK via your CMP until consent is obtained. Collect channel specific opt ins for email, SMS and push and store them in dedicated subscriber fields. Honour unsubscribes in real time across all channels. Use the Iterable preference centre to give recipients granular control.
Data transfers and EU data residency
By default Iterable processes data on AWS in us east 1 in the United States. Standard Contractual Clauses cover the transfer under Article 46 GDPR. Enterprise customers can opt for EU data residency in Frankfurt, which keeps subscriber records and behavioural events within the EU. Document the chosen residency and the applicable safeguards in your Records of Processing Activities.
Practical compliance steps
Sign the Iterable DPA with SCCs, request EU data residency where appropriate, configure the CMP to block the SDK pre consent, document Iterable in the privacy policy with channel specific disclosures, list cookies in the cookie policy and configure data retention and deletion policies in the Iterable account. Map all integrations (CDPs, data warehouses, CRMs) in your Records of Processing Activities.
Iterable and the GDPR
Iterable is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.
- Legal basis
- Consent (Art. 6(1)(a) GDPR) for cookie based tracking and direct marketing across email, SMS and push channels. Contract performance for transactional messages directly tied to a purchase or service.
- Risk level
- medium
- Applicable regulations
- GDPR, ePrivacy Directive (2002/58/EC), CAN SPAM Act, CCPA/CPRA, national ePrivacy implementations (CNIL recommendation in France, TTDSG/TDDDG in Germany, LSSI and LOPDGDD in Spain)
Impact assessment (DPIA)
A DPIA is recommended for Iterable deployments processing identified user profiles across multiple channels at scale, automating decisioning or segmentation based on behavioural data, or combining Iterable data with sensitive sources such as health, finance or children data. The breadth of cross channel orchestration and the default US transfer warrant formal assessment.
Sample text for your banner
We use Iterable to send marketing communications across email, SMS, push and in app channels and to track engagement. Iterable processes your data, including email, phone and behavioural events, on US infrastructure. Please accept to enable personalised marketing across these channels.
What Iterable sets and contacts
- Tracking method
- JavaScript SDK and server side webhooks that capture cross channel customer events (email, SMS, push, in app), build identified user profiles and trigger orchestrated journeys
- Server location
- United States (Iterable AWS us east 1) with optional EU data residency in Frankfurt for Enterprise customers
- Data transferred outside the EU
- Iterable Inc. is headquartered in San Francisco. By default customer data, behavioural events and message engagement are processed in the United States. EU data residency in Frankfurt is available for Enterprise customers. Standard Contractual Clauses apply for standard plans.
Cookies set (3)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| iterableEmailCampaignId | first_party | 1 year | Persistent campaign attribution and visitor identification |
| iterableTemplateId | first_party | 1 year | Template engagement tracking |
| iterableMessageId | first_party | Session | Message level interaction tracking |
Third-party domains contacted (4)
iterable.comlinks.iterable.comapi.iterable.comapp.iterable.com
Frequently asked questions about Iterable
Can't find your question? Write to us, we answer fast.
What cookies does Iterable set?
First party cookies including iterableEmailCampaignId, iterableTemplateId and iterableMessageId, set by the Iterable web SDK to identify visitors and link page activity to known user records and campaign attribution.
Does Iterable require consent under GDPR?
Yes. The Iterable web SDK sets cookies and processes IP and behavioural data on page load before any user interaction, requiring prior ePrivacy consent. Marketing communications additionally require channel specific opt ins under GDPR Article 6(1)(a).
What is the legal basis for Iterable?
Consent for cookie based tracking and direct marketing across email, SMS, push and in app channels. Contract performance may apply to transactional messages directly tied to a purchase or service.
Does Iterable transfer data outside the EU?
By default yes. Iterable processes data on AWS in the United States. EU data residency in Frankfurt is available on Enterprise plans. Standard Contractual Clauses cover the US transfer for standard plans.
Do I need a DPIA for Iterable?
Recommended for deployments processing identified user profiles across multiple channels at scale, automating decisioning or segmentation, or combining Iterable data with sensitive sources such as health, finance or children data.
How do I implement Iterable compliantly?
Sign the DPA with SCCs, request EU data residency where appropriate, block the SDK via your CMP, document Iterable in the privacy policy with channel disclosures, list cookies in the cookie policy and configure data retention in the Iterable account.
Are there EU based alternatives to Iterable?
Brevo (France), Sarbacane (France), Mailjet (France), Selligent (Belgium), CleverReach (Germany) and Splio (France) provide cross channel marketing automation with EU data residency and reduced cross border transfer concerns.
How do I update my cookie policy for Iterable?
Add the Iterable cookies with name, category (marketing), duration and purpose. Reference Iterable Inc. as a US based processor (or EU residency Frankfurt if configured) and link to its privacy policy.
Promo AI
Promo AI is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Promo AI integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Promo AI makes advanced AI accessible to all teams.
BlokID
BlokID is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. BlokID enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, BlokID empowers marketing teams to achieve measurable growth.
Ai-LOG
AI LOG is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. AI LOG integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, AI LOG makes advanced AI accessible to all teams.
RevBid
RevBid is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. RevBid provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, RevBid helps deliver the right message to the right audience at the right time.
Sonobi
Sonobi is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Sonobi enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Sonobi empowers marketing teams to achieve measurable growth.
Promio
Promio is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Promio provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Promio helps deliver the right message to the right audience at the right time.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.