SimpleVerifier Team · Reviewed
Is email verification GDPR compliant?
It can be, if you have a lawful basis for processing the addresses, tell people how their data is used, and your verifier signs a data processing agreement. No tool is compliant by itself and we make no certification claims; compliance depends on how you collect the list and what you do with the results.
What to check
The points that matter, in order.
- Lawful basis: consent or legitimate interests for the original purpose, documented.
- Transparency: Article 14 requires telling people when you got their data from another source, within a set time.
- Processor terms: a DPA with the verifier, plus its subprocessor list and transfer terms.
- Minimisation and retention: send only the column you need; delete results you no longer need.
A boundary
This is general information, not legal advice; ask a lawyer about your own situation.
Related questions
- Is SimpleVerifier GDPR certified?
- No, and we make no certification claims. Compliance depends on how you collect the list and what you do with it; the DPA, security and subprocessor pages describe what we do.
Sources
- GDPR Article 14: information where data is not obtained from the person
- ICO: electronic mail marketing rules (PECR)
Figures marked as ours come from SimpleVerifier’s own dated tests on made-up addresses, published with their data on the research page. No customer data is used, and we publish no accuracy percentage because we have no independent measurement to back one.
Do it now
Test it on a real address first
Type any address. It gets the same check the paid plans run: syntax, the domain’s mail servers and, where the provider allows it, a live mailbox check. Nothing is sent to the address.
Five checks a minute, no account needed. Nothing is sent to the address — we ask its mail server whether the mailbox exists, then disconnect.
Have a list? Sign in with Google and the first 100 addresses are checked free, with results to download. No card.
By continuing you agree to our Terms and Privacy Policy.