Compliance with strict GDPR legal standards in the EEA

Description

Promote International helps companies and organizations create excellent learning results through engaging learning journeys. Transactional emails are an important part of the Promote learning platform - where users receive confirmation of training enrollment or notifications about anything important going on in the training programs. Therefore, the company was looking for an infrastructure that standardises and best secures the sending of just these types of emails.
We are incredibly pleased that they decided on the Email RESTful API from Emaillabs.

Encountered problems

1.

The client wanted the best possible delivery of transactional emails. People who participate in a course in the Promote platform needed to get confirmations of participation and notifications about activity in the course promptly. Any delay could result in customer frustration, ultimately losing conversions and damaging the sender’s reputation.

2.

Promote International was looking for email servers fully hosted in the EEA and was keen to have better control over the deliverability of transactional emails through access to detailed logs from the mailings. Processing personal data outside the European Economic Area (i.e., to the U.S.) is treated more strictly by the GDPR. Additional requirements must be met for processing in the EEA. Processing outside the EEA, therefore, raises other risks of violating the GDPR and imposing fines. Entrusting data processing to an entity with its headquarters and servers in the EEA limits the scope of activities the data controller must perform in connection with the entrustment.

3.

With a dedicated infrastructure and ongoing monitoring of the factors that contribute to deliverability - including the mailing reputation of the domain and IP addresses - the client can take care of the hygiene level of its contact bases and keep an eye on the throughput and deliverability of real-time mailings.

4.

Among other things, the client could not analyse the path taken by its messages due to the lack of a dedicated IP. All emails were sent from a shared IP, making it impossible for the client to care about its reputation as a sender fully.

5.

Sending from a shared IP also caused transactional emails generated by our client to queue up behind, for example, marketing emails sent by other companies. This induced delays in sending important messages - confirmation of training enrollment or access to educational materials.

6.

To enhance the sender’s reputation, the client required assistance since they lacked a dedicated IP. By improving this aspect, emails sent from Promote International will be better delivered to local and global providers.

7.

So far, the company's employees have had to handle sending problems on their own, as they did not have a dedicated account manager and support from Customer Service to help with at least the technical aspects that affect the deliverability rate.

Solutions

1.

The connection of the infrastructure was done via SMTP, thanks to the integration, the client provides its recipients with standardisation and encryption of necessary communications containing personal data.

2.

By choosing our services, the client no longer has to worry about legal aspects related to issues of compliance with the regulations of GDPR outside the European Economic Area, as our servers are all located in the European Union. Vercom S.A., to which EmailLabs belongs, has also successfully passed the ISO 27001 supervision audit and ISO 27018 certification. The audits confirm the application of the best practices of the information security management system and the application of the code of international principles to support the management of personal data in cloud computing. For the client, this means complete security of processed data.

3.

We offered the client a dedicated IP. Thanks to this solution, the client has control over its own reputation and does not risk a lower sender rating due to other senders, with whom, for example, mixed traffic can be sent from the same infrastructure. Dedicated IP is a sign to providers that Promote International sends only priority messages, resulting in faster delivery and improved classification by mailbox providers. Dedicated IP also means having its sending throughput, which does not have to be shared with other senders.

4.

The client has been given access to a broad spectrum of data, from general ones like bounce stats, opens, clicks, and feedback loops, as well as detailed ones along with messages that are sent back by receiving servers. This gives tremendous power to detect possible problems and hints on how to solve them.

5.

The company uses extended logs retention (from 15 to 30 days), that is, detailed data on each sending. Logs provide essential evidence that the mailing took place, who opened, clicked on the message and at what time.

6.

The client can also always count on the support of an EmailLabs dedicated supervisor, with whom he is in constant contact. As a result, Promote International can react much more quickly to problems that arise in sending messages to its recipients without risking its reputation with providers.

We needed a transactional email service hosted in the EEA for our platform. We're using EmailLabs to send email to the users of our platform, not for marketing purposes, so we need maximum delivery rate. Having a dedicated IP means we are in control of our own reputation and do not risk getting downrated due to other customers using the same IP for marketing emails so this was one main reason why we picked EmailLabs.

Andreas Aronsson

Product Manager
Promote International

Read more case studies

Create an account with EmailLabs today

Improve your deliverability results in Email channel