A SOC 2 Type II report and a pre-signed GDPR DPA on every plan, with 3,000 free emails a month and 50,000 for $20.
Resend puts its compliance paperwork on every plan, including the free one: the security page says the SOC 2 Type II report and a DPA executed at sign-up are downloads under Settings → Documents. That answers a customer's security questionnaire without a sales call. Pricing is the lowest of the three at 50,000 emails a month.
SOC 2 Type II report in the dashboardThe security page says the report is available under Settings → Documents, on every plan.Evidence: Security page (2026-10-15)
DPA pre-signed at sign-upThe GDPR data processing agreement is executed when the account is created and downloadable from the same page.Evidence: Security page (2026-10-15)
50,000 emails for $20Pro includes 50,000 emails a month with no daily cap and 10 domains; 100,000 is $35. Overage is $0.90 per 1,000.Evidence: Pricing page (2026-10-15)
Best for
Developer teams that need compliance documents for their customers’ security reviews without an enterprise plan.
Good to know
Not HIPAA compliant, and stored data stays in the US even when you pick an EU sending region.
How Resend compares
Against 3 other products we reviewed in Transactional email APIs: what you pay for with each, the five access facts, the plan limits we recorded and each review's bottom line. The note under the table says how each one was checked.
Resend compared with Amazon SES, Mailgun, SendGrid
Compliance includedA SOC 2 Type II report and a pre-signed GDPR DPA on every plan, with 3,000 free emails a month and 50,000 for $20.
Worth the priceEmail at $0.10 per 1,000 with no monthly fee, inside AWS’s SOC, ISO 27001 and HIPAA-eligible scope, in the region you choose.
Compliance includedSOC 2 Type II and ISO 27001 for Mailgun itself, US or EU sending from one account, and SAML SSO included at $90.
Compliance includedSAML SSO, a dedicated IP and EU data residency together on one self-serve plan at $89.95, with SOC 2 Type 2 across every plan.
Overall score
8.2Best
7.8
7.5
6.0
Free option
Free plan
Free trial
Free plan
60-day free trial
Card to start
–Not measured
–Not measured
–Not measured
No card needed
Getting access
Self-serve
Approval wait
Self-serve
Self-serve
Starter priceCheapest paid plan
$20/mo
$0.10/1k emails
$15/mo
$19.95/mo
Pricing model
Tiered
Usage-based
Tiered
Tiered
Pricing page
Public prices
Public prices
Public prices
Public prices
Free plan
3,000/mo, 100 a day
No; AWS Free Tier credits for new accounts
100 a day, 1 user
No; 60-day trial, 100 a day
Price for 50,000 emails/mo
$20 (Pro)
$5 à la carte ($8 on Essentials), plus attachment data
$35 (Foundation)
$19.95 (Essentials)
Retention on the entry paid plan
30 days
30 days of message search in VDM (Essentials)
1 day of logs (Basic)
3 days of email activity (Essentials)
SOC 2 report
Type II, self-serve download
AWS SOC 2, from AWS Artifact
Type II, plus ISO 27001
Type 2 (Twilio, all services), on request
EU option
EU sending region; data stored in the US
Seven European AWS regions; data stays in the chosen region
US or EU sending region
EU data residency on Pro, via EU subusers
SSO
$150/mo add-on on Scale
IAM Identity Center, no extra charge
SAML on Scale ($90)
SAML on Pro ($89.95)
HIPAA BAA
No
Yes, accepted in AWS Artifact
Not mentioned
No; not on Twilio's HIPAA-eligible list
Bottom line
From its public pages, Resend is the cheapest way here to send 50,000 emails a month and the easiest to clear a security review with. Check the data-residency and HIPAA limits first.
From its public pages, SES is the least expensive way here to send at volume and carries AWS’s compliance scope, including a HIPAA BAA. Plan for the sandbox review and for setting up each region you use.
From its public pages, Mailgun is the most complete compliance package of the three, with an EU sending region and SSO on its $90 plan. On smaller plans, plan around short log retention.
From its public pages, SendGrid fits teams that want EU data residency, SSO and a dedicated IP on one self-serve plan. Check the 3-day history on Essentials and ask for the overage rate first.
Evidence: Resend: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Amazon SES: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; Mailgun: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run; SendGrid: facts checked 2026-10-15 from its public sign-up and pricing pages, no completed hands-on run. Prices in USD as listed, excluding tax. "–" means not recorded.
own SOC 2 Type II, self-serve DPA, EU sending region
Team access controls
2.5 / 10, Fair
SSO as a paid add-on; user limits not stated
Message history
10.0 / 10, Excellent
30 days on the entry plan
Review
Review from public pages
Written from Resend's public pages (pricing, security or privacy, and docs) as read on Oct 15, 2026. We did not sign up, and no hands-on run is published yet.
What the public pages show
We read Resend's pricing, security and documentation pages on Oct 15, 2026; we did not sign up for this review. The docs list two things before the first send: a domain verified with Resend and an API key. Quickstarts cover 14 environments, from Node.js and Next.js to Rust, Elixir, .NET and a CLI.
The security page is unusually direct. It names the SOC 2 Type II audit, says the report and a pre-signed DPA sit under Settings → Documents, and states what Resend does not do: it is not HIPAA compliant, cannot sign a Business Associate Agreement, and does not sign country-specific DPAs. It also explains that choosing an EU region for a domain changes where mail is sent from, not where data is stored, which stays in the United States.
The pricing page separates transactional plans, priced by emails sent, from marketing plans, priced by contacts. Self-serve billing is monthly only.
Strengths
Compliance documents on the free plan
SOC 2 Type II and GDPR are listed on every plan, and the report and DPA are self-serve downloads.
vs Postmark: Postmark says it has not had its own SOC audit; it offers its data center’s SOC 2 report under NDA.
Lowest listed price at 50,000 emails
Pro covers 50,000 emails a month for $20 with no daily cap.
vs Mailgun: Mailgun’s 50,000-email Foundation plan is $35 a month after a one-month free trial.
Clear about its limits
The security page states no HIPAA, no BAA, no country-specific DPAs and US data storage, so a compliance review has its answers without a ticket.
Wide quickstart coverage
Fourteen quickstarts in the docs, including Rust, Elixir, .NET and a CLI.
Things to know
Not for health data
Resend is not HIPAA compliant and cannot sign a Business Associate Agreement.
Data stays in the US
An EU sending region changes where mail leaves from; stored data remains in the United States under Standard Contractual Clauses.
Workaround: If you need EU sending infrastructure, Mailgun offers US and EU regions from one account.
Free plan capped at 100 a day
The 3,000 free emails a month come with a limit of 100 per day, which suits testing more than production.
SSO is an add-on
SSO is $150/mo on Scale and included only on Enterprise.
Pricing reality
Transactional plans are priced by emails sent per month. Free covers 3,000 (100 a day). Pro is $20 for 50,000 or $35 for 100,000, with 10 domains and $0.90 per 1,000 beyond the plan. Scale runs from $90 for 100,000 to $1,150 for 2.5 million, with overage falling to $0.46 per 1,000, 1,000 domains and Slack support.
Add-ons are where the bill grows: a dedicated IP is $30/mo (for senders above 3,000 a day) and SSO $150/mo, both on Scale. Billing is monthly only; annual terms go through sales. Marketing email is a separate plan priced by contacts.
You want the lower price at 50,000 emails and compliance documents on the free plan.
Pick Mailgun when
You need an EU sending region with SOC 2 and ISO 27001, or SAML SSO included on the $90 plan.
Choose it if
You want SOC 2 Type II and DPA documents on any plan, including free.
You send up to about 100,000 emails a month and want the lowest listed price.
You build on one of its 14 quickstart environments.
Look elsewhere if
You send health data that needs a HIPAA BAA.
Your stored data must stay in the EU.
Bottom line
From its public pages, Resend is the cheapest way here to send 50,000 emails a month and the easiest to clear a security review with. Check the data-residency and HIPAA limits first.
Plan limits at a glance
Limit
As recorded
Free plan
3,000/mo, 100 a day
Price for 50,000 emails/mo
$20 (Pro)
Retention on the entry paid plan
30 days
SOC 2 report
Type II, self-serve download
EU option
EU sending region; data stored in the US
SSO
$150/mo add-on on Scale
HIPAA BAA
No
Read from the vendor's public pages on Oct 15, 2026. No hands-on run is published yet. How we check
We have not published a sign-up run for Resend yet. The access facts above were read from its sign-up and pricing pages on Oct 15, 2026.
We read the pricing, security and docs pages of three transactional email APIs on the same day and scored them on the same six indicators. What each one sells, what 50,000 emails cost, and who should pick which.