SOC 2 Type II and ISO 27001 for Mailgun itself, US or EU sending from one account, and SAML SSO included at $90.
Mailgun covers the documents and controls that security-conscious and European customers ask for without an enterprise contract: its own SOC 2 Type II and ISO 27001 certifications, domains in the US or the EU managed from one account, and SAML SSO with phone support on the $90 Scale plan.
SOC 2 Type II and ISO 27001The security page lists both certifications for Mailgun itself, along with GDPR compliance.Evidence: Security page (2026-10-15)
US or EU sending from one accountDomains can be added in the US or EU region and managed from a single control panel.Evidence: Pricing page and docs (2026-10-15)
SAML SSO on ScaleScale ($90 for 100,000 emails) includes SAML SSO plus phone and chat support, so access control does not need an enterprise deal.Evidence: Pricing page (2026-10-15)
Best for
Teams selling to security-conscious or European customers who need ISO 27001, an EU sending region and SSO without an enterprise contract.
Good to know
Lower plans keep logs for one day (Free, Basic) or five days (Foundation).
How Mailgun compares
Against 3 other products we reviewed in Transactional email APIs: what you pay for with each, the five access facts, the plan limits we recorded and each review's bottom line. The note under the table says how each one was checked.
Mailgun compared with Resend, Amazon SES, SendGrid
Compliance includedSOC 2 Type II and ISO 27001 for Mailgun itself, US or EU sending from one account, and SAML SSO included at $90.
Compliance includedA SOC 2 Type II report and a pre-signed GDPR DPA on every plan, with 3,000 free emails a month and 50,000 for $20.
Worth the priceEmail at $0.10 per 1,000 with no monthly fee, inside AWS’s SOC, ISO 27001 and HIPAA-eligible scope, in the region you choose.
Compliance includedSAML SSO, a dedicated IP and EU data residency together on one self-serve plan at $89.95, with SOC 2 Type 2 across every plan.
Overall score
7.5
8.2Best
7.8
6.0
Free option
Free plan
Free plan
Free trial
60-day free trial
Card to start
–Not measured
–Not measured
–Not measured
No card needed
Getting access
Self-serve
Self-serve
Approval wait
Self-serve
Starter priceCheapest paid plan
$15/mo
$20/mo
$0.10/1k emails
$19.95/mo
Pricing model
Tiered
Tiered
Usage-based
Tiered
Pricing page
Public prices
Public prices
Public prices
Public prices
Free plan
100 a day, 1 user
3,000/mo, 100 a day
No; AWS Free Tier credits for new accounts
No; 60-day trial, 100 a day
Price for 50,000 emails/mo
$35 (Foundation)
$20 (Pro)
$5 à la carte ($8 on Essentials), plus attachment data
$19.95 (Essentials)
Retention on the entry paid plan
1 day of logs (Basic)
30 days
30 days of message search in VDM (Essentials)
3 days of email activity (Essentials)
SOC 2 report
Type II, plus ISO 27001
Type II, self-serve download
AWS SOC 2, from AWS Artifact
Type 2 (Twilio, all services), on request
EU option
US or EU sending region
EU sending region; data stored in the US
Seven European AWS regions; data stays in the chosen region
EU data residency on Pro, via EU subusers
SSO
SAML on Scale ($90)
$150/mo add-on on Scale
IAM Identity Center, no extra charge
SAML on Pro ($89.95)
HIPAA BAA
Not mentioned
No
Yes, accepted in AWS Artifact
No; not on Twilio's HIPAA-eligible list
Bottom line
From its public pages, Mailgun is the most complete compliance package of the three, with an EU sending region and SSO on its $90 plan. On smaller plans, plan around short log retention.
From its public pages, Resend is the cheapest way here to send 50,000 emails a month and the easiest to clear a security review with. Check the data-residency and HIPAA limits first.
From its public pages, SES is the least expensive way here to send at volume and carries AWS’s compliance scope, including a HIPAA BAA. Plan for the sandbox review and for setting up each region you use.
From its public pages, SendGrid fits teams that want EU data residency, SSO and a dedicated IP on one self-serve plan. Check the 3-day history on Essentials and ask for the overage rate first.
Evidence: Mailgun: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Resend: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Amazon SES: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; SendGrid: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run. Prices in USD as listed, excluding tax. "–" means not recorded.
every self-serve tier priced; overage published; 1 contradiction on the page
Free tier
9.0 / 10, Excellent
about 3,000 emails a month, 100 a day, one user
Price at 50,000 emails
7.2 / 10, Good
$35/mo
Compliance documents
8.0 / 10, Excellent
own SOC 2 Type II, ISO 27001, DPA linked, EU sending region
Team access controls
10.0 / 10, Excellent
SSO on a self-serve plan; unlimited users from $35/mo; 2FA stated
Message history
2.0 / 10, Fair
1 day on the entry plan, up to 30 days on higher plans
Review
Review from public pages
Written from Mailgun's public pages (pricing, security or privacy, and docs) as read on Oct 15, 2026. We did not sign up, and no hands-on run is published yet.
What the public pages show
We read Mailgun's pricing, security and documentation pages on Oct 15, 2026; we did not sign up for this review. Mailgun is part of Sinch, and the pricing page lays out four send plans, from a free tier of 100 emails a day to Scale at $90 for 100,000 a month; Foundation and Scale start with a one-month free trial.
The security page lists SOC 2 Type II and ISO/IEC 27001 certification for Mailgun itself, GDPR compliance, two-factor authentication and SAML authentication. The documentation describes adding domains in the US or EU region and managing both from one control panel.
One detail needs care: the pricing table says dedicated IPs are available at 50,000 and included from 100,000, while the FAQ says one is included with Foundation 100k, Growth and Scale. Ask before you count on it.
Strengths
Two certifications of its own
Mailgun lists SOC 2 Type II and ISO 27001 for itself.
vs Postmark: Postmark points to its data center’s SOC 2 report; Resend holds SOC 2 Type II but not ISO 27001.
EU sending region
Domains can be created in the US or the EU and managed from one account.
vs Postmark: Resend stores data in the US even with an EU sending region; Postmark has no EU servers planned.
SSO without an enterprise contract
SAML SSO and phone and chat support are on the $90 Scale plan.
vs Resend: Resend charges $150/mo for SSO on its Scale plan.
Unlimited users from Foundation
Every plan except Free and Basic allows unlimited users.
Things to know
Short log retention on lower plans
Logs are kept 1 day on Free and Basic and 5 days on Foundation; 30 days needs Scale.
Free plan is one user and 100 a day
Free allows 100 emails a day, one custom domain and one user.
Dedicated IP terms differ across the page
The pricing table and the FAQ describe dedicated IP inclusion differently; extra IPs are $59 per IP per month.
Pricing reality
Mailgun prices by emails per month with overage per 1,000: Basic $15 for 10,000 ($1.80 over), Foundation $35 for 50,000 ($1.30 over), Scale $90 for 100,000 ($1.10 over). Foundation and Scale start with a one-month free trial.
What changes between plans is less the volume than the extras: log retention goes from 1 day (Basic) to 5 days (Foundation) to 30 days (Scale), users become unlimited from Foundation, and SAML SSO and phone support arrive on Scale. Extra dedicated IPs are $59 per IP per month.
You need a SOC 2 report of the vendor’s own, EU sending or SSO.
Pick Postmark when
You need inbound processing and message history up to 365 days.
Choose it if
Your customers ask for ISO 27001 or SOC 2 reports.
You need to send from an EU region.
You want SAML SSO without an enterprise contract.
Look elsewhere if
You need long log history on a small plan.
You want the lowest price at 50,000 emails a month.
Bottom line
From its public pages, Mailgun is the most complete compliance package of the three, with an EU sending region and SSO on its $90 plan. On smaller plans, plan around short log retention.
Plan limits at a glance
Limit
As recorded
Free plan
100 a day, 1 user
Price for 50,000 emails/mo
$35 (Foundation)
Retention on the entry paid plan
1 day of logs (Basic)
SOC 2 report
Type II, plus ISO 27001
EU option
US or EU sending region
SSO
SAML on Scale ($90)
HIPAA BAA
Not mentioned
Read from the vendor's public pages on Oct 15, 2026. No hands-on run is published yet. How we check
We have not published a sign-up run for Mailgun yet. The access facts above were read from its sign-up and pricing pages on Oct 15, 2026.
We read the pricing, security and docs pages of three transactional email APIs on the same day and scored them on the same six indicators. What each one sells, what 50,000 emails cost, and who should pick which.