> How Envoke handles subscriber consent, email tracking and Canadian data transfers under GDPR, ePrivacy and CASL for European operators. > > Canonical: https://www.flowconsent.com/en/services/marketing/envoke Marketing # Envoke Analytics · [Official website](https://envoke.com/) Envoke is a Canadian email marketing and marketing automation platform designed around the strict consent requirements of CASL (the Canadian Anti Spam Law). It manages subscribers, opt in forms, email campaigns, automation and engagement reporting. EU operators benefit from the European Commission's adequacy decision for Canada's commercial sector, which simplifies international transfers. The Envoke web tracking still requires prior cookie consent on the customer website. [Block Envoke until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=marketing) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Marketing](https://www.flowconsent.com/en/services/marketing) - Consent Analytics - Prior consent Required - Documented cookies 2 - Third-party domains 3 - Servers Canada. Envoke is a Toronto based company with infrastructure in Canadian data centres. Canada benefits from an EU adequacy decision for commercial entities subject to PIPEDA. Overview ## What does Envoke do? ## **What Envoke is** Envoke is a Toronto based email marketing and automation platform built with a strong focus on the Canadian Anti Spam Law (CASL). It manages subscriber consent tracking, double opt in flows, segmentation, broadcasts, automations and engagement analytics. It is popular with Canadian universities, non profits and SMEs but is also used by some European operators. ## **Data collected** Subscriber email, name, custom fields, segmentation tags, consent proof (CASL friendly), email open and click engagement, IP address at open time, user agent, link destinations, and web tracking data when the optional pixel is embedded on the customer website. ## **GDPR, ePrivacy and CASL** For EU senders, marketing emails need consent or the soft opt in. Web pixel cookies need prior consent under article 5(3) ePrivacy. Envoke's emphasis on CASL consent tracking is generally helpful to demonstrate GDPR compliance because both frameworks insist on documented, granular and renewable consent. ## **Consent** Use the Envoke double opt in flow, log consent proof, allow easy unsubscribe and offer a granular preference centre. Gate any Envoke web tracking pixel behind a Consent Management Platform on EU websites. ## **International transfers** Canada's commercial sector has been recognised as adequate by the European Commission, so the core Envoke processing in Canada does not need Standard Contractual Clauses. Any sub processor outside Canada and the EEA (US analytics, AWS US regions if used) still needs proper transfer coverage. ## **Practical steps** Sign the Envoke DPA, document the Canadian adequacy decision in your records of processing, gate web pixels behind consent, use double opt in, retain consent evidence per subscriber, set a retention policy on inactive contacts, and review sub processor regions. Compliance ## Envoke and the GDPR Envoke is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Envoke web tracking writes cookies and shares identifiers with a third party for marketing analytics: prior consent under article 5(3) ePrivacy is required. Email marketing requires consent or the soft opt in. Envoke is also designed around Canada's strict CASL consent regime. - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, Canadian PIPEDA, Canadian Anti Spam Legislation (CASL), national EU cookie laws. ### Impact assessment (DPIA) A DPIA is generally not required for routine email marketing with Envoke. It becomes appropriate at scale when profiling drives automated decisions or when sensitive segments are processed. Document subscriber sources, consent provenance, retention and the Canadian transfer. ### Sample text for your banner > We use Envoke to send our newsletters and marketing emails. Envoke is a Canadian company whose data processing is covered by the European Commission's adequacy decision for Canada. Tracking cookies set by Envoke on our website are only activated after your consent. Cookies and trackers ## What Envoke sets and contacts - Tracking method Email marketing and marketing automation platform with a Canadian focus. Envoke handles subscriber management, opt in forms, email campaigns, automation workflows and engagement tracking via pixels and tracked links. It may add a small JavaScript tag on the customer's website for form embedding and tracking. - Server location Canada. Envoke is a Toronto based company with infrastructure in Canadian data centres. Canada benefits from an EU adequacy decision for commercial entities subject to PIPEDA. - Data transferred outside the EU Envoke processes subscriber data in Canada. The European Commission's adequacy decision for Canada (commercial sector under PIPEDA) covers this transfer, which means no Standard Contractual Clauses are required for the core flow. Some sub processors may sit in the US and need their own coverage. ### Cookies set (2) | Name | Type | Duration | Purpose | | ----------- | ---------- | -------- | ---------------------------------------------------------------------------------------------------------------------------------- | | envoke\_vid | persistent | 1 year | First party visitor identifier used by the Envoke web pixel to attribute on site behaviour to email subscribers. Requires consent. | | envoke\_sid | session | session | Session identifier used by Envoke web pixel to group page views into one session. Requires consent. | ### Third-party domains contacted (3) - `envoke.com` - `app.envoke.com` - `links.envoke.com` Questions ## Frequently asked questions about Envoke Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Envoke set? The Envoke web tracking pixel sets a first party visitor identifier cookie and a session cookie on the customer website. Strictly necessary cookies of the customer's own application are not affected. The Envoke cookies are analytics related and require prior consent. ### Does Envoke require consent? Yes for web tracking cookies. For marketing emails, EU senders need consent or the soft opt in. CASL requires explicit consent for Canadian recipients; Envoke's opt in flow is designed to capture and store this consent. ### What is the legal basis? Web pixel: consent. Email marketing: consent under GDPR article 6(1)(a) for cold prospects, soft opt in for existing customers. Transactional emails: performance of contract. Engagement analytics: legitimate interest with transparency. ### Does Envoke transfer data outside the EU? Yes, to Canada. Canada's commercial sector benefits from a European Commission adequacy decision under PIPEDA, so this transfer does not require SCCs. Other sub processors may sit elsewhere and need their own coverage. ### Do we need a DPIA? Typically not for routine marketing. A DPIA becomes appropriate when Envoke is used to profile EU recipients at scale, drive automated decisions or combine with sensitive segments. ### How do we implement Envoke compliantly? Sign the DPA, gate web tracking behind a Consent Management Platform, use double opt in, store consent evidence per subscriber, allow easy unsubscribe, set retention on inactive contacts and review sub processor regions outside Canada. ### What alternatives exist? Alternatives include Mailchimp, Brevo (Sendinblue), ActiveCampaign, Constant Contact, Mailerlite, GetResponse and EU based platforms like Mailjet. For Canadian compliance specifically, Cyberimpact and Envoke are the two CASL focused options. ### How do we update the cookie policy? List the Envoke pixel cookies with vendor, purposes (email engagement tracking, on site behaviour), retention and legal basis (consent). Add a sentence on Canadian processing under adequacy. Update on sub processor changes. Same category ## More services: Marketing [See the whole category](https://www.flowconsent.com/en/services/marketing) ### [AutomateWoo](https://www.flowconsent.com/en/services/marketing/automatewoo) [AutomateWoo is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. AutomateWoo provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, AutomateWoo helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/marketing/automatewoo) [Marketing](https://www.flowconsent.com/en/services/marketing/automatewoo) · ### [Inputflow](https://www.flowconsent.com/en/services/marketing/inputflow) [Inputflow is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Inputflow supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Inputflow ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/inputflow) [Marketing](https://www.flowconsent.com/en/services/marketing/inputflow) · ### [Lootly](https://www.flowconsent.com/en/services/marketing/lootly) [Lootly is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Lootly supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Lootly ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/lootly) [Preferences](https://www.flowconsent.com/en/services/marketing/lootly) · ### [Buyapowa](https://www.flowconsent.com/en/services/marketing/buyapowa) [Buyapowa is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Buyapowa supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Buyapowa ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.](https://www.flowconsent.com/en/services/marketing/buyapowa) [Marketing](https://www.flowconsent.com/en/services/marketing/buyapowa) · ### [AutomatePro](https://www.flowconsent.com/en/services/marketing/automatepro) [AutomatePro is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. AutomatePro integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, AutomatePro makes advanced AI accessible to all teams.](https://www.flowconsent.com/en/services/marketing/automatepro) [Analytics](https://www.flowconsent.com/en/services/marketing/automatepro) · ### [Dotdigital](https://www.flowconsent.com/en/services/marketing/dotdigital) [Dotdigital is a digital marketing technology that helps businesses reach, engage, and convert their target audience online. It provides advanced targeting, campaign management, and performance analytics capabilities. Dotdigital enables marketers to deliver personalized experiences across channels, optimize campaign ROI, and gain actionable insights into customer behavior. With automation features and data-driven optimization, Dotdigital empowers marketing teams to achieve measurable growth.](https://www.flowconsent.com/en/services/marketing/dotdigital) [Marketing](https://www.flowconsent.com/en/services/marketing/dotdigital) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)