Company background
MailerLite says it started in 2005 as a web design agency and launched MailerLite in 2010 to give businesses a simple email solution. [1] It describes itself as a 100% remote company with 164 people in more than 40 countries. [1]
Its Terms of Use name two contracting entities: MailerLite Limited, registered in Ireland at 88 Harcourt Street, Dublin, for customers billed in the EEA, UK and Switzerland, and MailerLite, Inc., a Delaware corporation with a San Francisco address, for everyone else. [4] The terms we read were last updated on September 22, 2026. [4]
On ownership, MailerLite's About page lists its COO as COO at MailerLite and Vercom, and Vercom's own website lists MailerLite among its platforms; Vercom's investor relations page gives a Poznan, Poland address. [1][9][10] Neither page we fetched states the date or terms of the relationship, so we do not.
Security certifications and hosting
MailerLite's trust page says it is certified to ISO/IEC 27001:2022 and that its services are hosted in data centers in the European Union, in Germany and the Netherlands, which are themselves ISO/IEC 27001:2022 certified. [2] It also describes using Google Cloud Platform infrastructure for resilience. [2]
Traffic between your browser and the app runs over HTTPS/TLS, data is mirrored in two separate locations, and MailerLite says it engages independent third-party firms for regular penetration tests. [2] Internally, staff use single sign-on with enforced multi-factor authentication. [2] The trust page does not mention SOC 2 or encryption at rest, and its payment vendors, not MailerLite itself, are described as PCI-DSS compliant. [2]
| Item | What MailerLite publishes | Source |
|---|---|---|
| ISO/IEC 27001:2022 | MailerLite certified | [2] |
| Hosting | EU data centers in Germany and the Netherlands | [2][3] |
| GDPR DPA | Part of the Terms of Use; no separate signature | [3] |
| Sub-processors | All EU-based; listed in Annex 3 of the DPA | [3] |
| EU-US transfers | MailerLite, Inc. complies with the EU-US and Swiss-US Data Privacy Frameworks | [2] |
| Penetration testing | Regular, by independent third parties | [2] |
| SOC 2 | Not mentioned | [2] |
GDPR documents
MailerLite says it has the documents and GDPR-appropriate technical and organizational measures in place, and its tools help you handle data subject requests such as access, portability and erasure. [3] Its Data Processing Addendum is described as an integral part of the Terms of Use, so accepting the terms also accepts the DPA without a separate signature. [3] MailerLite says all its sub-processors are based in the EU and lists them in Annex 3 of the DPA. [3]
For a small business this means you can file the published DPA as your processor agreement, but you remain responsible for your own lawful basis and consent records.
Account approval: what a new sender goes through
MailerLite's terms say that after creating an account you complete two steps to validate it: complete your profile and request approval. [4] Approval is granted if you comply with the rules, and suspicious activity can lead to a disapproval email. [4] MailerLite may also review your subscriber list and past campaign performance before approving your full purchased limit, and uses automated and, where needed, manual content checks on campaigns that can delay sending. [4]
At signup you provide company or organization, name, email address and a password, and MailerLite advises that every subscriber in your account should have willingly signed up. [8] During the 14-day trial new accounts can send without domain authentication; after that, sending from a custom domain requires authenticating it with DKIM (CNAME), SPF (TXT) and a domain verification TXT record. [6] MailerLite says using a free email domain such as Gmail as the sender address is not recommended, because free providers such as Google, Yahoo or Outlook often do not let you set up SPF and DKIM, which hurts inbox placement. [7]
The anti-spam rules and thresholds
MailerLite's anti-spam policy requires permission from everyone you email: through a subscribe form, an unchecked opt-in box the person ticks, or a purchase from you in the last two years. [5] Lists bought, rented or borrowed from third parties, addresses scraped or copied from the web, and contacts not emailed in the last two years are not allowed. [5] Every newsletter needs a single-click, clear unsubscribe link. [5]
The policy names thresholds that can trigger immediate suspension and an investigation, during which MailerLite may ask for evidence of consent. [5] It also reserves the right to terminate accounts without notice, and the terms allow it to terminate or limit service with or without cause. [4][5]
| Metric | Threshold that can trigger review [5] | What to do |
|---|---|---|
| Spam complaints | Above 0.2% | Send only to opted-in contacts; make the sender recognisable |
| Bounces | Above 5% | Clean old lists before import |
| Unsubscribes | Above 1% | Match content to what people signed up for |
| Open rate | Below 3% | Remove long-inactive contacts |
What this means for a new sender
The published facts describe a company with a documented account approval gate. That gate is the most common source of frustration for new users, and it is driven by rules you can prepare for: a real website, an authenticated domain, opted-in contacts and clean lists. [4][5][6] If you plan to import an old or purchased list, MailerLite's anti-spam policy does not allow it. [5]
This guide is research based on MailerLite and Vercom pages fetched on the date shown. We do not aggregate user reviews or report individual account disputes.
Questions before you decide
Who owns MailerLite?
MailerLite's terms name MailerLite Limited in Dublin, Ireland for EEA, UK and Swiss customers and MailerLite, Inc., a Delaware corporation, for others. Vercom, a company based in Poznan, Poland, lists MailerLite among its platforms, and MailerLite's COO is titled COO at MailerLite and Vercom.
Is MailerLite GDPR compliant?
MailerLite says it has GDPR-appropriate technical and organizational measures, that its Data Processing Addendum is part of its Terms of Use so no separate signature is needed, and that its services are hosted in the EU with EU-based sub-processors.
Why does MailerLite review new accounts?
Its terms say new accounts must complete their profile and request approval, approval is granted if you comply with the rules, and MailerLite may review your subscriber list and past campaign performance. This protects shared sending reputation.
Can I send from a Gmail address with MailerLite?
MailerLite says it is not recommended: free providers such as Gmail often do not let you set up SPF and DKIM, which hurts inbox placement. After the 14-day trial, sending from a custom domain requires authenticating it.
Sources & verification
Product details and prices can change. Check the linked provider before buying.
- MailerLite: About Accessed 30 Oct 2026
- MailerLite: Trust page Accessed 30 Oct 2026
- MailerLite: GDPR compliance Accessed 30 Oct 2026
- MailerLite: Terms of Use Accessed 30 Oct 2026
- MailerLite: Anti-spam policy Accessed 30 Oct 2026
- MailerLite Help: Verify and authenticate your domain Accessed 30 Oct 2026
- MailerLite Help: Limitations of using a free domain Accessed 30 Oct 2026
- MailerLite Help: How to create a MailerLite account Accessed 30 Oct 2026
- Vercom: Our platforms Accessed 30 Oct 2026
- Vercom: Investor relations Accessed 30 Oct 2026
Sources link directly to providers. Product buttons may use separately labeled affiliate links. Read our disclosure.