Skip to content

/ Compare — Amazon SES

The Amazon SES alternative for teams who priced the $0.10, then found the rest of the bill.

SES has the lowest per-email rate in the market, and that rate buys you a component, not a service. The dashboard, the deliverability operations, the stream isolation, the warming, the monitoring — SES leaves all of it for you to build, staff, and watch. This is the same sending economics with the operational layer included, on infrastructure we own and run, in a jurisdiction that is actually European.

/ Quick answer

The strongest Amazon SES alternative for a team that does not want to operate email infrastructure is managed own-infrastructure: it keeps the cost advantage that draws people to SES, but ships the parts SES makes you assemble. SES charges about $0.10 per 1,000 emails and hands you raw infrastructure — no dashboard, no deliverability operations, no stream isolation, and a sandbox gate to reach production. Its true cost is the monitoring stack you build on top, the engineering hours to run it, and the suspension risk nobody is paid to watch. A managed platform runs dedicated PowerMTA and KumoMTA infrastructure for you, isolates your streams, warms your IPs, and monitors reputation daily — at SES-class economics, as an EU entity outside the reach of the US CLOUD Act.

  • $0.10

    SES's per-1,000 rate — the lowest raw price anywhere, and only a fraction of what SES actually costs to run.

  • 5

    AWS services — SNS, SQS, Lambda, S3, CloudWatch — you assemble before SES shows you a single bounce.

  • CLOUD Act

    applies to SES in any AWS region, because the operator is a US company. Region is not jurisdiction.

  • Own MTA

    Dedicated PowerMTA / KumoMTA — the stack Postmark itself migrated to — instead of Amazon's shared layer.

/ 01 — The trap in the price

Why do teams who chose SES for the price end up leaving over it?

Amazon SES wins almost every spreadsheet it appears in, because the spreadsheet usually has one row: price per email. At roughly ten cents per thousand messages, nothing else comes close, and for a certain kind of team that number is the end of the discussion. The difficulty is that the number describes a component — a sending API and the IP infrastructure behind it — and a production email program is not a component. It is a system, and SES quietly leaves most of that system for the buyer to build.

What arrives missing is not exotic. It is the dashboard that shows whether last night's send reached the inbox, the logic that catches a bounce and suppresses the address, the separation that keeps a marketing blast from poisoning transactional reputation, the warming schedule that takes a fresh IP up to volume without tripping a filter, and the person who notices when a receiver starts deferring. Each of these is ordinary, and each is real work. Assembled, they are the difference between a sending API and a sending service.

The teams that leave SES rarely do so because anything broke. They leave because the operational layer they were quietly carrying grew heavier than the price they were saving — an engineer's afternoons disappearing into CloudWatch dashboards, a deliverability dip that took three days to even locate, a suspension notice that arrived on a Friday. The price was real. So was everything behind it.

01

The sandbox gate

New accounts start sandboxed, able to send only to verified addresses. Reaching production needs an approval that AWS can decline without a stated reason, on its own timeline.

02

No dashboard

SES ships no native delivery view. AWS's own recommended pattern is to assemble SNS, SQS, Lambda, S3, and CloudWatch — a small data pipeline you build before you can see a bounce.

03

No stream isolation

Transactional and marketing mail share one sending capability unless you architect separation yourself. A bad marketing batch can take down the reputation behind your password resets.

04

Per-second throttling

Send rates are capped per second. A campaign spike or a retry storm hits the ceiling and SES throttles or rejects — the burden of smoothing the curve is yours.

05

Suspension on threshold

Cross the complaint or bounce threshold and the response escalates to suspension, with a manual appeal measured in days. The policy protects mailbox providers, not your continuity.

/ 02 — True cost calculator

What does Amazon SES actually cost you per month?

The sticker price is exact and public. The operational cost is yours, and it is the part the pricing page never shows. Put in your volume and your own engineering rate, and watch how much of your real bill the per-email number actually represents. Everything here is an estimate built from your inputs — adjust the assumptions and the math follows.

5,000,000 emails
$75 / hour
24 hours

Monitoring, bounce and complaint handling, warming, incident response, and the SNS/SQS/Lambda pipeline. A conservative default for a single steady sending program.

SES sticker price what the page shows $500/mo
Operational overhead what you run $1,800/mo
True monthly cost $2,300
Sticker Operational overhead

At this volume, the per-email price is only 22% of what SES actually costs you. The rest is the operational layer a managed platform absorbs.

Estimate only, from your inputs. Sticker uses SES's public ~$0.10 per 1,000 rate; overhead is your hours times your rate. It excludes the AWS charges the monitoring stack itself incurs and the risk cost of a suspension — both real, both omitted here to keep the math conservative.

/ 03 — Own, not raw

The difference between raw infrastructure and infrastructure that is run.

SES gives you raw infrastructure: a capable sending layer on Amazon's shared, multi-tenant platform, abstracted behind an API and left for you to instrument. A managed alternative gives you infrastructure that is owned and run — dedicated PowerMTA and KumoMTA, the same mail transfer agents that high-volume senders and ESPs choose when delivery is the business rather than a feature. The distinction is not branding. PowerMTA carried professional sending for two decades; KumoMTA, written in Rust by the architect behind one of its few real competitors, now matches it in the open. When Postmark rebuilt its sending layer, it moved its entire platform onto KumoMTA and published the result — faster queue times to every major provider while holding the reputation it had spent years building.

Running that class of MTA yourself is a genuine discipline: per-ISP traffic shaping, queue tuning, bounce classification, IP pool architecture. That is the work a managed operation takes on, so the control of dedicated infrastructure arrives without the staffing that operating it normally demands. It is the economics that drew you to SES, paired with the control that SES, as a shared abstraction, was never built to give you.

Amazon SES — you assemble the service Managed — the service is the endpoint SES send API SNS SQS Lambda S3 CloudWatch five services to wire, monitor, and pay for Your app SMTP / API + webhooks accepted · delivered · bounced · deferred · complained one integration; the operations are run for you

/ 04 — Side by side

Amazon SES versus managed infrastructure, including where SES wins.

An honest comparison has to mark the rows the other side wins, because a page that claims to win everything is selling, not comparing. SES owns raw price and AWS-native depth outright — if those are what decide it for you, SES is the answer and this page just saved you a migration. Filter the matrix by what you care about.

Filter:
Dimension Amazon SES This platform Managed infrastructure
Per-email price Their edge ~$0.10 per 1,000 — the lowest raw rate on the market No per-email charge; infrastructure and operations in one predictable line
Total cost of ownership Low sticker price plus the monitoring stack, AWS charges, and engineering hours you add All-in: the operational layer is included, not assembled
Pricing stability AWS pricing, subject to change on AWS's terms Infrastructure-based and stable — not exposed to acquisition or VC price hikes
Dashboard & visibility No native dashboard; stitch SNS + SQS + Lambda + S3 + CloudWatch yourself Delivery, bounce, complaint, and placement visibility built in
Deliverability operations You build and run it; Virtual Deliverability Manager dashboards cost extra Engineer-led warming and daily reputation monitoring, included
Transactional / marketing split Not separated by default — you architect stream isolation Isolated dedicated IP pools per stream, tenant-aware at the MTA layer
The sending engine Amazon's shared multi-tenant infrastructure, abstracted away Dedicated PowerMTA / KumoMTA — the stack professional ESPs run
Production onboarding Opaque sandbox approval; can be declined without a stated reason Audit and provision with a named contact — no sandbox gate
Throttling behavior Per-second limits; volume spikes trigger throttling or rejection Throughput shaped per ISP across a warmed pool, planned to your peak
Suspension risk Auto-suspension on threshold breach; appeals take days Monitored proactively; drift discussed before it escalates
Support model Technical support gated behind paid AWS support plans A named engineer reachable directly, included
Raw flexibility / AWS-native fit Their edge Deep integration with Lambda, S3, SNS; ideal inside AWS Standard SMTP / API; not an AWS-native building block
Data residency AWS regions you configure — but US jurisdiction via the CLOUD Act regardless EU entity operating own infrastructure: jurisdiction, not just region
Bounce & complaint handling Surfaced as events you must capture and process yourself Triaged and suppressed automatically; root cause traced

/ 05 — Jurisdiction, not region

Choosing an EU region does not put your data under EU jurisdiction.

Every email SES handles carries personal data: recipient addresses, open and click events, bounce lists, message metadata. Route that through SES and it travels through a service operated by Amazon Web Services, a US company — which means the US CLOUD Act reaches it whenever a federal court issues an order, no matter which region the bytes physically sit in. Selecting an EU region moves the storage location; it does not move the jurisdiction, because the entity that controls the keys and the employee accounts is American.

For a sender with European customers this is not a hypothetical. Under GDPR your email processor appears in your records of processing with a transfer mechanism, and "we use the EU region of a US provider" is not a valid one. The honest path through a data protection review is either a Transfer Impact Assessment that argues the risk down across many pages, or a processor that removes the transfer entirely by being European in the way that counts — an EU entity, operating its own infrastructure, where no third-country transfer occurs because there is no third country in the chain.

That is the structural advantage a US incumbent cannot match by adding a region. We operate as an EU entity on infrastructure we own, so the data stays under EU jurisdiction rather than merely on EU soil. If your customers, your auditor, or your own data protection officer have ever asked where your email data is processed and who can compel its disclosure, that difference is the entire answer.

If you sell only into the US and hold no EU personal data, this section does not apply to you, and you should weight it at zero. Sovereignty is a real advantage for the senders it affects and irrelevant to the ones it does not — and pretending otherwise would be exactly the kind of overclaim this page is trying to avoid.

/ 06 — Pricing that holds

The email market keeps raising prices. Owned infrastructure does not have to.

SES itself has held its rate, which is part of its appeal. But the broader managed-email market has spent the past two years moving prices the other way, and the pattern has a cause: when a sending platform is acquired or venture-funded, the pricing answers to the new owner's revenue targets rather than to the cost of delivery. Infrastructure you own answers to neither.

2025 SendGrid Free tier removed 2025 Mailgun Flex pricing doubled Oct 2024 Resend 200k tier doubled three vendors, two years, one direction — acquisition and VC pressure move prices up owned infrastructure has no acquirer to satisfy and no investor demanding a raise

SendGrid

2025

Under Twilio, the long-standing free plan was retired; new accounts moved to a 60-day trial.

Mailgun

2025

Following Sinch consolidation, the pay-as-you-go rate moved from roughly $1 to $2 per 1,000.

Resend

Oct 2024

The 200,000-email tier went from $80 to $160 per month under venture-backed growth pressure.

/ 07 — When to stay

When Amazon SES is still the right call — and you should keep it.

A comparison is only useful if it can tell you to stay where you are. There are clear situations where SES remains the better choice, and a managed alternative would be a worse fit sold convincingly. If your application already lives inside AWS — events flowing through Lambda, storage in S3, your team fluent in the console — then SES is not a standalone email tool, it is a native part of the architecture you already run, and that integration has real value the calculator above does not capture.

The same holds when your team genuinely enjoys operating infrastructure and has the capacity to do it well. The operational layer SES leaves to you is only a hidden cost if nobody wants the job; for a team that treats deliverability as a system worth tuning, that work is not overhead, it is craft, and SES gives them the rawest and cheapest surface to practice it on. Add steady, predictable volume with no sovereignty requirement, and the per-email price becomes very hard to argue with.

Managed infrastructure earns the switch at a specific moment: when the operational layer becomes a job nobody on the team wants to own, when a suspension or a deliverability dip costs more than the price was ever saving, or when an EU customer asks a question about jurisdiction that an AWS region cannot answer. Until one of those is true, SES is a reasonable place to be — and we would rather tell you that than win a migration you will regret.

/ 08 — Moving off SES

How moving off SES usually removes code instead of adding it.

The fear with any sending migration is the integration, and with SES that fear is usually misplaced, because most of what you would migrate is scaffolding you built only because SES required it. The SNS topic, the SQS queue, the Lambda that parsed delivery notifications, the S3 bucket holding them, the CloudWatch alarms watching the whole thing — all of that existed to turn a bare send API into something observable. Moving to a platform that emits accepted, delivered, bounced, deferred, and complained as webhook events to a single endpoint does not port that pipeline. It deletes it.

The sending side moves behind a warming plan that runs in parallel with your existing SES traffic, so reputation transfers gradually rather than all at once. You point your application at an SMTP endpoint or an HTTP API — for most teams a configuration change rather than a code change — and authentication is set up and verified before any production volume shifts. The first weeks get the closest attention, because that is when a new setup reveals whatever the assessment could not predict, and the warming plan is adjusted in real time against how receivers actually respond.

By the time the ramp finishes, the operational layer you were carrying for SES has not moved to a new owner inside your team — it has left your team entirely. The mail reaches the inbox, the monitoring and incident response run underneath it, and the AWS scaffolding that used to represent your email program is a set of resources you can finally decommission.

/ Common questions

What teams ask when leaving SES.

What is the best Amazon SES alternative for a team without a mail-ops function?

SES is the cheapest raw delivery layer available, and that is exactly the trap: the low per-email rate is the price of a component, not a service. Its real cost is everything it leaves you to assemble — a dashboard, bounce and complaint handling, reputation monitoring, stream isolation, warming logic, and the AWS plumbing that ties them together. For a team that does not want to build and staff all of that, the strongest alternative is managed own-infrastructure: it keeps SES-style control over dedicated sending, but the operational layer arrives included rather than as a stack of services you wire together and then watch.

Why do teams move off Amazon SES?

Five reasons recur. The sandbox approval to reach production is opaque and can be declined without a stated reason. There is no native dashboard — AWS's own recommended pattern is to stitch together SNS, SQS, Lambda, S3, and CloudWatch. Transactional and marketing streams are not separated unless you architect that isolation yourself. Per-second send rates cause throttling when volume spikes. And a bounce or complaint rate over threshold can trigger an automated suspension whose appeal is measured in days. None of these is a flaw in SES; they are the consequences of buying infrastructure instead of a service.

Is Amazon SES actually cheap once you add everything?

The headline rate of roughly $0.10 per 1,000 emails is genuinely the lowest on the market, and for an AWS-native team with engineers who enjoy operating infrastructure it is hard to beat. The number that matters, though, is total cost of ownership: the monitoring stack you build (which itself bills through AWS), the engineering hours to build and maintain it, and the risk cost of a suspension or a deliverability dip nobody was watching. The per-email price is a small fraction of that total. The calculator on this page lets you put your own engineering rate against it and see where the line actually falls.

Does Amazon SES separate transactional and marketing email?

Not on its own. SES gives you a single sending capability and leaves stream isolation as something you architect, typically with separate configuration sets and careful IP management. Skip that work and a low-engagement marketing batch can erode the reputation that delivers your password resets and receipts. Managed own-infrastructure isolates the streams onto separate dedicated IP pools from the first send, because on a tenant-aware MTA the separation is part of the queuing architecture rather than a convention you maintain by hand.

What happens during an SES throttle or suspension?

SES enforces per-second send rates and daily quotas, and sustained spikes above your maximum trigger throttling or outright rejection. If your complaint rate climbs past the threshold, the consequence escalates from throttling to reduced quota to suspension, and the appeal requires manual review that can take days. The policy exists to protect mailbox providers, not your sending continuity, so the entire burden of staying clear of the line sits with you. A managed operation carries that burden instead: reputation is watched daily and a drift is discussed with you before it becomes an incident.

Is SES subject to the US CLOUD Act, and does that matter for EU data?

Yes. SES is an Amazon Web Services product operated by a US company, so the data that passes through it — recipient addresses, engagement events, message metadata — falls under the US CLOUD Act regardless of which AWS region you select. Choosing an EU region changes where the bytes sit, not whose jurisdiction governs them. For a sender with EU customers, a Data Protection Officer, or a Transfer Impact Assessment to write, that distinction is the whole point. A provider that is an EU entity operating its own infrastructure removes the third-country transfer rather than papering over it with contractual clauses.

Can I migrate off SES without rebuilding my integration?

Usually the migration removes integration code rather than adding it. Managed infrastructure exposes standard SMTP and an HTTP API with a clean webhook event model, so the homegrown SNS/SQS/Lambda plumbing that captured SES events is replaced by a single endpoint receiving accepted, delivered, bounced, deferred, and complained events directly. The sending itself moves behind a warming plan run in parallel with your existing setup, so reputation transfers gradually and your customers never feel the cutover.

When is Amazon SES still the right choice over a managed alternative?

When you already live inside AWS, have engineers who are comfortable operating email infrastructure, and do not need data sovereignty. If your stack is built on Lambda and S3, your team treats deliverability as a system they enjoy running, and your volume is steady, SES at $0.10 per 1,000 is exceptionally hard to beat on raw price. The managed alternative earns its place at the moment the operational layer becomes a job nobody wants — or the moment an EU customer asks where their data is processed and who can compel its disclosure.

Keep the SES economics. Drop the operational bill.

Tell us your volume and how you send today. We will show you the real cost difference against SES, honestly — including the cases where staying on SES is the right answer — and what migrating onto managed own-infrastructure would look like for your stack.

Book infrastructure review