/ Compare — Amazon SES
The Amazon SES alternative for teams who priced the $0.10, then found the rest of the bill.
SES has the lowest per-email rate in the market, and that rate buys you a component, not a service. The dashboard, the deliverability operations, the stream isolation, the warming, the monitoring — SES leaves all of it for you to build, staff, and watch. This is the same sending economics with the operational layer included, on infrastructure we own and run, in a jurisdiction that is actually European.
/ Quick answer
The strongest Amazon SES alternative for a team that does not want to operate email infrastructure is managed own-infrastructure: it keeps the cost advantage that draws people to SES, but ships the parts SES makes you assemble. SES charges about $0.10 per 1,000 emails and hands you raw infrastructure — no dashboard, no deliverability operations, no stream isolation, and a sandbox gate to reach production. Its true cost is the monitoring stack you build on top, the engineering hours to run it, and the suspension risk nobody is paid to watch. A managed platform runs dedicated PowerMTA and KumoMTA infrastructure for you, isolates your streams, warms your IPs, and monitors reputation daily — at SES-class economics, as an EU entity outside the reach of the US CLOUD Act.
-
$0.10
SES's per-1,000 rate — the lowest raw price anywhere, and only a fraction of what SES actually costs to run.
-
5
AWS services — SNS, SQS, Lambda, S3, CloudWatch — you assemble before SES shows you a single bounce.
-
CLOUD Act
applies to SES in any AWS region, because the operator is a US company. Region is not jurisdiction.
-
Own MTA
Dedicated PowerMTA / KumoMTA — the stack Postmark itself migrated to — instead of Amazon's shared layer.
/ 01 — The trap in the price
Why do teams who chose SES for the price end up leaving over it?
Amazon SES wins almost every spreadsheet it appears in, because the spreadsheet usually has one row: price per email. At roughly ten cents per thousand messages, nothing else comes close, and for a certain kind of team that number is the end of the discussion. The difficulty is that the number describes a component — a sending API and the IP infrastructure behind it — and a production email program is not a component. It is a system, and SES quietly leaves most of that system for the buyer to build.
What arrives missing is not exotic. It is the dashboard that shows whether last night's send reached the inbox, the logic that catches a bounce and suppresses the address, the separation that keeps a marketing blast from poisoning transactional reputation, the warming schedule that takes a fresh IP up to volume without tripping a filter, and the person who notices when a receiver starts deferring. Each of these is ordinary, and each is real work. Assembled, they are the difference between a sending API and a sending service.
The teams that leave SES rarely do so because anything broke. They leave because the operational layer they were quietly carrying grew heavier than the price they were saving — an engineer's afternoons disappearing into CloudWatch dashboards, a deliverability dip that took three days to even locate, a suspension notice that arrived on a Friday. The price was real. So was everything behind it.
01
The sandbox gate
New accounts start sandboxed, able to send only to verified addresses. Reaching production needs an approval that AWS can decline without a stated reason, on its own timeline.
02
No dashboard
SES ships no native delivery view. AWS's own recommended pattern is to assemble SNS, SQS, Lambda, S3, and CloudWatch — a small data pipeline you build before you can see a bounce.
03
No stream isolation
Transactional and marketing mail share one sending capability unless you architect separation yourself. A bad marketing batch can take down the reputation behind your password resets.
04
Per-second throttling
Send rates are capped per second. A campaign spike or a retry storm hits the ceiling and SES throttles or rejects — the burden of smoothing the curve is yours.
05
Suspension on threshold
Cross the complaint or bounce threshold and the response escalates to suspension, with a manual appeal measured in days. The policy protects mailbox providers, not your continuity.
/ 02 — True cost calculator
What does Amazon SES actually cost you per month?
The sticker price is exact and public. The operational cost is yours, and it is the part the pricing page never shows. Put in your volume and your own engineering rate, and watch how much of your real bill the per-email number actually represents. Everything here is an estimate built from your inputs — adjust the assumptions and the math follows.
Monitoring, bounce and complaint handling, warming, incident response, and the SNS/SQS/Lambda pipeline. A conservative default for a single steady sending program.
At this volume, the per-email price is only 22% of what SES actually costs you. The rest is the operational layer a managed platform absorbs.
Estimate only, from your inputs. Sticker uses SES's public ~$0.10 per 1,000 rate; overhead is your hours times your rate. It excludes the AWS charges the monitoring stack itself incurs and the risk cost of a suspension — both real, both omitted here to keep the math conservative.
/ 03 — Own, not raw
The difference between raw infrastructure and infrastructure that is run.
SES gives you raw infrastructure: a capable sending layer on Amazon's shared, multi-tenant platform, abstracted behind an API and left for you to instrument. A managed alternative gives you infrastructure that is owned and run — dedicated PowerMTA and KumoMTA, the same mail transfer agents that high-volume senders and ESPs choose when delivery is the business rather than a feature. The distinction is not branding. PowerMTA carried professional sending for two decades; KumoMTA, written in Rust by the architect behind one of its few real competitors, now matches it in the open. When Postmark rebuilt its sending layer, it moved its entire platform onto KumoMTA and published the result — faster queue times to every major provider while holding the reputation it had spent years building.
Running that class of MTA yourself is a genuine discipline: per-ISP traffic shaping, queue tuning, bounce classification, IP pool architecture. That is the work a managed operation takes on, so the control of dedicated infrastructure arrives without the staffing that operating it normally demands. It is the economics that drew you to SES, paired with the control that SES, as a shared abstraction, was never built to give you.
/ 04 — Side by side
Amazon SES versus managed infrastructure, including where SES wins.
An honest comparison has to mark the rows the other side wins, because a page that claims to win everything is selling, not comparing. SES owns raw price and AWS-native depth outright — if those are what decide it for you, SES is the answer and this page just saved you a migration. Filter the matrix by what you care about.
/ 05 — Jurisdiction, not region
Choosing an EU region does not put your data under EU jurisdiction.
Every email SES handles carries personal data: recipient addresses, open and click events, bounce lists, message metadata. Route that through SES and it travels through a service operated by Amazon Web Services, a US company — which means the US CLOUD Act reaches it whenever a federal court issues an order, no matter which region the bytes physically sit in. Selecting an EU region moves the storage location; it does not move the jurisdiction, because the entity that controls the keys and the employee accounts is American.
For a sender with European customers this is not a hypothetical. Under GDPR your email processor appears in your records of processing with a transfer mechanism, and "we use the EU region of a US provider" is not a valid one. The honest path through a data protection review is either a Transfer Impact Assessment that argues the risk down across many pages, or a processor that removes the transfer entirely by being European in the way that counts — an EU entity, operating its own infrastructure, where no third-country transfer occurs because there is no third country in the chain.
That is the structural advantage a US incumbent cannot match by adding a region. We operate as an EU entity on infrastructure we own, so the data stays under EU jurisdiction rather than merely on EU soil. If your customers, your auditor, or your own data protection officer have ever asked where your email data is processed and who can compel its disclosure, that difference is the entire answer.
If you sell only into the US and hold no EU personal data, this section does not apply to you, and you should weight it at zero. Sovereignty is a real advantage for the senders it affects and irrelevant to the ones it does not — and pretending otherwise would be exactly the kind of overclaim this page is trying to avoid.
/ 06 — Pricing that holds
The email market keeps raising prices. Owned infrastructure does not have to.
SES itself has held its rate, which is part of its appeal. But the broader managed-email market has spent the past two years moving prices the other way, and the pattern has a cause: when a sending platform is acquired or venture-funded, the pricing answers to the new owner's revenue targets rather than to the cost of delivery. Infrastructure you own answers to neither.
SendGrid
2025Under Twilio, the long-standing free plan was retired; new accounts moved to a 60-day trial.
Mailgun
2025Following Sinch consolidation, the pay-as-you-go rate moved from roughly $1 to $2 per 1,000.
Resend
Oct 2024The 200,000-email tier went from $80 to $160 per month under venture-backed growth pressure.
/ 07 — When to stay
When Amazon SES is still the right call — and you should keep it.
A comparison is only useful if it can tell you to stay where you are. There are clear situations where SES remains the better choice, and a managed alternative would be a worse fit sold convincingly. If your application already lives inside AWS — events flowing through Lambda, storage in S3, your team fluent in the console — then SES is not a standalone email tool, it is a native part of the architecture you already run, and that integration has real value the calculator above does not capture.
The same holds when your team genuinely enjoys operating infrastructure and has the capacity to do it well. The operational layer SES leaves to you is only a hidden cost if nobody wants the job; for a team that treats deliverability as a system worth tuning, that work is not overhead, it is craft, and SES gives them the rawest and cheapest surface to practice it on. Add steady, predictable volume with no sovereignty requirement, and the per-email price becomes very hard to argue with.
Managed infrastructure earns the switch at a specific moment: when the operational layer becomes a job nobody on the team wants to own, when a suspension or a deliverability dip costs more than the price was ever saving, or when an EU customer asks a question about jurisdiction that an AWS region cannot answer. Until one of those is true, SES is a reasonable place to be — and we would rather tell you that than win a migration you will regret.
/ 08 — Moving off SES
How moving off SES usually removes code instead of adding it.
The fear with any sending migration is the integration, and with SES that fear is usually misplaced, because most of what you would migrate is scaffolding you built only because SES required it. The SNS topic, the SQS queue, the Lambda that parsed delivery notifications, the S3 bucket holding them, the CloudWatch alarms watching the whole thing — all of that existed to turn a bare send API into something observable. Moving to a platform that emits accepted, delivered, bounced, deferred, and complained as webhook events to a single endpoint does not port that pipeline. It deletes it.
The sending side moves behind a warming plan that runs in parallel with your existing SES traffic, so reputation transfers gradually rather than all at once. You point your application at an SMTP endpoint or an HTTP API — for most teams a configuration change rather than a code change — and authentication is set up and verified before any production volume shifts. The first weeks get the closest attention, because that is when a new setup reveals whatever the assessment could not predict, and the warming plan is adjusted in real time against how receivers actually respond.
By the time the ramp finishes, the operational layer you were carrying for SES has not moved to a new owner inside your team — it has left your team entirely. The mail reaches the inbox, the monitoring and incident response run underneath it, and the AWS scaffolding that used to represent your email program is a set of resources you can finally decommission.
/ Common questions
What teams ask when leaving SES.
What is the best Amazon SES alternative for a team without a mail-ops function?
SES is the cheapest raw delivery layer available, and that is exactly the trap: the low per-email rate is the price of a component, not a service. Its real cost is everything it leaves you to assemble — a dashboard, bounce and complaint handling, reputation monitoring, stream isolation, warming logic, and the AWS plumbing that ties them together. For a team that does not want to build and staff all of that, the strongest alternative is managed own-infrastructure: it keeps SES-style control over dedicated sending, but the operational layer arrives included rather than as a stack of services you wire together and then watch.
Why do teams move off Amazon SES?
Five reasons recur. The sandbox approval to reach production is opaque and can be declined without a stated reason. There is no native dashboard — AWS's own recommended pattern is to stitch together SNS, SQS, Lambda, S3, and CloudWatch. Transactional and marketing streams are not separated unless you architect that isolation yourself. Per-second send rates cause throttling when volume spikes. And a bounce or complaint rate over threshold can trigger an automated suspension whose appeal is measured in days. None of these is a flaw in SES; they are the consequences of buying infrastructure instead of a service.
Is Amazon SES actually cheap once you add everything?
The headline rate of roughly $0.10 per 1,000 emails is genuinely the lowest on the market, and for an AWS-native team with engineers who enjoy operating infrastructure it is hard to beat. The number that matters, though, is total cost of ownership: the monitoring stack you build (which itself bills through AWS), the engineering hours to build and maintain it, and the risk cost of a suspension or a deliverability dip nobody was watching. The per-email price is a small fraction of that total. The calculator on this page lets you put your own engineering rate against it and see where the line actually falls.
Does Amazon SES separate transactional and marketing email?
Not on its own. SES gives you a single sending capability and leaves stream isolation as something you architect, typically with separate configuration sets and careful IP management. Skip that work and a low-engagement marketing batch can erode the reputation that delivers your password resets and receipts. Managed own-infrastructure isolates the streams onto separate dedicated IP pools from the first send, because on a tenant-aware MTA the separation is part of the queuing architecture rather than a convention you maintain by hand.
What happens during an SES throttle or suspension?
SES enforces per-second send rates and daily quotas, and sustained spikes above your maximum trigger throttling or outright rejection. If your complaint rate climbs past the threshold, the consequence escalates from throttling to reduced quota to suspension, and the appeal requires manual review that can take days. The policy exists to protect mailbox providers, not your sending continuity, so the entire burden of staying clear of the line sits with you. A managed operation carries that burden instead: reputation is watched daily and a drift is discussed with you before it becomes an incident.
Is SES subject to the US CLOUD Act, and does that matter for EU data?
Yes. SES is an Amazon Web Services product operated by a US company, so the data that passes through it — recipient addresses, engagement events, message metadata — falls under the US CLOUD Act regardless of which AWS region you select. Choosing an EU region changes where the bytes sit, not whose jurisdiction governs them. For a sender with EU customers, a Data Protection Officer, or a Transfer Impact Assessment to write, that distinction is the whole point. A provider that is an EU entity operating its own infrastructure removes the third-country transfer rather than papering over it with contractual clauses.
Can I migrate off SES without rebuilding my integration?
Usually the migration removes integration code rather than adding it. Managed infrastructure exposes standard SMTP and an HTTP API with a clean webhook event model, so the homegrown SNS/SQS/Lambda plumbing that captured SES events is replaced by a single endpoint receiving accepted, delivered, bounced, deferred, and complained events directly. The sending itself moves behind a warming plan run in parallel with your existing setup, so reputation transfers gradually and your customers never feel the cutover.
When is Amazon SES still the right choice over a managed alternative?
When you already live inside AWS, have engineers who are comfortable operating email infrastructure, and do not need data sovereignty. If your stack is built on Lambda and S3, your team treats deliverability as a system they enjoy running, and your volume is steady, SES at $0.10 per 1,000 is exceptionally hard to beat on raw price. The managed alternative earns its place at the moment the operational layer becomes a job nobody wants — or the moment an EU customer asks where their data is processed and who can compel its disclosure.
Keep the SES economics. Drop the operational bill.
Tell us your volume and how you send today. We will show you the real cost difference against SES, honestly — including the cases where staying on SES is the right answer — and what migrating onto managed own-infrastructure would look like for your stack.
Book infrastructure reviewRelated capabilities