Email sending services
Resend privacy rating
Email API for developers with SMTP support, React Email templates, broadcasts and webhooks.
Summary
Resend scores 46 out of 100 (grade D) on the email sending services criteria. It meets 4 of 12 criteria: no ads or data sales, TLS configuration, open and click tracking off by default and encrypted delivery can be enforced. It partly meets independent audit, security headers and message content deleted after delivery. It does not meet open source, no trackers or telemetry and EU data location. Still needing evidence: transparency report and tells users about requests. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade B.
Score 46 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
The privacy policy lists Plausible and Mixpanel, and the website loads PostHog.
-
Yes
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Funded by paid plans. The privacy policy states personal information is not sold or rented.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
States SOC 2 compliance and third-party audits, but no report is public.
-
Unknown
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Needs evidence. Add it
-
Unknown
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Needs evidence. Add it
-
Partial
Message content deleted after delivery Weight 3 of 3
Is the content of sent mail deleted once it has been delivered?
Email content, metadata and logs are kept for 30 days on all plans. Other retention periods need an enterprise plan.
-
Yes
Open and click tracking off by default Weight 2 of 3
Are open tracking pixels and click tracking links off unless the sender turns them on?
Open and click tracking are off by default for all domains.
-
Yes
Encrypted delivery can be enforced Weight 2 of 3
Can outbound mail be kept from being delivered without TLS?
TLS is opportunistic by default and can be set to enforced for each domain.
-
No
EU data location Weight 1 of 3
Can message content and delivery logs be processed and stored only in the European Union?
An EU sending region is offered, but customer data, logs and metadata stay in the United States.
Automated tests
-
Yes
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade A+
-
Partial
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade B (75/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.