HIPAA- and GDPR-minded transactional email
Password resets, invoices, and appointment reminders often contain personal or health data. Blindrelay is built for teams where the DPO asks where message content lives — and expects an architectural answer, not a retention schedule.
The procurement question
Most transactional ESPs retain message body and recipient addresses on vendor infrastructure. Under GDPR that makes the ESP a processor with copies of your users' data. Under HIPAA, PHI in email may require a BAA and expand your breach surface. Blindrelay's position: do not retain what you do not need to relay.
How Blindrelay reduces processor risk
| Message content | In RAM during delivery; on disk only while a deferred delivery waits to retry (up to 24h). Turn retries off and it never touches disk. |
| Recipient address at rest | One-way hashes only — a bcrypt hash and a keyed lookup hash, not recoverable from either |
| EU deployment | Production runs in the EU by default |
| Observability | OTLP export to your stack — you control retention and access |
| Processor terms (DPA) | GDPR Article 28 terms are part of the Terms of Service on every plan — they match the architecture: no message content is stored |
| BAA (HIPAA) | Available on request for paid plans |
What we do not claim
- Blindrelay is not a HIPAA-certified product. We process messages in transit to relay them — content is visible to the sending process during delivery.
- You remain responsible for what you put in email, lawful basis under GDPR, and whether a BAA is required for your use case — ask for one with a paid plan.
- TLS protects data in flight on the API; it does not encrypt content from the relay during processing. Client-side encryption before send is the only way to hide content from the relay entirely.
Materials for procurement
Open the one-page procurement pack for DPO-ready answers. Compare Postmark vs Blindrelay for HIPAA or read the full security page.
Open the procurement pack See pricingEnterprise or compliance questions: info@blindrelay.app
Switching from a US ESP? Compare Resend, Postmark, or Mailgun — each page includes the API mapping. See the API reference.