AuthSMTP Due Diligence

Run due diligence on AuthSMTP: check compliance and get alerts when suppliers change.

United Kingdom · www.authsmtp.com · 13 vendors

AuthSMTP is an outgoing SMTP email service that provides email deliverability solutions for e-commerce websites, mailing lists, and email applications. It enables users to send high volumes of email reliably and securely, offering features like instant setup, flexible pricing, and responsive support. The service is designed for performance and availability, utilizing high-performance and redundant systems.

Resilience scores

Technology vendors

Services catalogue

3 services in catalogue across 2 categories; runs on 13 sub-vendors.

Insights

Last updated 2026-07-19 · revision 12

13 direct vendors, 145 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

6 in-scope frameworks identified; showing 3.

ISO 27001 (source) — No public evidence

Evidence: https://www.authsmtp.com/features.php, https://www.authsmtp.com/documentation/gdpr-statement.html, https://sealserver.trustwave.com/cert.php?customerId=6403d31bfaee4647a897d2c899d6a9e4&size=105x54&style=invert

GDPR (source) — Evidence found

Evidence: https://www.authsmtp.com/documentation/gdpr-statement.html, https://www.authsmtp.com/documentation/privacy-policy.html, https://www.authsmtp.com/documentation/service-privacy-policy.html, https://www.authsmtp.com/documentation/data-processing-addendum.html, https://www.authsmtp.com/documentation/data-retention-policy.html, https://www.authsmtp.com/documentation/data-subject-access-request.html, https://www.authsmtp.com/documentation/data-subject-deletion-request.html, https://ico.org.uk/ESDWebPages/Entry/Z200704X

UK NIS Regulations 2018 — No public evidence

Evidence: https://www.legislation.gov.uk/uksi/2018/506/contents/made, https://ico.org.uk/for-organisations/the-guide-to-nis/, https://www.authsmtp.com/documentation/gdpr-statement.html

Financials

Three-year financials

Financial Resilience Score: 6/10

AuthSMTP, operated by GetOnline Ltd, demonstrates strong qualitative financial resilience through longevity (28+ years of continuous trading since 1997, with AuthSMTP running since 2003) and a subscription-based recurring revenue model that provides predictable cash flow. The business appears to be organically funded and bootstrapped, with no evidence of external venture capital, acquisitions, or debt-driven expansion, suggesting disciplined cash-flow-financed growth. Low capital intensity of the SMTP relay business model and diversified product mix (domains, hosting, email, AuthSMTP) further support resilience. However, the score is moderated by significant risks. As a small UK private company filing abridged accounts, there is minimal public financial disclosure—no revenue, EBIT, or profitability data is available, limiting external visibility. The company competes against hyperscale, well-funded competitors (SendGrid/Twilio, Mailgun, Amazon SES, Postmark, Brevo, Mailjet) with superior infrastructure, APIs, and pricing at scale. Small-scale operations limit investment capacity in AI-driven deliverability, DMARC/BIMI compliance, and geo-redundant infrastructure. Regulatory changes such as Google/Yahoo bulk-sender rules (2024) raise compliance costs disproportionately for smaller providers. Overall, resilience is supported by longevity and recurring revenue, but competitive positioning is the primary long-run risk.

Key strengths: 28+ years of continuous trading (since 1997), 22+ years of AuthSMTP operation (since 2003), Subscription-based recurring revenue model, Low capital intensity of SMTP relay business, Diversified product mix (AuthSMTP, domains, hosting, email), Global customer base with multi-currency pricing (USD, GBP, EUR), Organic, bootstrapped, cash-flow-financed growth

Risk factors: Intense competition from hyperscale providers (SendGrid, Mailgun, Amazon SES, Postmark), Small-scale operator with limited investment capacity, Key-person / founder concentration risk, Regulatory pressure from Google/Yahoo bulk-sender rules (2024) and DMARC/BIMI, Opacity due to abridged accounts filing (small company exemption), Limited ability to invest in AI-driven deliverability and geo-redundant infrastructure

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report