European Alternatives to Twilio - SMS API (2026) | European Purpose

European SMS API Alternatives

European alternatives to Twilio for sending SMS from code. Every provider here is a company established in Europe, verified from its own imprint or terms, with what it says about where the messages and phone numbers are stored.

How we rank these tools — 4-step process
  1. 1
    European ownership, verified

    The company is headquartered and incorporated in the EU, EEA or Switzerland, and processes customer data in Europe. A US parent company disqualifies a tool from this page regardless of where its servers are.

  2. 2
    Category fit and hands-on review

    What the tool actually does, who it suits, and where it falls short — checked against the vendor’s own documentation, changelog and pricing page rather than its marketing copy.

  3. 3
    Compliance and pricing check

    GDPR posture, hosting location and the prices quoted on this page are verified against the vendor’s public pricing before publication, and re-checked when we revisit the category.

  4. 4
    Position on this page

    Placement on this page can be paid, and that can affect the order tools appear in. It never buys a listing: a tool that fails the checks above is not here at any price, and payment does not change the shortcomings we write about. A vendor can ask us to correct a factual error — not to remove a criticism.

Vendors can pay for visibility on this page. It never changes what an entry says about a product, including the criticism, and we earn nothing when you click through to a vendor. Paid placement can affect the order in which tools appear; it never affects whether a tool is listed. Editorial policy

12 European SMS API

CM.com

Dutch messaging platform that runs its own data centre in the Netherlands

Netherlands Per message, one price per country
Own data centre in the Netherlands60+ direct operator connectionsSelf-service free trial

GatewayAPI

Danish SMS API with a public per-country price list and an EU-only setup

Denmark Pay-as-you-go, no subscription
Public price list for 200+ countriesEU setup with EU-owned cloudISAE 3000 and 3402 statements

smsmode

French platform hosted in Marseille and Paris, with health-data hosting on request

France From €9/month plus per message
Interxion Marseille and Scaleway ParisISO/IEC 27001:2022HDS health-data hosting option

seven

Kiel-based gateway charging one flat rate per SMS worldwide

Germany €0.075 per SMS worldwide
One flat rate to every countryLicensed German telecoms operatorISO/IEC 27001:2022 certified

46elks

Swedish telecoms operator with published rates and its own servers

Sweden From €0.093 per SMS part
Registered Swedish telecoms operatorServers owned by 46elksVoice and SIP on the same API

SMSAPI

Polish gateway running two data centres 150 km apart

Poland Pay-as-you-go, €30 minimum
Two Polish data centresISO/IEC 27001:2022 by TÜV NORDFree test messages on signup

Spryng

Dutch provider built for healthcare, certified to NEN 7510 as well as ISO 27001

Netherlands From €0.069 per SMS
ISO 27001 and NEN 7510Private clouds in FrankfurtMinimum purchase of 100 credits

Sinch

Stockholm-listed CPaaS with global scale, running on AWS and Google Cloud

Sweden Pay-as-you-go, rates on request
Listed on Nasdaq StockholmEU regions in Ireland, Germany, SwedenUS sub-processors named

BulkGate

Czech gateway with per-operator pricing and storage only in the Czech Republic

Czech Republic From €0.0463 per SMS
Storage providers all in CzechiaPriced per destination operatorNo monthly fee or commitment

Octopush

Marseille platform with monthly plans that cut the per-message rate

France From €0.045 per SMS
ISO/IEC 27001:2013 certifiedMonthly plans from €9SMS, email and voice in one API

Bird

Amsterdam platform, formerly MessageBird, with rates published in dollars

Netherlands From $0.050 per SMS
Published per-country rate cardNo platform or per-seat feeContracting entity is Bird B.V.

Infobip

Omnichannel platform with the widest operator reach and no public price list

United Kingdom Pay-as-you-go, quote on request
Registered in London as Infobip LimitedFree trial accountNo data centre locations published

Key takeaways

  • CM.com ranks #1 among the European SMS APIs in this directory because it is the only provider here whose own privacy statement says all data is processed and stored in a data centre in the Netherlands that CM.com manages and controls itself. Everyone else either names someone else's data centre or does not name one at all.
  • Eight of the twelve publish a per-message rate you can read before you sign up: GatewayAPI, seven, 46elks, SMSAPI, Spryng, BulkGate, Octopush and Bird. Sinch and Infobip publish nothing and route you to sales, which for an API is a meaningful difference in how fast you can start.
  • seven charges one flat €0.075 per SMS to every country in the world. Nothing else in this category does that; the rest price per destination, and BulkGate prices per destination operator, so a message to Odido costs €0.0562 where the same message to KPN costs €0.0463.
  • Sinch is the clearest case of European ownership on American infrastructure. Sinch AB is Swedish and listed on Nasdaq Stockholm, but the sub-processor list names Amazon Web Services Inc., Google LLC, Zendesk Inc. and Sinch America Inc., and covers US regions as well as Ireland, Germany and Sweden.
  • Infobip is not a Croatian company on paper. The entity on its own privacy notice and website terms is Infobip Limited, registered at 181 Queen Victoria Street in London, number 7085757 — the United Kingdom, covered by an adequacy decision rather than being inside the EU.
  • Only two providers here address regulated health data directly: smsmode with optional HDS hosting in France, and Spryng with NEN 7510 alongside ISO 27001. If you are sending appointment reminders for a clinic, that shortens the list to two.

A European SMS API is an HTTP interface for sending and receiving text messages, sold by a company established in Europe, where the phone numbers and the message bodies are processed under European jurisdiction rather than under the US CLOUD Act.

It is the layer underneath one-time passcodes, delivery notifications and appointment reminders — which is exactly why the data it touches is sensitive: a phone number is a persistent identifier, and a 2FA code reveals when and from where someone logged in.

European SMS API compared

European SMS API tools compared on position, country, entry price and best use
PositionToolEstablishedEntry priceBest for
#1 CM.com Netherlands Per message, with one fixed price per destination country; the rate is shown per country on the pricing page rather than as a single headline number Organisations that have to name the country their message data sits in
#2 GatewayAPI Denmark Pay-as-you-go per message against a published price list for more than 200 countries; no subscription by default, with separate charges for virtual numbers and keywords Developers who want a price list, an account and a working request in one sitting
#3 smsmode France Subscriptions from €9/month (Basic) through €69 (Classic), €159 (Medium) and €499 (Premium), each with consumption billing on top; or prepaid packs from 1,000 SMS upwards French organisations, and anyone sending messages about someone's health
#4 seven Germany €0.075 per SMS worldwide with no setup fee; dedicated numbers and SIM hosting from €19.90/month with a €9.90 setup fee, plus €0.01 per inbound SMS. Lookups are €0.005 (MNP), €0.0075 (CNAM) and €0.01 (HLR) Teams sending to many countries who want one number in the budget
#5 46elks Sweden Published per-message and per-minute rates: €0.093 per SMS part to the Netherlands, €0.224 per minute to Dutch mobiles, €0.03 to landlines. Virtual numbers €5/month, extra call channels €3/month, SIP accounts €3/month. No platform fee Small engineering teams that want SMS and voice from one Nordic operator
#6 SMSAPI Poland Pay-as-you-go with volume tiers and no setup fee or contract; €0.052 per SMS to Austria and €0.04 to Australia are the published examples. Minimum payment €30 Buyers who need two certified data centres and a certificate number to quote
#7 Spryng Netherlands €0.07 per SMS to the Netherlands, €0.069 to Belgium and Germany; minimum purchase of 100 credits, no start-up costs and no subscription. Volume quotes within 24 hours Dutch healthcare and logistics senders who need NEN 7510 on the contract
#8 Sinch Sweden Pay-as-you-go; per-message rates are not published on the public pricing page and require a sales conversation or an account Companies that need global operator reach from a European counterparty
#9 BulkGate Czech Republic Priced per destination operator: to the Netherlands from €0.0463 (KPN, Vodafone, Telfort) up to €0.0661 (CleverEnable). No monthly fee, no minimum fulfilment, credit does not expire High-volume senders who want the lowest published rate and storage in one country
#10 Octopush France Prepaid from €0.061 per SMS at 1,000 messages down to €0.045 at 150,000; or monthly plans — Basic €9 (€0.045/SMS), Essential €39 (€0.044), Business €159 (€0.033), Enterprise on quote. HLR lookups €0.005 French senders whose volume justifies a monthly plan
#11 Bird Netherlands Published per-country rates, quoted in US dollars: $0.050 to the United Kingdom, $0.065 to France, $0.080 to Germany, $0.085 to the Netherlands, charged per segment with carrier fees on top. No platform fee and no per-seat charge Teams replacing a Twilio-shaped stack with one Amsterdam contract
#12 Infobip United Kingdom Pay-as-you-go; no public rate card, only a calculator and a route to sales Enterprises that need reach into markets the smaller providers cannot serve

Every European SMS API tool reviewed

#1 CM.com

Konijnenberg 24, Breda, Netherlands Founded 1999 Per message, with one fixed price per destination country; the rate is shown per country on the pricing page rather than as a single headline number Self-service signup with a free trial

Best for: Organisations that have to name the country their message data sits in

  • Operating company. CM.com Netherlands B.V.
  • Jurisdiction. EU (Netherlands)
  • Where the data sits. Netherlands, in CM.com's own data centre — the privacy statement states that all data is processed and stored in a data centre located in the Netherlands and fully managed and controlled by CM.com
  • Source code. Closed source
  • Replaces. Twilio, Vonage, Sinch

CM.com is the only provider in this category that answers the residency question without an asterisk.

Its privacy statement says all data is processed and stored in its own data centre, located in the Netherlands and fully managed and controlled by CM.com. Not a region on somebody else's cloud, not "the EU" in general — a building the company runs. For a Dutch hospital, an insurer or a public body writing a data protection impact assessment, that turns a diagram into a sentence.

The product underneath is a genuine carrier platform rather than a reseller. CM.com states more than 60 direct carrier and operator connections and reach into 250 operator networks, and says all software on the platform is designed and developed by its own staff. The company has been in Breda since 1999 and is listed on Euronext Amsterdam, which means the ownership is public and the accounts are filed — a durability argument most providers in this list cannot make.

The cost is transparency on price. CM.com quotes one fixed price per destination country, but the number loads per country on the pricing page rather than appearing as a rate card you can scan, and the SMS API sits inside a much larger conversational-commerce suite with marketing, payments, ticketing and a customer-service cloud. A developer who wants one endpoint and a price list will find GatewayAPI or seven a quicker read.

What CM.com does well

  • Own data centre in the Netherlands, with all processing and storage stated to happen there
  • More than 60 direct carrier connections and 250 operator networks, so the routing chain is short
  • Platform software developed in-house rather than licensed, per the company's own statement
  • Self-service signup with a free trial, unusual for a provider at this size
  • Listed on Euronext Amsterdam and trading since 1999, so ownership and accounts are public

Where CM.com falls short

  • No headline per-message rate: prices load per destination country rather than as a readable rate card
  • The SMS API is one part of a large conversational-commerce suite, which is more product than a pure API buyer needs
  • No ISO 27001 or comparable certification stated on the pages checked for this entry
  • Enterprise-shaped sales motion despite the self-service trial

Standout feature. The data centre is theirs. CM.com is the only provider in this category that says all data is processed and stored in a facility it manages itself, in a named country, rather than in a region of somebody else's cloud.

#2 GatewayAPI

Buchwaldsgade 50, Odense, Denmark Founded 1999 Pay-as-you-go per message against a published price list for more than 200 countries; no subscription by default, with separate charges for virtual numbers and keywords Free account with no subscription; you pay only for the traffic you send

Best for: Developers who want a price list, an account and a working request in one sitting

  • Operating company. ONLINECITY.IO ApS, CVR 27364276
  • Jurisdiction. EU (Denmark)
  • Where the data sits. EU — customers on the EU setup have data stored with a cloud provider that both operates physically in the EU and is owned by an EU company, and connections run through EU telecoms and A2P providers by default. The cloud provider is not named. Support agents in Vietnam have access under standard contractual clauses
  • Independent checks. Annual ISAE 3000 and ISAE 3402 auditor's statements on GDPR compliance
  • Source code. Closed source
  • Replaces. Twilio, Vonage, MessageBird

GatewayAPI is what an SMS API should look like from a developer's side: a published price list for more than 200 countries, a free account, no subscription, and billing that is only the traffic you send. Virtual numbers and keywords cost extra and are priced separately, which is honest rather than hidden. There is no minimum spend and no contract to exit.

The company behind it is ONLINECITY.IO ApS in Odense, CVR 27364276, building communication platforms since 1999 — an unusually long run for a company most people outside Denmark have not heard of.

The compliance position is specific: annual ISAE 3000 and ISAE 3402 auditor's statements on GDPR compliance. ISAE 3402 is the assurance report service organisations use for controls that affect their customers' own compliance, which is exactly the evidence a data controller needs about a processor, and it is stronger than a self-declared "GDPR compliant" badge.

The EU setup is where the caveats live. GatewayAPI states that data for those customers is stored with a cloud provider that both operates physically in the EU and is owned by an EU company, and that connections run through EU telecoms and A2P providers by default — but it does not name that provider.

The privacy policy also discloses that customer support agents in Vietnam have access under standard contractual clauses. Both are disclosed rather than buried, which is more than most, but neither is the same as a named data centre.

What GatewayAPI does well

  • Published price list for more than 200 countries, readable before you create an account
  • No subscription and no minimum spend: you pay only for traffic sent
  • Annual ISAE 3000 and ISAE 3402 auditor's statements specifically on GDPR compliance
  • EU setup routes through EU telecoms and A2P providers by default, on an EU-owned cloud
  • Danish company operating since 1999, with the entity and CVR number published

Where GatewayAPI falls short

  • The EU cloud provider is described but never named, so you cannot check it yourself
  • Support agents in Vietnam have access to data under standard contractual clauses
  • No free trial credits — the account is free but the first message is not
  • Virtual numbers and keywords are priced separately on top of the per-message rate

Standout feature. ISAE 3402 on GDPR compliance, renewed annually. It is the one assurance report in this category written for the question a data controller actually has to answer about its processor.

#3 smsmode

4 rue Duverger, Marseille, France Founded 2004 Subscriptions from €9/month (Basic) through €69 (Classic), €159 (Medium) and €499 (Premium), each with consumption billing on top; or prepaid packs from 1,000 SMS upwards Free trial account

Best for: French organisations, and anyone sending messages about someone's health

  • Operating company. Calade Technologies SARL, RCS Marseille, SIRET 478 715 766 00059
  • Jurisdiction. EU (France)
  • Where the data sits. France — two ISO 27001 certified data centres, Interxion MRS1 in Marseille and Scaleway DC4 in Paris, with optional HDS-certified hosting for health data
  • Independent checks. ISO/IEC 27001:2022, certified since 1 January 2025; HDS (French health data hosting) available as an option
  • Source code. Closed source
  • Replaces. Twilio, Vonage

smsmode names its data centres, which almost nobody in this category does. Two ISO 27001 certified facilities: Interxion MRS1 in Marseille and Scaleway DC4 in Paris.

Both in France, both checkable, and one of them run by Scaleway — a French cloud provider rather than a hyperscaler. On top of that sits optional HDS hosting, the French certification for hosting health data, which isolates the account on certified infrastructure. If you are sending appointment reminders for a clinic in France, that is the requirement rather than a nice-to-have.

The company is Calade Technologies, a SARL in Marseille with share capital of €22,804, trading as smsmode since 2004 and running more than a billion messages in 2024 across over 10,000 active customer accounts. It took ISO/IEC 27001:2022 certification on 1 January 2025, which puts it on the current version of the standard rather than the 2013 one several competitors still hold.

Pricing is the awkward part for small senders. The subscription ladder runs €9, €69, €159 and €499 a month, with consumption billed on top, and the higher tiers are what unlock phone support and a named account manager.

Prepaid packs start at 1,000 SMS for buyers who do not want a monthly commitment. RCS, WhatsApp and Time2chat are subscription-only and not available prepaid, so a prepaid customer is on SMS and nothing else. The documentation and support are strongest in French.

What smsmode does well

  • Names its data centres: Interxion MRS1 in Marseille and Scaleway DC4 in Paris
  • Optional HDS hosting for French health data, isolating the account on certified infrastructure
  • ISO/IEC 27001:2022 — the current version of the standard, certified since January 2025
  • Trading since 2004 with over a billion messages routed in 2024
  • Prepaid packs from 1,000 SMS for buyers who will not sign a monthly commitment

Where smsmode falls short

  • Subscription tiers start at €9/month and consumption is billed on top of them
  • RCS, WhatsApp and Time2chat are subscription-only, so prepaid customers get SMS alone
  • The privacy policy concedes some service providers may transfer data outside the EU, with guarantees available on request
  • Interface, documentation and support are oriented to French-speaking customers

Standout feature. HDS hosting as an option. smsmode is the only provider in this category that can put a message containing health information on infrastructure certified for exactly that, under French law.

#4 seven

Willestr. 4-6, Kiel, Germany Founded 2003 €0.075 per SMS worldwide with no setup fee; dedicated numbers and SIM hosting from €19.90/month with a €9.90 setup fee, plus €0.01 per inbound SMS. Lookups are €0.005 (MNP), €0.0075 (CNAM) and €0.01 (HLR) Prepaid balance, no contract and no minimum term

Best for: Teams sending to many countries who want one number in the budget

  • Operating company. seven communications GmbH & Co. KG, Amtsgericht Kiel HRA 11707 KI
  • Jurisdiction. EU (Germany)
  • Where the data sits. EU — seven states it uses "pure EU routing" and ISO 27001 certified data centres, but does not name the data centre or the country it sits in on its own pages
  • Independent checks. ISO/IEC 27001:2022 (MSECB, certificate CERT-001978, valid until 11 August 2029); licensed German telecoms company, Bundesnetzagentur registration DREG 22/137
  • Source code. Closed source
  • Replaces. Twilio, Vonage, Plivo

seven charges €0.075 per SMS. To Germany, to Nigeria, to Australia — one rate, everywhere, with no setup fee and no contract. Every other provider in this category prices per destination and several price per destination operator, which means a spreadsheet and a monthly surprise. For a team whose traffic is scattered across dozens of countries, a flat rate removes a whole category of forecasting work, and for anyone sending only to western Europe it is simply expensive.

The company is seven communications GmbH & Co. KG in Kiel, registered at Amtsgericht Kiel under HRA 11707 KI, trading since 2003. It is a licensed German telecoms company under Bundesnetzagentur registration DREG 22/137, which brings telecoms secrecy duties on top of the GDPR, and it holds ISO/IEC 27001:2022 under MSECB certificate CERT-001978, valid to 11 August 2029. Named certificate, named registrar, named expiry — a level of specificity worth noticing.

What seven does not do is tell you where the servers are. It states "pure EU routing" and ISO 27001 certified data centres, but no country and no facility, which for a company that leans on "Made in Germany" is a gap.

The extras are priced clearly: dedicated numbers and SIM hosting from €19.90 a month with a €9.90 setup, €0.01 per inbound SMS, and lookups at €0.005 for MNP, €0.0075 for CNAM and €0.01 for HLR. Payment is by card, transfer, PayPal, SEPA direct debit or cryptocurrency.

What seven does well

  • One flat rate of €0.075 per SMS worldwide, with no setup fee and no contract
  • Licensed German telecoms company under Bundesnetzagentur registration DREG 22/137
  • ISO/IEC 27001:2022 with the certificate number and expiry published
  • Voice, lookups and Email2SMS on the same API, so one vendor can replace two
  • Trading from Kiel since 2003, with the full imprint and register entry published

Where seven falls short

  • Does not name its data centres or their country, despite the "Made in Germany" positioning
  • The flat rate is poor value for traffic concentrated in cheap western European destinations
  • Dedicated numbers cost €19.90/month plus a €9.90 setup, which is high for a single number
  • Documentation, support and market focus are oriented to the DACH region

Standout feature. One price for the whole world. seven is the only provider in this category where the cost of a message does not depend on where it is going, which turns SMS budgeting into arithmetic instead of a spreadsheet.

#5 46elks

Sidenvävargatan 17, Uppsala, Sweden Published per-message and per-minute rates: €0.093 per SMS part to the Netherlands, €0.224 per minute to Dutch mobiles, €0.03 to landlines. Virtual numbers €5/month, extra call channels €3/month, SIP accounts €3/month. No platform fee

Best for: Small engineering teams that want SMS and voice from one Nordic operator

  • Operating company. 46elks AB, registered in Sweden under number 556838-8184
  • Jurisdiction. EU (Sweden)
  • Where the data sits. Sweden and the EU — the data protection policy requires that servers processing personal data are owned by 46elks and that personal data stays inside the European Union unless a transfer outside it is explicitly requested. Specific data centre locations are not published
  • Independent checks. Registered telecommunications operator under EU directive 2002/58/EC as implemented by Swedish law 2022:482
  • Source code. Closed source
  • Replaces. Twilio, Vonage

46elks is a registered telecommunications operator under EU directive 2002/58/EC as implemented by Swedish law 2022:482, and that matters more than it sounds.

A licensed operator carries telecoms secrecy obligations about message content that sit above the GDPR, which is a different legal footing from a software company that resells routes. Its data protection policy goes further and requires that servers processing personal data are owned by 46elks, and that personal data stays inside the European Union unless a transfer out is explicitly requested.

The product is deliberately small and completely priced in public. €0.093 per SMS part to the Netherlands, €0.224 per minute to Dutch mobiles, €0.03 to landlines, €5 a month for a virtual number, €3 for an extra call channel or a SIP account.

Voice, SIP and WebRTC sit on the same API as SMS, with realtime voice over WebSocket at no extra cost, so a Twilio deployment using both messaging and telephony can often be replaced by this one vendor rather than two.

46elks AB is registered in Sweden under number 556838-8184 with an office in Uppsala. It does not publish a founding year, an ISO certification, or the location of its data centres beyond "owned by us, inside the EU" — and there is no free trial or starter credit advertised on the pricing page. This is a small Swedish company that documents its API well and says less about itself than the enterprise players do.

What 46elks does well

  • Registered Swedish telecoms operator, with telecoms secrecy duties above the GDPR
  • Policy requires servers processing personal data to be owned by 46elks and data to stay in the EU
  • Every rate published: per SMS part, per voice minute, per number, per channel
  • SMS, voice, SIP and WebRTC on one API, so one vendor can replace two
  • No platform fee and no monthly minimum — numbers are the only recurring cost

Where 46elks falls short

  • No free trial or starter credits advertised on the pricing page
  • No ISO 27001 or comparable certification stated on its own pages
  • Does not publish data centre locations, only that the servers are its own and in the EU
  • No founding year published, and a small company with no enterprise support contract on offer

Standout feature. Telecoms operator status plus servers it owns. 46elks is the only provider here that combines a regulatory licence with a written commitment that the hardware processing your data belongs to the company you are paying.

#6 SMSAPI

Poland Founded 2007 Pay-as-you-go with volume tiers and no setup fee or contract; €0.052 per SMS to Austria and €0.04 to Australia are the published examples. Minimum payment €30 Free test messages on signup

Best for: Buyers who need two certified data centres and a certificate number to quote

  • Operating company. LINK Mobility Poland sp. z o.o., part of LINK Mobility Group (Oslo Stock Exchange: LINK)
  • Jurisdiction. EU (Poland)
  • Where the data sits. Poland — two redundant data centres, ATMAN and T-Mobile, located more than 150 km apart, with all data inside the EEA
  • Independent checks. PN-EN ISO/IEC 27001:2023-08 (ISO/IEC 27001:2022), certified by TÜV NORD Polska
  • Source code. Closed source
  • Replaces. Twilio, Vonage

SMSAPI publishes the infrastructure detail most of this category leaves out: two redundant data centres in Poland, ATMAN and T-Mobile, located more than 150 km apart, with all data inside the EEA.

That is a disaster-recovery statement as much as a residency one, and the distance is the point — two facilities in the same city are one power grid and one flood plain. The ISO/IEC 27001:2022 certification is issued by TÜV NORD Polska, a named certification body rather than an unattributed claim.

The commercial terms are built for people who want to try before committing: free test messages on signup, pay-as-you-go with volume tiers, no set-up fee and no contract, and a €30 minimum payment. Published examples include €0.052 per SMS to Austria. SMSAPI has been running since 2007, which in this market is a long time, and covers 217 countries.

The ownership is the thing to know before signing. SMSAPI is the brand of LINK Mobility Poland sp. z o.o., part of LINK Mobility Group, listed on the Oslo Stock Exchange.

That is still European — Norway is in the EEA — but it means the self-serve Polish product you are buying sits inside a large Nordic group rather than being an independent vendor, and group-level pricing or product decisions can reach it. The public price examples are also sparse: you download a price list rather than reading a rate card on the page.

What SMSAPI does well

  • Two Polish data centres, ATMAN and T-Mobile, more than 150 km apart, all data inside the EEA
  • ISO/IEC 27001:2022 certified by TÜV NORD Polska, a named certification body
  • Free test messages on signup, with no set-up fee and no contract
  • Running since 2007 with coverage in 217 countries
  • Low entry point: €30 minimum payment rather than a monthly commitment

Where SMSAPI falls short

  • Owned by LINK Mobility Group of Oslo, so this is a group brand rather than an independent vendor
  • Prices are in a downloadable list rather than a readable rate card on the page
  • The registered address of the Polish entity is not published on the site itself
  • Product and support are strongest for the Polish and central European market

Standout feature. Two data centres, 150 km apart, both named. SMSAPI is the only provider here that publishes its redundancy geography rather than asking you to take continuity on trust.

#7 Spryng

Netherlands Founded 2006 €0.07 per SMS to the Netherlands, €0.069 to Belgium and Germany; minimum purchase of 100 credits, no start-up costs and no subscription. Volume quotes within 24 hours Free test credits on signup, with no obligation to buy

Best for: Dutch healthcare and logistics senders who need NEN 7510 on the contract

  • Operating company. Spryng B.V.
  • Jurisdiction. EU (Netherlands)
  • Where the data sits. Germany, not the Netherlands — Spryng states its virtual private clouds are located in Frankfurt so all data stays within the EU. The cloud provider behind those private clouds is not named
  • Independent checks. ISO 27001:2013 and NEN 7510, the Dutch information security standard for healthcare
  • Source code. Closed source
  • Replaces. Twilio, Vonage, MessageBird

Spryng was founded in 2006 for the healthcare sector and still carries that shape. It holds NEN 7510, the Dutch information security standard for healthcare, alongside ISO 27001:2013 — and NEN 7510 is the certificate a Dutch care provider's procurement team asks for by name. Very few messaging providers hold it, which is why Spryng keeps turning up in Dutch clinics, pharmacies and home-care organisations.

Commercially it is straightforward. €0.07 per SMS to the Netherlands, €0.069 to Belgium and Germany, a minimum purchase of 100 credits, no start-up costs and no subscription you are stuck with. Free test credits arrive on signup with no obligation to buy, and volume quotes come back within 24 hours. Spryng B.V. contracts under Dutch law with the courts of Amsterdam, and the phone numbers on the site cover the Netherlands and Belgium.

The residency detail is worth reading carefully, because it is not what the branding implies. Spryng states its virtual private clouds are located in Frankfurt so that all data stays within the EU.

The company is Dutch; the data is German; the cloud provider behind those private clouds is not named anywhere on the site. For GDPR purposes that is fine. For a contract that says "hosted in the Netherlands", it is not — and the unnamed provider means you cannot tell whether a US hyperscaler sits underneath.

What Spryng does well

  • NEN 7510 as well as ISO 27001, which is the Dutch healthcare security certificate by name
  • Free test credits on signup with no obligation to purchase
  • Published rates — €0.07 to the Netherlands, €0.069 to Belgium and Germany — with no subscription
  • Minimum purchase of only 100 credits, so evaluating costs almost nothing
  • Dutch entity, Dutch law, Amsterdam courts, and volume quotes inside 24 hours

Where Spryng falls short

  • Data sits in Frankfurt, Germany, not in the Netherlands where the company is
  • The cloud provider behind the Frankfurt private clouds is not named, so the layer underneath is unknown
  • ISO 27001:2013 rather than the current 2022 version of the standard
  • The KvK number and registered address are not published on the site itself
  • Benelux focus: coverage and support are built around the Netherlands and Belgium

Standout feature. NEN 7510. It is the certificate Dutch healthcare procurement asks for by name, and Spryng is the only provider in this category that holds it.

#8 Sinch

Stockholm, Sweden Founded 2008 Pay-as-you-go; per-message rates are not published on the public pricing page and require a sales conversation or an account Self-serve signup

Best for: Companies that need global operator reach from a European counterparty

  • Operating company. Sinch AB (publ), listed on Nasdaq Stockholm (SINCH)
  • Jurisdiction. EU (Sweden)
  • Where the data sits. Sweden-domiciled, on AWS and Google Cloud — the sub-processor list covers EU regions in Ireland, Germany and Sweden alongside US regions, and names Amazon Web Services Inc., Google LLC, Zendesk Inc. and Sinch America Inc. among the sub-processors. Which ones apply depends on the service and the customer's region
  • Source code. Closed source
  • Replaces. Twilio, Vonage, Bandwidth

Sinch is the largest European-domiciled name in this category and the closest thing Europe has to a Twilio-scale CPaaS. Founded in 2008, headquartered in Stockholm, listed on Nasdaq Stockholm under SINCH, with messaging, voice, email and verification across effectively the whole world. If you are replacing Twilio for an operation that spans continents and you need one vendor to cover it, Sinch is the realistic answer and most of the smaller providers here are not.

The infrastructure is where the European story gets qualified, and Sinch is admirably specific about it. The sub-processor list covers AWS and Google Cloud with EU regions in Ireland, Germany and Sweden, alongside regions in the United States, Brazil, Canada, Singapore and Australia.

It names Amazon Web Services Inc., Google LLC, Zendesk Inc. and Sinch America Inc. among the sub-processors, and states that which ones apply depends on the service and the region the customer is in. Mailgun Technologies Inc., a US Sinch company, operates under the EU-US Data Privacy Framework.

So the distinction this directory exists to draw applies here in full: Sweden, on AWS and Google Cloud, with US entities in the chain. That is a genuinely different position from CM.com's own Dutch data centre, and a genuinely better one than a US-established provider. The other friction is commercial: Sinch describes pay-as-you-go pricing but publishes no rates, so evaluating it means a sales conversation before you can compare it to the eight providers here that print their prices.

What Sinch does well

  • Largest European-domiciled CPaaS, with global operator reach that the smaller providers cannot match
  • Swedish company listed on Nasdaq Stockholm, so ownership and accounts are public
  • EU regions in Ireland, Germany and Sweden available on AWS and Google Cloud
  • Unusually detailed public sub-processor list, naming entities and regions
  • Messaging, voice, email and verification under one contract

Where Sinch falls short

  • Runs on AWS and Google Cloud, and names Amazon Web Services Inc., Google LLC, Zendesk Inc. and Sinch America Inc. as sub-processors
  • US regions are in scope for the platform, so intra-EEA processing is a configuration rather than a given
  • No published per-message rates: pricing requires a sales conversation
  • No ISO or comparable certification stated on the pages checked for this entry
  • Large and acquisitive, so the product you buy may sit in a brand acquired rather than built

Standout feature. The sub-processor list. Sinch publishes which entities and which regions touch which service, which is more honesty about the American layer than most European vendors offer — and it is also the reason Sinch does not rank higher here.

#9 BulkGate

B. Němcové 767/13, Šumperk, Czech Republic Priced per destination operator: to the Netherlands from €0.0463 (KPN, Vodafone, Telfort) up to €0.0661 (CleverEnable). No monthly fee, no minimum fulfilment, credit does not expire

Best for: High-volume senders who want the lowest published rate and storage in one country

  • Operating company. TOPefekt s.r.o., IČO 29444268, VAT CZ29444268
  • Jurisdiction. EU (Czech Republic)
  • Where the data sits. Czech Republic — the privacy policy states that all storage providers are located in the Czech Republic, so there is no transfer of personal data outside the EU. The WhatsApp, Viber, iMessage and RCS channels route through Meta, Rakuten Viber, Apple and Google respectively
  • Source code. Closed source
  • Replaces. Twilio, Vonage

BulkGate has the cheapest published rate in this category — €0.0463 per SMS to KPN, Vodafone and Telfort in the Netherlands — and prices per destination operator rather than per country, so the same message costs €0.0562 to Odido and €0.0661 to CleverEnable. That granularity is unusual and it cuts both ways: you see exactly what each route costs, and you cannot quote a single national price to your finance team.

The residency statement is one of the plainest here. The privacy policy says all storage providers are located in the Czech Republic, so there is no transfer of personal data outside the EU. The operator is TOPefekt s.r.o., IČO 29444268, VAT CZ29444268, at B. Němcové 767/13 in Šumperk, contracting under Czech law with disputes in the Czech courts. Everything is checkable in the Czech company register in a minute.

The qualification is channel-shaped rather than storage-shaped. BulkGate sells WhatsApp, Viber, iMessage and RCS alongside SMS, and those channels necessarily route through Meta, Rakuten Viber, Apple and Google — the policy names them and notes they are registered under the Data Privacy Framework.

That is unavoidable for anyone selling those channels, but it means the clean Czech-only statement applies to storage, not to every message you can send through the platform. There is also no ISO certification stated, no free credits, and no founding year published beyond a 2012 copyright line.

What BulkGate does well

  • Lowest published rate in this category: from €0.0463 per SMS to the Netherlands
  • Privacy policy states all storage providers are in the Czech Republic with no transfer outside the EU
  • No monthly fee, no minimum fulfilment, and credit that does not expire
  • Per-operator pricing, so you can see exactly what each route costs
  • Company, IČO and VAT number published and checkable in the Czech register

Where BulkGate falls short

  • WhatsApp, Viber, iMessage and RCS route through Meta, Rakuten Viber, Apple and Google
  • No ISO 27001 or comparable certification stated on its own pages
  • No free credits or trial advertised on the pricing page
  • Per-operator pricing makes a single national price impossible to quote internally
  • No founding year published, only a 2012 copyright line

Standout feature. A one-sentence storage answer: all storage providers in the Czech Republic, no transfer outside the EU. Very few providers in this category will commit to a single country in writing.

#10 Octopush

131 avenue du Prado, Marseille, France Founded 2012 Prepaid from €0.061 per SMS at 1,000 messages down to €0.045 at 150,000; or monthly plans — Basic €9 (€0.045/SMS), Essential €39 (€0.044), Business €159 (€0.033), Enterprise on quote. HLR lookups €0.005

Best for: French senders whose volume justifies a monthly plan

  • Operating company. Octopush, share capital €30,000, RCS Marseille 538 371 816
  • Jurisdiction. EU (France)
  • Independent checks. ISO/IEC 27001:2013
  • Source code. Closed source
  • Replaces. Twilio, Vonage

Octopush prices in two directions at once and the difference is large. Prepaid runs from €0.061 per SMS at 1,000 messages down to €0.045 at 150,000.

Monthly plans invert the shape: Basic at €9 a month buys €0.045 per SMS from 1,000 messages, Essential at €39 gets €0.044 from 10,000, and Business at €159 gets €0.033 from 50,000. A sender doing 50,000 a month pays €0.033 on a plan against €0.050 prepaid — a third less for a €159 commitment. Working out which side you are on is the first thing to do.

The company is Octopush, share capital €30,000, RCS Marseille 538 371 816, at 131 avenue du Prado in Marseille, trading since 2012 under French law with the Marseille commercial court. It holds ISO/IEC 27001:2013 and bundles SMS, email, voice and HLR lookups at €0.005 into one platform, so a sender who needs more than text does not need a second vendor.

What Octopush does not publish is where anything runs. There is no statement about data centres, hosting providers, countries or subprocessors on the pages checked — the only geography on the site is the office address in Marseille.

For a French company that is a reasonable inference, but an inference is not a commitment, and this directory does not treat it as one. The ISO certificate is also on the 2013 version rather than the current 2022 standard, and no certifying body is named. There are no free credits advertised.

What Octopush does well

  • Monthly plans cut the rate hard: €0.033 per SMS on the €159 Business plan
  • Prepaid from €0.061 at 1,000 messages down to €0.045 at 150,000, with no commitment
  • ISO/IEC 27001:2013 certified
  • SMS, email, voice and HLR lookups at €0.005 on one platform
  • French company with share capital, RCS number and address published, trading since 2012

Where Octopush falls short

  • Publishes nothing about where data is hosted — no data centre, country, provider or subprocessor named
  • ISO 27001:2013 rather than the current 2022 version, with no certifying body named
  • No free credits or trial advertised on the pricing pages
  • The cheapest rates need a monthly subscription on top of the message cost
  • Documentation and support are oriented to the French market

Standout feature. The plan ladder. At 50,000 messages a month, €159 of subscription buys a third off the per-message rate — the biggest gap between list price and real price in this category.

#11 Bird

Keizersgracht 268, Amsterdam, Netherlands Founded 2011 Published per-country rates, quoted in US dollars: $0.050 to the United Kingdom, $0.065 to France, $0.080 to Germany, $0.085 to the Netherlands, charged per segment with carrier fees on top. No platform fee and no per-seat charge

Best for: Teams replacing a Twilio-shaped stack with one Amsterdam contract

  • Operating company. Bird B.V., formerly MessageBird
  • Jurisdiction. EU (Netherlands) for everything except Email and Email Analytics, which contract with Bird.com Inc. of Bethesda, Maryland under Delaware law
  • Where the data sits. Not stated — Bird says its hosting providers hold ISO 27001 and SOC 2 Type II but does not publish where customer data is stored. Identity verification through Persona is stated to be processed and stored in the European Union
  • Source code. Closed source
  • Replaces. Twilio, Vonage

Bird is MessageBird renamed, launched in Amsterdam in 2011 and still contracting as Bird B.V. at Keizersgracht 268. It is the European product shaped most like Twilio: a broad platform across messaging channels, a published per-country rate card, no platform fee and no per-seat charge, and a developer experience built for people migrating from exactly that stack. For a team that wants the familiar shape with a Dutch counterparty, it is the shortest move.

The rate card is public and priced in US dollars: $0.050 to the United Kingdom, $0.065 to France, $0.080 to Germany, $0.085 to the Netherlands, charged per segment, with carrier fees applied on top and varying by destination. A Dutch company quoting European SMS in dollars is a small thing that becomes a real thing on an invoice, because the FX movement is yours to absorb.

Two caveats belong on the contract. First, Bird publishes no data residency statement — it says its hosting providers hold ISO 27001 and SOC 2 Type II, but not where customer data is stored, which for a company positioned on European roots is a conspicuous omission.

The one location it does name is that identity verification via Persona is processed and stored in the EU. Second, the entity splits: Bird B.V. contracts for customers everywhere except the United States, but Email and Email Analytics contract with Bird.com Inc. of Bethesda, Maryland, under Delaware law. Buy SMS and you are Dutch; add email and part of your relationship is American.

What Bird does well

  • Published per-country rate card with no platform fee and no per-seat charge
  • Bird B.V. in Amsterdam is the contracting entity for customers outside the United States
  • The closest product shape to Twilio, so migration touches less of the application
  • Trading since 2011, with a broad channel set beyond SMS
  • Identity verification through Persona is stated to be processed and stored in the EU

Where Bird falls short

  • No data residency statement at all: hosting providers are described by certification, not location
  • Rates are quoted in US dollars, so a European buyer carries the FX movement
  • Carrier fees apply on top of the published rates and vary by destination
  • Email and Email Analytics contract with Bird.com Inc. in Maryland under Delaware law
  • No free trial credits advertised on the pricing pages

Standout feature. A public rate card with no platform fee — and the reason it does not rank higher is the other side of the same page: Bird will tell you what a message costs but not what country it is stored in.

#12 Infobip

181 Queen Victoria Street, London EC4V 4EG, United Kingdom Founded 2006 Pay-as-you-go; no public rate card, only a calculator and a route to sales Free trial account

Best for: Enterprises that need reach into markets the smaller providers cannot serve

  • Operating company. Infobip Limited, company number 7085757
  • Jurisdiction. United Kingdom (covered by a UK adequacy decision, not an EU member state)
  • Where the data sits. Not stated — the privacy notice names no data centre locations and says transfers of personal data outside the EEA are covered by standard contractual clauses where required
  • Source code. Closed source
  • Replaces. Twilio, Vonage, Sinch

Infobip is the reach play. Established in 2006, operating in more than 190 countries with 75-plus offices, and built for organisations sending across markets where a Danish or Czech provider simply has no route.

The omnichannel platform covers SMS, WhatsApp, RCS, voice and email under one contract, with a free trial account to start, and if your requirement is a single vendor covering Africa, south-east Asia and Latin America as well as Europe, the shortlist is short and Infobip is on it.

The jurisdiction, though, is not what most people assume. Infobip is widely described as Croatian, and it grew out of Croatia, but the entity named on its own privacy notice and website terms of use is Infobip Limited, registered office 181 Queen Victoria Street, London EC4V 4EG, company number 7085757.

That is the United Kingdom — outside the EU, covered by a UK adequacy decision that is reviewed periodically rather than permanent. It is European, and it is not intra-EEA processing.

The residency answer is also missing. The privacy notice names no data centre locations and says transfers outside the EEA are made under standard contractual clauses where required, which describes the mechanism without describing the geography.

No rate card is published either: pricing runs through a calculator and a sales conversation. For an enterprise buyer with a procurement process, both are normal. For a developer comparing twelve providers on a Tuesday afternoon, they are the reason Infobip ranks where it does.

What Infobip does well

  • Operator reach in more than 190 countries, beyond what the smaller European providers can offer
  • SMS, WhatsApp, RCS, voice and email on one platform and one contract
  • Free trial account available without a sales conversation
  • Trading since 2006, with the legal entity and company number published
  • United Kingdom jurisdiction is covered by an adequacy decision, so transfers are straightforward

Where Infobip falls short

  • The contracting entity is Infobip Limited in London, so this is UK rather than EU jurisdiction
  • No data centre locations published anywhere in the privacy notice
  • No public rate card: pricing is a calculator and a sales contact
  • Transfers outside the EEA are handled by standard contractual clauses, without stating where data normally sits
  • No ISO or comparable certification stated on the pages checked for this entry

Standout feature. Reach into 190-plus countries. It is the genuine reason to choose Infobip, and the residency silence is the genuine reason it sits at the bottom of a directory organised around jurisdiction.

What is actually at stake in an SMS API, compared with other software?

A phone number is the most durable identifier most people have. Email addresses change, cookies get cleared, account names get abandoned; a mobile number follows someone across jobs, homes and countries for a decade or more. An SMS API holds those numbers for every customer you have, which makes it a more concentrated personal-data asset than most CRMs.

The message bodies make it worse rather than better. One-time passcodes reveal when someone logged in and, in aggregate, how often and at what hours. Delivery notifications reveal purchases. Appointment reminders reveal medical or legal relationships. None of that is obviously personal data when you are writing the integration, and all of it is when a regulator reads the logs.

The third thing is retention. Delivery reports, message logs and error traces sit in the provider's systems for weeks or months by default, and almost nobody configures that down. Ask what the retention period is and where those logs live before you ask about price per message, because the logs are where the exposure actually accumulates.

This is why the jurisdiction question is sharper here than for, say, a design tool. With Twilio Inc. in San Francisco, the processing sits with a US-established provider and the transfer runs on the EU-US Data Privacy Framework, which has to be verified per entity and kept current. With CM.com Netherlands B.V. or Calade Technologies in Marseille, the processing is intra-EEA and that obligation does not arise.

How do you tell a real European provider from a European front end?

Read the imprint or the legal notice first, not the marketing. Every claim in this directory was checked there: seven communications GmbH & Co. KG at Willestr. 4-6 in Kiel, registered at Amtsgericht Kiel under HRA 11707 KI. ONLINECITY.IO ApS at Buchwaldsgade 50 in Odense, CVR 27364276. TOPefekt s.r.o. in Šumperk, IČO 29444268. Those are checkable in a company register in under a minute.

Then read the sub-processor list, which is where the second layer lives. Sinch is Swedish and its infrastructure is AWS and Google Cloud, with US regions in scope and US entities named. BulkGate is Czech and states plainly that all its storage providers are in the Czech Republic — but the WhatsApp, Viber, iMessage and RCS channels necessarily route through Meta, Rakuten Viber, Apple and Google, because those are the only ways to reach those networks.

Two findings in this category came only from reading the legal pages. Infobip is registered in London, not in Croatia, on its own privacy notice. Spryng is a Dutch company whose virtual private clouds are in Frankfurt, so the company is Dutch and the data is German — fine for the GDPR, wrong if your requirement was written as "in the Netherlands".

And watch for the entity split. Bird B.V. in Amsterdam contracts for everything except Email and Email Analytics, where the counterparty is Bird.com Inc. of Bethesda, Maryland under Delaware law. A single vendor, two jurisdictions, and only one of them is European.

Why do the prices differ by a factor of two for the same message?

Because you are not buying one thing. An A2P SMS reaches a handset through a chain — your provider, one or more aggregators, then the destination mobile operator — and every link takes a margin.

A provider with a direct connection to the operator pays the termination fee and little else; a provider buying through two aggregators pays three margins. CM.com states it has more than 60 direct carrier connections and reaches 250 operator networks, which is the shape of the first case.

That chain also explains the price spread inside one country. BulkGate publishes €0.0463 per SMS to KPN, Vodafone and Telfort in the Netherlands but €0.0562 to Odido and €0.0661 to CleverEnable, because the routes are genuinely different deals. Spryng charges €0.07 for the Netherlands flat and €0.069 for Belgium and Germany. 46elks charges €0.093 per SMS part to the Netherlands. Same destination country, roughly double the price between the cheapest and the most expensive.

Flat worldwide pricing is a different bet. seven charges €0.075 per SMS to every country, which is expensive for Dutch traffic and very cheap for traffic to places where termination costs multiples of that. If your volume is concentrated in one European country, per-country pricing wins; if it is scattered, a flat rate removes a whole category of billing surprise.

Then there is the part nobody quotes: carrier fees, sender-ID registration, short-code rental and virtual numbers. Bird's rate card is in US dollars and says carrier fees apply on top. 46elks charges €5 a month per virtual number. GatewayAPI charges separately for virtual numbers and keywords. Compare the rate card and you will be wrong by a fifth; compare an actual month of your own traffic and you will be close.

Does a provider's telecoms licence matter, or is ISO 27001 enough?

They cover different things. ISO 27001 is a management-system certification: it says the company has documented information-security practices and passes external audits. seven holds ISO/IEC 27001:2022 under MSECB certificate CERT-001978, valid to August 2029. SMSAPI holds the 2022 standard certified by TÜV NORD Polska. smsmode has been certified to the 2022 standard since January 2025. Spryng and Octopush hold the older 2013 version.

A telecoms licence is a regulatory status, and it brings telecoms secrecy obligations that sit on top of the GDPR. seven is a licensed German telecoms company under Bundesnetzagentur registration DREG 22/137. 46elks is a registered telecommunications operator under EU directive 2002/58/EC as implemented by Swedish law 2022:482. That is a different and in some ways stricter set of duties about message confidentiality than a data-protection certificate alone.

GatewayAPI takes a third route: annual ISAE 3000 and ISAE 3402 auditor's statements specifically on GDPR compliance. ISAE 3402 is the assurance standard service organisations use for controls that affect their customers' own compliance, which is exactly the question a data controller is trying to answer about a processor.

For sector-specific data, neither is sufficient on its own. French health data needs HDS certification, which smsmode offers as an option that isolates the account on certified infrastructure. Dutch healthcare works to NEN 7510, which Spryng holds. If you are in one of those sectors, the certificate is the entry requirement rather than a differentiator.

What breaks when you migrate away from Twilio?

The sender ID, more often than anything else. Alphanumeric sender IDs are registered per operator and per country, and the registration belongs to the provider that filed it, not to you. Moving providers means refiling, and in countries with pre-registration regimes that takes weeks. Plan the switch around that, not around the code change, which is usually an afternoon.

Delivery reports are the second surprise. Every provider models statuses slightly differently, and the codes for "undelivered because the handset was off" versus "undelivered because the number is dead" do not line up between vendors. Any retry logic or number-hygiene process built on Twilio's status codes has to be re-derived, and the failure mode is quiet: you keep sending to dead numbers and paying for it.

Throughput and queueing differ too. Providers shape traffic differently at the operator edge, so a burst that Twilio absorbed can arrive at a different rate somewhere else. If you send OTPs, that shows up as a support problem — codes arriving after the timeout — rather than as an error in your logs.

The part that is genuinely easy is the API surface. Sending an SMS is a POST with a destination, a body and a sender, and every provider here does it with an HTTP request and a handful of client libraries. 46elks and seven both put voice on the same API as SMS, so a Twilio deployment using both can usually be replaced by one vendor rather than two.

How we selected and ranked these 12 tools

Every tool on this page is in the European Purpose directory, which means the operating company is established in Europe and we have verified that from the company register or the vendor's own legal notice rather than from a marketing page. Tools headquartered outside Europe are not eligible, however good they are.

  1. Feature verification (weight: 40%). We check each capability against the vendor's own documentation and product pages, and record what the tool does rather than what the category is assumed to include.
  2. Ease of adoption (weight: 30%). Integrations, published API access, trial availability and how much configuration stands between signing and a usable result.
  3. Value and transparency (weight: 30%). Published pricing counts in a vendor's favour; quote-only pricing is recorded as quote-only rather than estimated. We weigh what a buyer gets for the entry price, not the headline feature count.
  4. Editorial review. Three people touch every page: one writes it, a second edits it, and a third checks the compliance and pricing claims against the vendor's documentation. The three weights above decide the order; a position is a ranking against the other European tools in this category, not an absolute score.

Vendor-reported outcomes — ROI figures, margin uplift, time saved — are labelled as vendor claims wherever they appear on this page. We have not audited them, and neither has anyone else who quotes them. Read our full editorial process for how pages are re-verified.

Frequently asked questions

CM.com holds #1 among the European SMS APIs in this directory, because it is the only provider here whose own privacy statement commits to processing and storing all data in a data centre in the Netherlands that CM.com manages itself, and it pairs that with more than 60 direct carrier connections and a self-service free trial.

The right answer depends on what you are optimising for: GatewayAPI if you want a public per-country price list and no subscription, seven if you want one flat rate worldwide, smsmode if you need named French data centres, SMSAPI if you want two certified data centres inside Poland, and Sinch or Infobip if you need global reach more than you need a named jurisdiction.

On published rates, BulkGate is the cheapest in this list at €0.0463 per SMS to KPN, Vodafone and Telfort in the Netherlands, with no monthly fee and no minimum.

Octopush reaches €0.045 per SMS on its €159 Business plan and at the 150,000-message prepaid tier. seven is €0.075 flat to any country. Spryng is €0.069 to Belgium and Germany. Be careful comparing headline rates: BulkGate prices per destination operator, Bird quotes in dollars with carrier fees on top, and virtual numbers cost extra almost everywhere.

GatewayAPI, seven, 46elks, SMSAPI, Spryng, BulkGate, Octopush and Bird all publish per-message rates you can read without an account. CM.com publishes one fixed price per destination country on its pricing page. Sinch describes its model as pay-as-you-go but publishes no rates, and Infobip offers a calculator and a sales contact rather than a rate card. For a product whose whole appeal is that a developer can integrate it in an afternoon, that is a real difference.

CM.com states all data is processed and stored in its own data centre in the Netherlands. BulkGate states that all its storage providers are in the Czech Republic and that there is no transfer of personal data outside the EU.

SMSAPI names two Polish data centres, ATMAN and T-Mobile, more than 150 km apart. smsmode names Interxion MRS1 in Marseille and Scaleway DC4 in Paris. 46elks requires that servers processing personal data are owned by 46elks and that the data stays in the EU. Spryng puts its private clouds in Frankfurt, which is EU but not the Netherlands.

Sinch AB is Swedish, founded in 2008, headquartered in Stockholm and listed on Nasdaq Stockholm, so the contracting party and the ownership are European.

The infrastructure is not exclusively so: the sub-processor list covers AWS and Google Cloud across EU regions in Ireland, Germany and Sweden as well as US regions, and names Amazon Web Services Inc., Google LLC, Zendesk Inc. and Sinch America Inc. If your requirement is a European counterparty, Sinch qualifies. If your requirement is that no US-established company is in the processing chain, it does not.

Infobip grew out of Croatia and still has large operations there, but the entity named on its own privacy notice and website terms of use is Infobip Limited, registered office 181 Queen Victoria Street, London EC4V 4EG, company number 7085757.

That is the United Kingdom, which is outside the EU and covered by a UK adequacy decision. Infobip also publishes no data centre locations and says transfers outside the EEA are covered by standard contractual clauses where required, so the residency question does not have a public answer.

smsmode and Spryng are the only two here that address regulated health data on their own pages. smsmode offers optional HDS hosting — the French certification for hosting health data — which isolates the account on certified infrastructure alongside its ISO/IEC 27001:2022 certification and its data centres in Marseille and Paris.

Spryng was founded in 2006 for the healthcare sector and holds NEN 7510, the Dutch healthcare information security standard, alongside ISO 27001. No other provider in this list names a healthcare-specific certification.

SMSAPI gives free test messages on signup and Spryng gives free test credits with no obligation to buy. Infobip and smsmode both offer a free trial account, and CM.com signup is self-service with a free trial. GatewayAPI has no trial credits but no subscription either, so an account costs nothing until you send. 46elks, BulkGate, Octopush and Bird do not advertise free credits on their pricing pages — with BulkGate and 46elks you simply top up and send.

Two state it explicitly. seven is a licensed German telecoms company under Bundesnetzagentur registration DREG 22/137. 46elks is a registered telecommunications operator under EU directive 2002/58/EC as implemented by Swedish law 2022:482. That status carries telecoms secrecy obligations on top of the GDPR, which is a different and sometimes stricter regime around message confidentiality than a data-protection certification alone. The others in this list are messaging providers rather than licensed operators, or do not say.

Breadth of adjacent product, mostly. Twilio sells SMS alongside voice, video, email through SendGrid, a customer data platform and a contact centre, and most European providers here sell a narrower stack. 46elks and seven do voice as well as SMS; CM.com, Sinch, Infobip and Bird run full omnichannel platforms; Spryng, SMSAPI, BulkGate, smsmode and Octopush are messaging-first.

US phone number inventory and US short codes are also thinner outside the American providers, so if the bulk of your traffic terminates in the United States the economics may not favour a European vendor.