Mindbaz

France · owned by Mindbaz (France) · sweego.io · 10 vendors

Sweego is a European transactional email and SMS sending platform operated by Mindbaz, a French simplified joint-stock corporation (SAS) registered under number 893 278 382 and headquartered at 19 rue d'Amiens, Lille (59800), France. The platform provides developers and product builders with a RESTful API and SMTP access to send, monitor, and manage transactional emails and SMS at scale, with GDPR-compliant infrastructure hosted in France. Mindbaz brings deep deliverability expertise, sending approximately 15 billion emails per year for clients across Europe.

Resilience scores

Disruption prediction

Mindbaz has an estimated 17% probability of disruption in the next 6 months.

4 of Mindbaz's 10 vendors monitored for disruptions.

Technology vendors

Insights

Last updated 2026-07-02 · revision 3

10 direct vendors, 126 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

Mindbaz demonstrates high migration readiness, largely due to its modern and modular technology stack. The architecture is built around RESTful APIs, SMTP, and webhook delivery, utilizing standard protocols (SPF, DKIM, DMARC, JSON) which inherently reduce vendor lock-in and simplify integration or migration. The use of multi-language SDKs further indicates a flexible and developer-friendly platform. Data hosting on OVH Cloud and Scaleway, while specific to French cloud providers, signifies a cloud-oriented infrastructure, making a transition to other cloud environments more feasible than from a legacy on-premise setup. Vendor relationships, with 8 distinct entities and geographic diversity across 5 countries, suggest a moderate level of vendor dependency, not excessively high. However, certain factors prevent an extremely high score: financial stability (revenue concentration, growth) is unknown, which could impact funding for a migration project. Specific regulatory compliance beyond GDPR (e.g., NIS2 assessment) and explicit data residency requirements are also unknown, potentially introducing complexities during a migration. The vendor lock-in risk is explicitly stated as unknown, which is a minor detractor. Overall, the modern, API-first approach and cloud infrastructure are strong enablers for migration.

Compliance

7 in-scope frameworks identified; showing 3.

ePrivacy Directive — Assessment Required

Mindbaz/Sweego provides email and SMS routing services, which are directly subject to the ePrivacy Directive (2002/58/EC as amended by 2009/136/EC) and its French implementation (LCEN, Law No. 2004-575). These laws govern electronic communications, including requirements for consent for marketing emails/SMS, opt-out mechanisms, sender identification, and cookie consent. As a platform that enables customers to send transactional and potentially marketing communications, Mindbaz must ensure its platform and its customers' use of the platform comply with these rules. The company's Acceptable Use Policy and DPA place responsibility on customers for obtaining consent, but Mindbaz as the routing infrastructure provider has platform-level obligations. Risk is Medium because violations of ePrivacy/LCEN can result in CNIL enforcement actions and reputational damage, and the company's scale (15+ billion emails/year) amplifies the potential impact of any non-compliance.

Evidence: https://www.sweego.io/data-privacy-agreement-dpa, https://www.sweego.io/acceptable-use-policy, https://www.sweego.io

ISO 27001 (source) — Assessment Required

ISO 27001 certification is highly relevant for Mindbaz/Sweego as a cloud SaaS provider processing large volumes of customer personal data (email addresses, SMS recipients) on behalf of business clients. The company's DPA references technical and organisational security measures consistent with ISO 27001 controls (encryption, pseudonymisation, access controls, incident response, business continuity), but no ISO 27001 certification has been publicly disclosed. Risk is Medium because: (1) absence of ISO 27001 may be a competitive disadvantage when bidding for enterprise contracts; (2) French ANSSI and CNIL increasingly reference ISO 27001 as a benchmark for adequate security measures under GDPR Art. 32; (3) the company's scale (15+ billion emails/year) and role as a data processor make robust ISMS critical; (4) however, ISO 27001 is not legally mandated and many SMEs operate without it.

Evidence: https://www.sweego.io/data-privacy-agreement-dpa, https://www.sweego.io/list-of-subsequent-subcontractors

French Electronic Communications Regulatory Framework — Assessment Required

ARCEP (Autorité de Régulation des Communications Électroniques, des Postes et de la Distribution de la Presse) regulates electronic communications in France. As an SMS routing provider (using CM.com Netherlands B.V. as SMS provider), Mindbaz/Sweego may have obligations under ARCEP's framework for electronic communications services. However, as a SaaS platform that routes SMS through a licensed SMS provider (CM.com), rather than operating its own telecommunications infrastructure, Mindbaz's direct ARCEP obligations may be limited. Risk is Low because the primary telecommunications regulatory obligations likely fall on CM.com as the licensed SMS provider, not on Mindbaz as the application-layer routing platform.

Evidence: https://www.sweego.io/list-of-subsequent-subcontractors, https://www.sweego.io

Financials

Three-year financials

Financial Resilience Score: 5/10

Mindbaz SAS (operator of the Sweego platform) is a small French B2B SaaS company headquartered in Lille with approximately 12 years of operating history in the email deliverability niche. The company demonstrates qualitative strengths including a recurring SaaS revenue model, a blue-chip French client base (Reworld Media, M6 Group, Prisma Digital, Groupe Figaro, Mr. Bricolage), and reported scale of ~15-16 billion emails delivered per year. Its GDPR-native, French-hosted positioning (OVH data centres, no US Cloud Act exposure) provides a defensible moat against US-based competitors for European regulated buyers. However, financial resilience cannot be quantitatively assessed because Mindbaz SAS has not published (or has opted for confidentiality on) its statutory accounts at the French Trade Register. No revenue, EBIT, or equity figures are available. The company faces significant competitive pressure from well-funded global incumbents (Twilio SendGrid, Mailgun/Sinch, Amazon SES, Brevo) and French competitors, with clear scale disadvantages. Additionally, revenue appears concentrated in a small number of large French media/retail clients, creating customer concentration risk. The ongoing product transition to developer-oriented Sweego adds execution risk. A mid-range score reflects the balance between a proven niche business with premium clients and the opacity plus scale/competition risks.

Key strengths: 12-year operating history since 2013 in email deliverability niche, Recurring SaaS/subscription revenue model with predictable ARR, Blue-chip French enterprise client base (M6, Prisma, Reworld Media, Figaro), Scale of ~15-16 billion emails delivered annually, GDPR-native positioning with French data centres (OVH) as differentiator, Product diversification via Sweego (transactional email & SMS API)

Risk factors: Intense competition from well-funded global incumbents (Twilio SendGrid, Mailgun, Amazon SES, Brevo), Small-scale challenger with limited capital vs. billion-dollar competitors, Customer concentration risk on small number of large French media/retail clients, Regulatory/deliverability risk from ISP filtering rules and EU consent frameworks, Execution risk on Sweego pivot to developer-oriented transactional messaging, Financial opacity - no published accounts limit external solvency assessment

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report