Enterprise email procurement
Enterprise email marketing platforms: an RFP guide
For an enterprise buyer, the right platform is the one your identity, security, legal, deliverability and finance teams can approve. Mailgun and Amazon SES publish useful delivery primitives; HubSpot, Braze, Iterable and Salesforce Marketing Cloud are broader customer-engagement suites; SendGrid sits between those models. The table below separates a published capability from a sales promise and marks anything the vendor does not publish.
Start with the sending responsibility you are buying. If your team needs an API, SMTP relay, inbound routing and dedicated IP controls, a delivery service may be enough. If marketers need journeys, segmentation, approvals and a customer profile in the same application, evaluate a marketing suite. A contract that says “enterprise support” still needs measurable response times, incident communication, data-processing terms and an exit path.
Every claim in this guide links to a vendor page. “Not published” means the public page I checked does not state the item; it is a question for the RFP, not evidence that the product lacks it.
Choose by the decision your committee must make
- Need a controllable delivery layer: choose Amazon SES when AWS ownership, regional architecture and usage billing matter. Choose Mailgun when inbound routing, a hosted log and a ready-made API reduce internal build work.
- Need multi-channel lifecycle orchestration: Braze and Iterable position themselves as customer-engagement platforms. Their public pricing is sales-led, so ask for a complete quote including active-user, message and support assumptions.
- Need CRM-linked campaign operations: HubSpot Marketing Hub Enterprise publishes a $3,600/month starting price and contact-tier send multiplier on its pricing page. Salesforce Marketing Cloud is also sales-led; request the exact editions, data cloud dependencies and contract minimums.
- Need an established email API with enterprise packaging: Twilio SendGrid’s Email API pricing lists a free trial (100 emails/day for 60 days), Essentials from $19.95/month, Pro from $89.95/month and custom Premier pricing. Use the exact send volume and feature entitlements in the written quote.
Enterprise requirements, with an evidence trail
SSO and SAML: require SAML 2.0 or OIDC, SCIM provisioning, enforced MFA and a break-glass administrator. Mailgun lists SAML SSO among its plan capabilities on its pricing page. For SendGrid, Braze, Salesforce Marketing Cloud, Iterable and HubSpot, ask the vendor to identify the exact edition and document the configuration in the security appendix; the public pricing pages do not give a complete entitlement matrix.
Roles, approvals and audit logs: distinguish “multiple users” from workflow governance. An RFP should ask whether a campaign can require two approvers, whether API keys are scoped, whether exports and permission changes are logged, and how long logs can be retrieved. Mailgun publishes log retention of one day on Free/Basic, five days on Foundation and 30 days on Scale; longer retention therefore needs a plan or an external archive. The other vendors listed here do not publish one comparable retention number on the pages reviewed.
Data residency: record the processing region for message content, event data, support access and backups. Amazon SES is an AWS regional service; its pricing page describes account and regional fees for Pro and Enterprise plans. Mailgun says its service offers US and EU hosting regions in its public product material. Braze, Salesforce Marketing Cloud, Iterable, HubSpot and SendGrid require a contract-level answer for the regions and subprocessors that apply to your tenant.
Compliance and regulated data: request the current SOC 2 report, ISO 27001 certificate, penetration-test summary, DPA, subprocessors and breach-notification terms. Amazon lists SES in its AWS compliance scope, but that does not automatically make every customer workflow compliant. A HIPAA BAA is a separate contractual question. Do not put patient data in message content until the vendor confirms that it offers a BAA for the exact service and region. Public pricing pages for Braze, Iterable, Salesforce Marketing Cloud, HubSpot and SendGrid do not publish a universal BAA entitlement.
SLAs and dedicated IPs: ask for uptime measurement, maintenance exclusions, support response targets, service credits, IP warm-up ownership and a documented emergency escalation. Amazon SES lists dedicated IP add-ons as a product option; Mailgun lists dedicated IPs in its delivery offering. A dedicated IP is an operational project, not a compliance badge: agree on volume ramp, reputation monitoring and what happens if the IP must be replaced.
Published comparison for the named vendors
| Vendor | Public pricing signal | Enterprise evidence on public pages | What your RFP must confirm |
|---|---|---|---|
| SendGrid | Free trial: 100 emails/day for 60 days; Essentials from $19.95/month; Pro from $89.95/month; Premier custom pricing. | Email API and enterprise sales path are published; a complete SSO, residency and SLA matrix is not published on pricing. | Exact send-volume tier, SAML/SCIM, audit export, regional processing, support response and dedicated-IP terms. |
| Mailgun | Free 100/day; Basic $15 for 10,000; Foundation $35 for 50,000; Scale $90 for 100,000. | Pricing lists SAML SSO, inbound routing, API/SMTP and dedicated IP options; hosting regions are described as US and EU. | Contract SLA, log export, retention beyond the plan, BAA availability and IP warm-up service. |
| Amazon SES | Essentials is $0.16 per 1,000 emails for 0–10M; Pro $0.22 and Enterprise $0.23 per 1,000, with plan fees. | AWS publishes regional pricing, dedicated IP add-ons and a six-month free plan after account creation. | Account-region architecture, sending quota increase, support plan, event retention and BAA scope. |
| Braze | Not published; Braze describes platform editions, active users and Action Credits and directs buyers to a tailored quote. | Customer engagement, email and other channels are positioned publicly; detailed controls are contract-specific. | MAU definition, channel overages, data export, SSO, residency, SLA and implementation services. |
| Salesforce Marketing Cloud | Not published on the public pricing page for a comparable enterprise package. | Salesforce markets Marketing Cloud as an enterprise suite; exact modules and limits vary by edition. | Edition map, Data Cloud dependencies, sandbox count, API limits, audit history, SLA and exit fees. |
| Iterable | Not published; the pricing page directs buyers to book a demo. | Iterable describes an AI customer-engagement platform for enterprise scale. | MAU/message basis, journey limits, SSO, regional hosting, export format, support and uptime credits. |
| HubSpot Marketing Hub Enterprise | Enterprise $3,600/month; the page describes 20× the marketing-contact-tier email send limit. | Pricing page publicly describes unlimited automation on Enterprise and a sales-assisted purchase. | Marketing-contact definition, onboarding, API limits, audit log retention, SSO package and regional terms. |
Cost arithmetic and what it leaves out
At 100,000 monthly messages, SES Essentials is 100 × $0.16 = $16/month for message transport. Mailgun Scale is $90/month for 100,000 messages. HubSpot Enterprise starts at $3,600/month, with sends tied to the marketing-contact tier. These figures are not interchangeable: SES requires you to operate event processing, suppression, templates and monitoring; HubSpot prices a broader marketing system; Mailgun sits between a raw relay and a suite. SendGrid’s published Email API tiers start at $19.95/month for Essentials and $89.95/month for Pro, with volume ranges and overages to confirm in the quote.
Ask each supplier to price the same scenario: 250,000 marketing emails, 50,000 transactional messages, two sending domains, one EU region, SAML for 40 users, audit exports, dedicated IPs and a 24/7 incident channel. Request the one-time implementation fee, annual uplift cap, overage formula, unused-volume policy and cost of exporting contacts and event history at termination.
RFP checklist
- Identity: SAML/OIDC, SCIM, MFA enforcement, session timeout and emergency admin.
- Governance: roles, dual approval, API-key scopes, audit fields, retention and export format.
- Privacy: DPA, subprocessors, deletion workflow, encryption, residency and cross-border transfer mechanism.
- Regulated use: SOC 2 report, ISO certificate, HIPAA BAA availability and permitted data classes.
- Delivery: sending quotas, dedicated-IP ownership, warm-up plan, bounce and complaint events, inbound handling.
- Reliability: uptime definition, maintenance window, response targets, status page, service credits and escalation.
- Commercials: list price, contact/message basis, overages, implementation, renewal cap and exit assistance.
- Migration: API parity, template export, suppression export, historical event access, DNS cutover and rollback.
Migration plan that procurement can test
1. Inventory. Export templates, domains, credentials, suppression lists, consent evidence, automations and event consumers. Classify transactional and marketing streams before choosing a cutover order.
2. Contract and architecture. Put the DPA, SLA, BAA decision, residency and retention commitments in writing. Create a provider adapter so application events do not depend on one vendor’s field names.
3. Shadow and prove. Send rendered test messages to seed mailboxes, replay webhook payloads into staging, verify unsubscribe propagation and compare exports. Keep the old provider receiving a small mirrored stream where contract terms allow it.
4. Warm and switch. Authenticate domains, warm a dedicated IP only if needed, then move low-risk transactional traffic before campaigns. Monitor bounces, complaints, latency and duplicate sends daily.
5. Close out. Freeze the old account only after suppression parity, historical export and DNS rollback are tested. Record who owns the new credentials and the next evidence-review date.
Questions buyers ask
Is a marketing suite automatically more enterprise-ready?
No. A suite may cover approvals and journeys while leaving residency, log retention or SLA terms to the contract. A delivery API may satisfy security review more cleanly if your team already owns segmentation and event storage.
Should we require a dedicated IP?
Require a clear reason and an operating plan. Dedicated IPs add warm-up, reputation and failover work; they are useful when volume and traffic separation justify that ownership.
Which platform has the clearest public price?
Mailgun and Amazon SES publish concrete delivery prices. HubSpot publishes a starting Enterprise price for its broader hub. Braze, Salesforce Marketing Cloud and Iterable are sales-led. SendGrid publishes Email API tiers from a 60-day free trial to Essentials at $19.95/month and Pro at $89.95/month, while Premier is custom.
Where should we go next?
Use the developer email API guide for implementation trade-offs, compare SendGrid and Mailgun for delivery operations, and review transactional email services before finalizing stream ownership.