- What it is
- No Nordic languages, in any of the five markets π΅
- The free tier is unusually honest π’
- Where your data is stored, and who can reach it π΅
- The subprocessor list, and the AI vendors π‘
- Brevo may train its AI on your content π΅
- Aura AI, and what it actually does
- Who owns it π΅
- Paying from the Nordics π΅
- Contract terms worth knowing π΅
- On the GDPR badge
- Verdict
- Scores
- What is still untested or unresolved
- Sources
- Keeping this up to date
At the time of writing, NordicAITools has no affiliate relationship with Brevo. If that changes, this disclosure changes with it, and this verdict stays exactly as written.
This is general information, not legal advice.
Evidence note: signup, interface and the free tier are π’, checked in the product on 13 October 2026. Hosting, ownership, contracts and pricing are π΅ from Brevo’s own documentation and from European Commission merger filings. Items that rest on third-party reporting are marked π‘ in place.
How we test: https://nordicaitools.com/how-we-test/
Our GDPR-compliant email marketing roundup recommends three Nordic tools and carries no affiliate links, deliberately. This is a separate standalone look at a fourth option, and it does carry a disclosure. The roundup stays exactly as it is.
Best GDPR-Compliant Email MArketing Tools for Nordic Businesses (2026): https://nordicaitools.com/best-gdpr-compliant-email-marketing-tools-for-nordic-businesses-2026/
Brevo earns its own article because it gets one thing right that almost nothing else in this category does: every server holding your data sits inside the European Union, on every plan including the free one. No Enterprise upsell, no region picker, no “contact sales.”
It also gets one thing wrong that matters here specifically. There is no Nordic language anywhere in the product.
Both of those are worth your time, and so is what we found in the subprocessor list.


What it is
An all-in-one marketing platform: email, SMS, WhatsApp and web push, plus a CRM and sales pipeline. Founded in Paris in 2012 as Sendinblue, renamed Brevo in May 2023. Around 600,000 customers across 180 countries, over 1,000 employees, profitable, with ARR expected above 200 million euros for 2025.
If you are on Mailchimp and uneasy about where your subscriber list lives, this is the tool you are probably looking for.
No Nordic languages, in any of the five markets π΅
Start here, because it is the thing a Nordic buyer needs to know first and no review mentions it.
Brevo’s interface is available in six languages: English in US and UK variants, French, German, Italian, Spanish and Portuguese. The help centre is the same six. Customer support is the same six.
| Interface | Help centre | Support | Your campaign content | |
|---|---|---|---|---|
| Finnish | No | No | No | Yes |
| Swedish | No | No | No | Yes |
| Norwegian | No | No | No | Yes |
| Danish | No | No | No | Yes |
| Icelandic | No | No | No | Yes |
The important distinction. Your customer-facing content is unaffected. You write your emails, SMS and landing pages yourself, in whatever language you like, and Finnish or Icelandic copy sends exactly as you typed it. The constraint is on the people operating the tool, not on what it sends.
So the practical question is not whether Brevo works for a Nordic audience. It does. The question is whether everyone on your team is comfortable administering a marketing platform in English.
For a Finnish technical founder, that is a non-issue. For a small company where the person actually sending the newsletter is not confident in English, it is a real cost, and it is the kind of cost that shows up later as a tool nobody wants to touch.
Worth comparing against our Pipedrive review, where Finnish, Swedish and Norwegian interfaces exist and Danish and Icelandic do not. Brevo has none of the five. In this category that is common rather than scandalous, which is precisely why the Nordic-built options in our email roundup still have a reason to exist.
Two language items are unresolved and worth a trial before you commit. Aura AI will translate email templates into 18 languages, but Brevo does not publish which 18. Multi-language campaigns, released in March 2026, use a dropdown whose contents are also unpublished, and more than one language needs Enterprise, or Professional plus a paid add-on. If you plan to run Finnish and Swedish versions of the same campaign, test that the languages you need are actually in those lists.
The live chat widget follows the visitor’s browser language among your configured support languages, auto-translates its default texts and falls back to English. Whether the Nordic defaults are any good is not documented, though a developer can add custom translations.

The free tier is unusually honest π’
This is the best free plan we have reviewed, and the generosity is structural rather than cosmetic.
300 emails a day, up to 100,000 contacts, one seat. Most competitors cap contacts hard, because the contact count is what actually constrains a growing business. Brevo caps daily sending instead and lets your list grow.
No credit card to sign up. Email address and organisation name. Cancel or change plans from the dashboard without talking to anyone.
What you get for nothing
Email. One-off campaigns, a drag-and-drop editor with multi-column layouts, buttons, personalised attributes and mobile previews. Pre-built templates, custom HTML, and system templates including double opt-in. Contact import by CSV, XLSX, TXT, raw paste or third-party sync.
Marketing automation. This does not belong on a free plan. The full workflow engine, with blueprints for welcome sequences, abandoned cart, post-purchase, birthday and anniversary triggers, and follow-ups based on opens and clicks. Plus step monitoring, real-time message tracking and per-contact activity logs. Competitors treat automation as the thing you upgrade for.
A working CRM. Contact profiles with full campaign interaction history, unlimited lists, folders and dynamic segments, a companies workspace, team tasks, and a Kanban deals pipeline capped at 50 open deals.
Transactional email and developer access. SMTP relay on smtp-relay.brevo.com port 587, REST APIs, PHP and Postfix integration, outbound webhooks, a transactional template builder, and delivery, bounce, open and click logs. For a small business that needs password resets to actually arrive, this alone justifies the signup.
Forms with the compliance parts included. Hosted and embedded forms with custom fields, list subscriptions, GDPR consent checkboxes and CAPTCHA. The consent checkbox being free rather than a paid upsell says something about who built this.
Live chat and scheduling. Shared team inbox with a website widget, conversation assignment, visitors-online view, and a meeting scheduler.
E-commerce sync. One-click plugins for Shopify, WooCommerce, PrestaShop, Magento, BigCommerce, Shopware and nopCommerce.
SMS and WhatsApp can be sent from a free account on prepaid credits, with none included. All five Nordic countries are supported SMS destinations, priced per country, and sender ID registration is mandatory for each destination.
What is locked
| Feature | Needs |
|---|---|
| Landing pages | Standard or higher |
| Pop-up forms | Professional or higher |
| Push notifications | Standard or Professional |
| Conversion analytics and Studio | Standard or Professional |
| Custom objects | Professional or Enterprise |
| A/B testing and send-time optimisation | Standard or higher |
| Removing Brevo branding from emails | Standard or higher |
Clicking a locked feature produces an upgrade prompt rather than a dead end, and the interface says clearly what your plan does and does not include. That sounds minor. It is the difference between evaluating a tool and guessing at it, and after a run of products that hide everything until you pay, it is conspicuous.
The branding mark on free-tier emails is the honest constraint on running a business entirely for nothing.
Pricing: Monthly price

Pricing: Yearly price

Where your data is stored, and who can reach it π΅
This section has two halves and most reviews only write the first one.
Storage is genuinely EU-only. Brevo’s documentation states that all hosting servers processing and storing its databases are located within the European Union, on every plan. OVH, a French company, is the primary provider, in France and Germany only. Google Cloud in Belgium handles the remainder including encrypted backups. Data is copied at least three times across at least two geographic locations, backups run at least weekly, and data is encrypted before going to Google Cloud. Storage is described as Tier 3 and PCI DSS certified.
There is no region selector because there is no other region. For Norway and Iceland, both EEA members, EU hosting counts as inside the EEA.
That is a better default than most American tools, where EU residency is an Enterprise-only feature or does not exist.
Access is not EU-only. Brevo’s own privacy policy states personal data may be transferred “in particular to the United States of America and India,” under Standard Contractual Clauses with supplementary measures, with Brevo Inc. certified under the EU-US Data Privacy Framework.
A third-party GDPR review by a MalmΓΆ-based consultancy puts it more bluntly than Brevo does: the EU promise covers storage, not access. π‘ Group entities in the United States and India reach data stored in France and Belgium, for support and operations.
Both halves are true at once. Your subscriber list lives in Roubaix or Frankfurt and never leaves. People in Noida and Seattle can open it to answer your support ticket.
That is not a scandal, and it is how a great many European companies with global support teams operate. It is also not what “all servers in the EU” leads a reader to believe, and if your requirement is that no non-EU person can access your customer data, this configuration does not meet it.
One overstatement worth noting. Brevo’s marketing says data is “backed up across three geographically distinct servers.” Its own documentation says at least three copies across at least two geographic locations. Three copies over two locations is not three distinct locations. Small, and the technical page is the accurate one.
The subprocessor list, and the AI vendors π‘
We could not load the subprocessor annex from Brevo’s Terms of Service directly, so this comes from a third-party review that reproduces part of it. Treat it as reported rather than confirmed, and check the current annex yourself if it is load-bearing.
| Subprocessor | Purpose | Location as reported |
|---|---|---|
| OVH | Hosting | France |
| Google Cloud | Hosting and backups | Belgium |
| Cloudflare | CDN and web firewall | USA and EU |
| Zendesk | Support tickets | EU and USA |
| Convrrt | Landing pages | USA |
| OpenAI | AI features | EU and USA |
| Google Gemini | AI features | EU and USA |
| Anthropic | AI features | USA |
| Langfuse | AI monitoring | EU |
| Brevo CRM Solutions, India | Support and operations | access from India |
| Sendinblue Inc., USA | Support and operations | access from USA |
Brevo’s privacy policy separately names OpenAI for the website chatbot, Cloudflare Turnstile, Google reCAPTCHA and Fonts, and payment processors Adyen, Stripe, PayPal, GoCardless and Chargebee.
So the answer to the question nobody asks: Brevo’s AI runs on OpenAI, Google Gemini and Anthropic. Anthropic is listed as US-located. OpenAI and Gemini as EU and US.
That matters because of where Brevo positions itself. A company whose main differentiator is EU data residency routes its AI features through three American model providers. The landing page builder, Convrrt, is US-located too.
There is a tension in Brevo’s own material here worth naming. The February 2025 AI Lab announcement says Brevo’s own agents run “on its existing servers within the European Union.” The subprocessor list says US model providers are involved. The most likely reconciliation is that in-house agents are EU-hosted while some Aura features call external large language models, but that is our inference and not something Brevo states. If this decides your purchase, ask them in writing.
Brevo may train its AI on your content π΅
This is in the Terms, section 6, and it is the finding in this review we would most want a Nordic business to read.
“Brevo may use Content and Usage Data to enrich and train its AI Features.” The stated purposes are performance, fraud, phishing and spam prevention, and security. Third-party AI providers may only use your data to deliver the feature, not to train their own models.
We found no stated opt-out on any page we read.
So your campaign copy, and potentially your usage patterns, may feed Brevo’s own models. For a lot of businesses that is unremarkable. For a law firm, a clinic or a consultancy whose email copy contains anything commercially sensitive, that clause deserves a read by someone who reads clauses for a living.
Brevo also requires that customers do not put GDPR Article 9 special category data into AI features, and that outputs are reviewed. It classifies its AI features as minimal or limited risk under the EU AI Act and states it does not deploy general-purpose AI models in the service.
If you want the platform without the training exposure, the straightforward answer is to not use the AI features. They are optional, and everything that makes Brevo good works without them.
Aura AI, and what it actually does
On a free account: “Generate email with AI” for subject lines and body copy, an AI image generator in the media library, and a guided automation builder where you describe a workflow in plain language and it configures the trigger, delay and action.
Paid tiers add send-time optimisation, predictive audience segments, template translation into 18 unpublished languages, and an AI Data Analyst.
The guided automation builder is the most genuinely useful of these, because what stops small businesses using automation is not the writing, it is not knowing how to wire a workflow.
Brevo has committed 50 million euros over five years to an AI Lab, so expect this surface to grow.
Who owns it π΅
This is the part where our earlier reporting needed correcting, and the primary source is unambiguous.
The European Commission cleared the transaction on 7 October 2025: the acquisition of joint control of Eiffel 65 SAS, trading as Brevo, by Armand Thiberge, Oakley Viking Luxco (Oakley Capital) and General Atlantic Bloom (General Atlantic). The 500 million euro deal completed in December 2025 as a leveraged buyout, taking Brevo to unicorn valuation.
Joint control, not a sale. Founder Armand Thiberge remains CEO and shares control with the two funds. Bpifrance, the French state investment bank, and Bridgepoint reinvested as minority holders. Partech exited fully.
Reported stakes, from trade press rather than official filings π‘: General Atlantic around 25%, Oakley Capital around 25%, management and employees around 26%, Bpifrance and Bridgepoint around 24% combined. Official releases give no percentages, stating only that founder, management and employees are the largest single group.
What that means for a sovereignty-minded buyer. General Atlantic is American. Oakley Capital is British. Together they hold roughly half. The founder and the French state investment bank are still on the register, the parent is still French, and your contract is still under French law. This is genuinely more European than Pipedrive under Vista Equity or Penneo under Visma, and it is no longer a French independent either.
No Nordic presence of any kind. The parent is Sendinblue SAS, trading as Brevo, at 17 rue Salneuve in Paris, RCS Paris 498 019 298. Germany, Austria and Switzerland contract with Brevo GmbH in Berlin under German law. North America contracts with Brevo Inc. in Delaware. India contracts with Brevo CRM Solutions in Noida.
Nordic customers contract with the French entity, under French law, with disputes going to the Commercial Court of Paris. There is no Nordic office, no Nordic subsidiary and no Nordic investor. If a dispute ever matters to you, it is a Paris matter conducted in French law.
Other credentials: certified B Corp, EcoVadis Bronze, member of France’s Next40, ISO 27001:2022 with the certificate downloadable from their security page. We found no SOC 2 certification mentioned anywhere.
Paying from the Nordics π΅
Brevo publishes prices in 17 currencies. None of them are SEK, NOK, DKK or ISK.
| Country | Local currency | What you pay in |
|---|---|---|
| Finland | EUR | EUR, no conversion |
| Sweden | SEK | EUR, with bank FX cost |
| Norway | NOK | EUR, with bank FX cost |
| Denmark | DKK | EUR, low FX risk given the peg |
| Iceland | ISK | EUR, with bank FX cost |
So Finnish readers get the clean deal and everyone else pays a small permanent conversion cost. Denmark is nearly fine because the krone is pegged to the euro. Sweden, Norway and Iceland are not.
Note also that EUR is the cheaper currency at the same tier: Starter is 7 euros against 9 dollars, Standard 15 euros against 18 dollars. If you have a choice, bill in euros.
Entry prices per month, October 2026, with annual billing about 10% less: Free at 0, Starter at 7 euros, Standard at 15 euros, Professional at 350 euros, Enterprise custom. These are starting points. The real figure scales with email volume and contact count, and seats, SMS and WhatsApp credits and add-ons cost extra.
Payment is by card through Adyen or Stripe, PayPal, or SEPA direct debit if your billing country is European, though not for the first payment. All five Nordic countries are in SEPA, but a SEK, NOK, DKK or ISK account still pays euros through it. No Nordic payment methods. No Swish, no Vipps, no MobilePay, no Klarna invoicing.
Prices exclude VAT, added according to your country, and you add your VAT or organisation number on the billing page. Norway and Iceland sit outside the EU VAT area, so the treatment differs from Sweden, Finland and Denmark. Check your first invoice.
One to watch: non-standard invoicing costs 100 euros a year under the Terms.
Contract terms worth knowing π΅
The DPA is part of the standard Terms for every customer, with Brevo as processor. New subprocessors get notice before authorisation, and if you object on EU-law grounds you can terminate within 30 days of that notice. Audits are capped at one per contract year, remote by default, and Brevo may substitute third-party audit reports.
On deletion: all customer data destroyed within three months of a request after termination. Brevo’s own retention is five years for account data after contract end, ten years for invoices and one year for security logs.
The Data Protection Officer is at the Paris address, with a UK GDPR Article 27 representative also listed.
On the GDPR badge
Brevo’s site says “GDPR & CCPA Compliant.” The same passage describes what it actually provides: customisable forms, consent records and data request management. Those are real and more than many competitors offer.
But no processor is compliant on your behalf. Import a list you have no consent records for and Brevo’s certification does nothing for you. You are the controller, the obligation is yours, and the tool’s job is to make meeting it practical. This one does that well.
Verdict
For a Finnish business that wants off Mailchimp, this is the recommendation. EU-only storage on every plan including free, euro billing with no conversion cost, a free tier you can genuinely run a business on, and a French parent under French law. Among the realistic options, nothing else combines those.
For Swedish, Norwegian and Icelandic businesses, the same product with two extra frictions: a permanent FX cost on every invoice, and no payment method anyone locally uses.
For any team where English is a barrier, think harder. There is no Nordic interface, no Nordic help centre and no Nordic support, and a marketing platform your colleague avoids is worse than a cheaper one they will actually open. The Nordic-built options in our email marketing roundup exist for exactly this buyer.
Three things to go in with your eyes open about. Storage is EU-only but access is not, with support and operations reaching your data from the US and India. The AI features run through OpenAI, Google Gemini and Anthropic, which is worth knowing if you chose Brevo for its data story. And Brevo’s Terms permit it to train its own AI on your content, with no opt-out we could find, so if that bothers you, do not use the AI features.
The honest summary: the best European answer in this category, genuinely EU-hosted, genuinely French-governed, with a global access model and an AI stack that are both more American than the marketing suggests, and no Nordic language anywhere in it.
Scores
Sovereignty: 7/10 π΅ One of the highest on this site so far. Mistral being the #1.
In favour: EU-only hosting on every plan including free, with no Enterprise gate and no region to misconfigure. OVH, a French provider, as primary host. French parent, French law, Paris jurisdiction. Bpifrance on the shareholder register. Founder in joint control. ISO 27001:2022 with a downloadable certificate. B Corp certified. A DPA in the standard Terms for all customers, with subprocessor objection rights. Euro billing.
Against: support and operations access from the United States and India, which means the EU guarantee covers storage and not access. US-located subprocessors for landing pages and AI. An AI stack running on three American model providers. A Terms clause permitting Brevo to train its AI on customer content with no stated opt-out. Roughly half of control held by American and British funds. A Delaware subsidiary certified under the Data Privacy Framework. No SOC 2.
Seven rather than eight because of the AI training clause and the global access model, which are the two things a compliance-driven buyer would most want to be different. Seven rather than six because the EU-only hosting applies to every plan, which is a materially stronger default than anything else reviewed here.
For comparison on this scale: Pipedrive 6, ElevenLabs 4.
Usability: 8/10 π’ Based on signup, the interface and working through the free tier. We have not run a full campaign to a real list, so this covers the evaluation experience rather than daily production use, and gets revisited when it does.
What earns it: no card at signup, a free tier with real capability including automation and a CRM, honest labelling of what your plan includes, a fast uncluttered interface, and self-serve cancellation.
What holds it at 8 rather than higher: there is no Nordic language in the product, so every Nordic user administers it in English. For this site’s readers that is a usability fact and not a footnote.
What is still untested or unresolved
- Whether the 18 Aura translation languages and the multi-language campaign dropdown include any Nordic language. Not published, and it decides whether localised campaigns are practical.
- Whether the chat widget has usable built-in Nordic default texts.
- The current full subprocessor annex, which did not load for us. The AI providers above come from a third-party reproduction.
- Whether customers can opt out of AI training on their content.
- Whether Enterprise contracts can invoice in SEK, NOK or DKK.
- Whether Γ€, ΓΆ and Γ₯ survive correctly into delivered subject lines. A broken diacritic in a subject line is a failure your customer sees.
- Deliverability in practice. Brevo claims 99% on transactional email, which every provider in this category claims and none can demonstrate to a reviewer.
Sources
- EU-only hosting, OVH in France and Germany, Google Cloud in Belgium, backup practice, Tier 3 and PCI DSS: help.brevo.com Data storage location, and brevo.com/security
- Transfers to the United States and India, SCCs, Data Privacy Framework certification, named processors, DPO and Article 27 representative: brevo.com/legal/privacypolicy
- DPA terms, subprocessor objection rights, audit limits, deletion and retention periods, AI training clause (section 6), non-standard invoicing fee: brevo.com/legal/termsofuse
- Interface, help centre and support languages: help.brevo.com, Change the language of your Brevo account, and Contact support
- Multi-language campaigns and Aura translation into 18 languages: brevo.com releases and help centre
- Aura AI features and availability by plan: help.brevo.com, Discover Aura
- AI Lab, 50 million euros over five years, EU-hosted agents claim: brevo.com/press/ai-lab-launch
- Plan prices in EUR and USD, 17 supported currencies: brevo.com/pricing
- Payment methods and SEPA conditions: help.brevo.com payment methods
- Nordic SMS destinations and mandatory sender ID registration: help.brevo.com supported countries for SMS, and sender ID
- Joint control acquisition cleared 7 October 2025 by the European Commission (Thiberge, Oakley Capital, General Atlantic): EU merger notice
- 500 million euro December 2025 LBO, Bpifrance and Bridgepoint reinvesting, Partech exiting: General Atlantic, Oakley Capital, Goodwin and Clipperton announcements
- Reported ownership percentages π‘: emailexpert, French Tech Journal
- Founding, rename, acquisitions, offices, B Corp: en.wikipedia.org/wiki/Brevo
- Subprocessor list reproduction and the storage-versus-access analysis π‘: Hejlsvig Consulting, MalmΓΆ, October 2026 (third party)
- Free tier capabilities and locked features: hands-on, free account, 13 October 2026 π’
All checked 13 October 2026 unless a page carries its own date.
Keeping this up to date
Pricing in this category moves regularly, and Brevo is spending 50 million euros on AI features over five years, so the AI surface and its subprocessors will change. The ownership position settled in December 2025 and is now stable, which is why this review states it as fact rather than flagging it.
Last reviewed: 13 October 2026.
