Compliance

Compliance

Where we stand on frameworks customers commonly ask about.

In progress

SOC 2

Controls mapped; report timeline available on request.

Supported

GDPR

DPA, subprocessors list, and data subject request path.

Roadmap

ISO 27001

Aligned practices; certification not claimed yet.

Scoped out

PCI DSS (processor-hosted)

Card data never touches Xurel — Stripe Checkout and PayPal host the payment page.

Ship your first email today.

Create an account, verify your domain, and send in minutes.