Postmark DPA Acknowledgement
Status: PENDING OPERATOR ACTION Trigger: Before first EU customer Last updated: 2026-05-19 UTC
Vendor Details
| Field | Value |
|---|---|
| Vendor | ActiveCampaign, LLC (d/b/a Postmark) |
| Vendor address | 1 N Dearborn St, 5th Floor, Chicago, IL 60602, USA |
| Role | Transactional email delivery — processes email addresses and email content for account confirmation, password reset, billing receipts, and system notifications |
| DPA / GDPR page | https://postmarkapp.com/eu-privacy |
| DPA execution | Self-serve — in Postmark account settings |
| SCC mechanism | Yes — Postmark's DPA includes 2021 EU Commission SCCs; UK Addendum available |
How to Execute
Time estimate: ~10 minutes
- Log in to Postmark at
https://account.postmarkapp.com/ - Navigate to Your Company → Legal → Data Processing Agreement
- May also appear as: Account → GDPR → DPA
- Direct URL pattern:
https://account.postmarkapp.com/legal(navigate from account menu if URL changes) - Review the Postmark Data Processing Agreement.
- Click the agreement acceptance/signature button.
- Download the executed PDF from the legal page.
- Save the PDF to Google Drive at:
legal/DPAs/postmark-activecampaign-dpa-<year>.pdf - Update this document (fields below) and the summary table in
vendor-dpas-status.md.
Note on finding the DPA in Postmark: As of 2026 the navigation path may vary slightly. If the path
above is not found, check:
- https://postmarkapp.com/eu-privacy for the latest DPA execution link
- The Postmark support docs at https://postmarkapp.com/support for "GDPR DPA" search
Execution Record
Fill in this section after signing.
| Field | Value |
|---|---|
| Signed date | PENDING |
| Signed by | Kristerpher, MooseQuest LLC dba Raxx (operator / data controller) |
| Postmark account ID | [fill in — shown in account settings] |
| Postmark DPA version | [fill in — shown on the legal page] |
| SCC modules confirmed | [fill in — confirm 2021 Module 2 Controller-to-Processor is included; note if older SCCs are referenced] |
| UK Addendum included | [yes/no] |
| Google Drive file | [fill in — full Drive URL after upload] |
| Drive folder | legal/DPAs/ |
| Notes | [note whether Postmark references ActiveCampaign as parent entity on the DPA document; confirm which entity is the contracting party] |
What This Covers
Postmark's DPA covers Postmark's role as a transactional email processor for: - Recipient email addresses - Email content (account confirmation codes, billing receipts, notification text) - Delivery metadata (sent timestamp, delivery status, bounce events) - Postmark's email delivery logs (retained 45 days by Postmark default)
Note on email content and PII: Postmark processes the full text of emails Raxx sends. Confirm that no raw PII beyond name and email is included in email templates (e.g., account numbers, billing details, strategy configurations) — or document the specific PII categories if they are included, and update the RoPA Activity 6 accordingly.
Version History
| Date | Change | By |
|---|---|---|
| 2026-05-19 UTC | Document created | raxx-dev-bot (feature/vendor-dpa-acknowledgements) |