Companies / Mailtrap / Subprocessors
Mailtrap provides an email API and SMTP service for sending transactional and promotional emails, plus an email sandbox for testing emails in staging and development environments. It serves developer and product teams.
Summarized from its homepage on 4 Nov 2026.
Subprocessors of Mailtrap
Mailtrap declares 12 subprocessors, including AI providers OpenAI.
| Subprocessor | Purpose |
|---|---|
| Infrastructure | |
| Payment processing | |
| Product Analytics and Session Replay | |
| Risk assessment | |
| Infrastructure – powers the in-app AI Assistant | |
| Infrastructure | |
| Infrastructure – email rendering previews | |
| AI-assisted email content analysis for abuse prevention and security | |
| Infrastructure | |
| Communication |
2 more subprocessors
See the full list with purpose, location and first seen date.
Create a free accountWork email, no card. Already have one? Log inQuestions about Mailtrap
Certifications
| Standard | What the source says | Checked |
|---|---|---|
| ISO 27001Company's statement | “ISO 27001 DORA Visit Trust Center”The company's own statement. We have not checked an accreditation registry. | 11 Nov 2026Source |
| SOC 2Company's statement | “SOC 2 ISO 27001 DORA Visit Trust Center”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA. | 11 Nov 2026Source |
We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Mailtrap lacks it.
Recent changes
| Date | Change |
|---|---|
| 11 Nov 2026 | removed Microsoft, Inc. (Clarity) |
| 11 Nov 2026 | added Clarity |
| 11 Nov 2026 | no longer shows Microsoft, Inc. (Clarity) |
| 11 Nov 2026 | now shows Clarity |
Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.
See Mailtrap's full stack
Every vendor with its source and date, and an alert when Mailtrap adds or drops one. The same lookup works for any company.
- Every company and vendor, with its public source
- 100 API calls a month, plus MCP and the Chrome extension
- Work email only. No card, no sales call