> Brevo, formerly Sendinblue, and the GDPR: email marketing consent, data storage in the EU, CNIL oversight and the processing agreement for senders. > > Canonical: https://www.flowconsent.com/en/services/marketing/brevo Marketing # Brevo Marketing · [Official website](https://www.brevo.com) Brevo (formerly Sendinblue) is a French marketing platform providing email campaigns, transactional email, SMS marketing, WhatsApp campaigns, marketing automation, CRM, landing pages, and web push notifications. As a French company with EU infrastructure, Brevo is one of the most GDPR-compliant marketing platforms available: no US data transfers, direct CNIL oversight, and EU data processing as the default. Brevo is the leading European alternative to US platforms like Mailchimp, Klaviyo, and HubSpot. [Block Brevo until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Marketing - Prior consent Required - Documented cookies 1 - Third-party domains 3 - Servers European Union (Brevo is a French company with EU infrastructure) Overview ## What does Brevo do? ## **What is Brevo?** Brevo (formerly Sendinblue) is a French marketing technology company founded in Paris. It provides email campaigns, transactional email (SMTP API), SMS marketing, WhatsApp marketing, marketing automation, a CRM, landing pages, web push notifications, and Facebook ads integration. Brevo serves over 500,000 businesses globally and is the leading European alternative to US-based marketing platforms like Mailchimp, Klaviyo, and HubSpot. As a French company, Brevo is subject to GDPR and CNIL oversight directly. ## **The EU advantage: no third-country transfers** Brevo's most significant GDPR advantage is its EU infrastructure. All email, contact, and campaign data is processed and stored within the EU. No Standard Contractual Clauses are required. No Transfer Impact Assessments are needed for the primary data flows. This makes Brevo significantly simpler to use compliantly than US-based alternatives, particularly for organisations with strict data residency requirements. ## **Consent requirements** Despite being EU-based, Brevo email marketing still requires valid GDPR consent for marketing emails to EU contacts. Being EU-hosted does not change the consent requirement for placing emails in inboxes: it only eliminates the transfer complexity. Implement double opt-in, use explicit consent checkboxes, and record consent timestamps. Brevo provides GDPR-compliant signup form features and double opt-in confirmation flows. ## **Transactional email and legitimate interest** Transactional emails sent via Brevo (password resets, order confirmations, account notifications) can rely on legitimate interest or contract performance without separate marketing consent. The key distinction is purpose: emails triggered by user actions to fulfil the service are transactional; emails sent to promote products or re-engage users are marketing and require consent. ## **Practical compliance steps** Sign the Brevo DPA. Implement double opt-in for marketing lists. Use GDPR-compliant subscription forms with explicit consent checkboxes. Distinguish transactional from marketing emails in your Brevo account. Configure unsubscribe handling and honour opt-outs promptly. Use Brevo's contact deletion API for erasure requests. Add Brevo to your privacy policy as an EU-based processor. Compliance ## Brevo and the GDPR Brevo is classified as “Marketing”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) required for email marketing campaigns. Legitimate interest (Art. 6(1)(f)) for transactional emails triggered by user actions. Contract performance (Art. 6(1)(b)) for service-related communications. Brevo's EU infrastructure removes the transfer complexity present with US-based alternatives. - Risk level low - Applicable regulations GDPR, ePrivacy Directive, CNIL guidelines. No SCCs required for standard deployments. ### Impact assessment (DPIA) A DPIA is generally not required for standard Brevo email marketing deployments. It may become relevant for large-scale multi-channel marketing automation combining email, SMS, and WhatsApp data across many EU contacts. ### Sample text for your banner > I agree to receive marketing communications from \[Brand] via email and SMS. I understand I can unsubscribe at any time. My data is processed by Brevo, a French company, in accordance with our privacy policy. Cookies and trackers ## What Brevo sets and contacts - Tracking method Email marketing, SMS, transactional email API, marketing automation, CRM, first-party tracking script, landing pages - Server location European Union (Brevo is a French company with EU infrastructure) ### Cookies set (1) | Name | Type | Duration | Purpose | | --------- | ---------- | --------- | ------------------------------------------------------------------------------------------------- | | sib\_cuid | persistent | 13 months | Brevo visitor identifier for website analytics and contact identification via the Tracker feature | ### Third-party domains contacted (3) - `brevo.com` - `sibautomation.com` - `sendinblue.com` Questions ## Frequently asked questions about Brevo Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### Does Brevo require GDPR consent? Yes for marketing emails, SMS, and WhatsApp campaigns. EU infrastructure does not exempt Brevo from consent requirements for marketing communications. Implement double opt-in and use explicit consent checkboxes. Transactional emails may rely on legitimate interest or contract performance. ### Is Brevo (Sendinblue) GDPR compliant? Yes. Brevo is a French company under CNIL jurisdiction with EU infrastructure. It provides a GDPR-compliant DPA, processes all data within the EU, and does not require SCCs for standard deployments. It is one of the most GDPR-friendly marketing platforms available. ### Does Brevo transfer data outside the EU? No for standard deployments. All Brevo email, SMS, and contact data is processed and stored within the EU. No Standard Contractual Clauses are required. This is Brevo's primary GDPR advantage over US-based alternatives. ### What legal basis applies to Brevo? Consent for marketing emails, SMS, WhatsApp campaigns, and push notifications. Legitimate interest for transactional emails triggered by user actions. Contract performance for service-essential communications. The EU infrastructure simplifies compliance but does not change the fundamental consent requirement for marketing. ### How do I implement double opt-in in Brevo? Create a subscription form in Brevo, enable double opt-in in the form settings, and configure the confirmation email template. Brevo sends a confirmation email; only contacts who click the confirmation link are added to the active list. Brevo records the confirmation timestamp automatically. ### Does Brevo set tracking cookies? Brevo's Tracker feature (for website analytics and contact identification) sets first-party cookies. If enabled, this requires consent under the ePrivacy Directive. Transactional email delivery itself does not require cookies. ### How do I handle erasure requests in Brevo? Delete the contact in the Brevo contacts database. This removes their email address, attributes, and subscription history. For erasure from transactional email logs, use the Brevo API. Respond to requests within 30 days and document all deletions. ### Why choose Brevo over Mailchimp for GDPR compliance? Brevo's EU infrastructure eliminates SCCs, Transfer Impact Assessments, and US transfer disclosure requirements that apply to Mailchimp. Both require consent for marketing emails, but Brevo's French jurisdiction means CNIL guidance applies directly, providing clearer regulatory clarity for French and EU organisations. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [Shapo](https://www.flowconsent.com/en/services/marketing/shapo) [Shapo is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Shapo supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Shapo ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/shapo) [Preferences](https://www.flowconsent.com/en/services/marketing/shapo) · ### [Sailthru](https://www.flowconsent.com/en/services/marketing/sailthru) [Sailthru is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Sailthru provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Sailthru helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/sailthru) [Marketing](https://www.flowconsent.com/en/services/marketing/sailthru) · ### [Vtiger](https://www.flowconsent.com/en/services/marketing/vtiger) [Vtiger is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Vtiger provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Vtiger helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/vtiger) [Marketing](https://www.flowconsent.com/en/services/marketing/vtiger) · ### [Referral Rock](https://www.flowconsent.com/en/services/marketing/referral-rock) [Referral Rock is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Referral Rock enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Referral Rock empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/referral-rock) [Marketing](https://www.flowconsent.com/en/services/marketing/referral-rock) · ### [Primeleads](https://www.flowconsent.com/en/services/marketing/primeleads) [Primeleads is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Primeleads enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Primeleads empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/primeleads) [Marketing](https://www.flowconsent.com/en/services/marketing/primeleads) · ### [Formless](https://www.flowconsent.com/en/services/marketing/formless) [Formless is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Formless integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Formless makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/marketing/formless) [Marketing](https://www.flowconsent.com/en/services/marketing/formless) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)