23 years from Stockholm
Solutions · ESPs and resellers

Wholesale email infrastructure for the people who sell email infrastructure

You run an ESP, a reseller business, or an MSP that bundles email with hosting. Your customers depend on your platform, and your platform depends on whatever runs underneath. We're what runs underneath. Operator-managed PowerMTA, dedicated IP pools you allocate as you see fit, and an Aug-2025-aware deliverability practice — sold wholesale, never to your customers directly.

The structural question

Build, buy, or resell? In 2026, only two of those answers actually scale.

If you're starting an ESP today — or trying to graduate an existing reseller business into one — the architecture decision is the most expensive decision you'll make. Get it wrong and you spend the next eighteen months migrating off it under customer pressure. Get it right and the platform compounds: every new customer adds margin without adding an engineer.

The three real options:

Build it yourself. Buy a PowerMTA license at $8,000/year minimum (more for dev/test environments — that's an extra line item the original vendor charges separately), put it on bare metal you rent from Hetzner or OVH, hire someone who knows MTAs, build the abuse-detection and reputation-monitoring layer that your customers will eventually demand. Add KumoMTA in 2024-2025 as a real open-source alternative if you don't want the PowerMTA license, but understand that you're trading commercial license cost for engineering depth — Postmastery integrations, the analytics tooling, the support contract — none of which are free either.

Buy SES Tenants and resell that. Amazon SES Tenants launched in August 2025 with the explicit pitch of letting ISVs sell to thousands of downstream customers. The math at $24.95 per dedicated IP per month plus the per-message rate is reasonable, the AWS support contract gives you something to point at when an enterprise customer asks. The trade-off is that you've built your business on top of a US-jurisdiction operator, your dedicated IP costs are USD-denominated and IP-stocked, and you're competing on the same primitives your customer would get directly from AWS if they bothered to look. Some ESPs do this and it works. Most discover that "infrastructure rebought is infrastructure with no margin."

Resell our wholesale. We sell you the operator-managed PowerMTA stack — bare-metal Xeon servers, dedicated IP allocations from /24 ranges we own, FBL ingestion, daily DNSBL monitoring, a Stockholm on-call rotation when something needs human eyes — at flat EUR pricing without per-IP add-on lines. Your reseller account gets sub-account isolation per customer (the same per-tenant primitives we ship to SaaS platforms), so a bad customer can't crater the rest of your book. You set retail prices. We never see your customer list.

The structural question isn't really "which is cheapest." It's "which one has the lowest probability of forcing me to migrate everything in eighteen months?" The answer changes by whether your customer base is single-digit thousands of small senders or double-digit enterprise contracts, by whether you need EU operator residency for procurement reasons, and by how much engineering you actually want to do.

Reseller economics

Per-customer margin if you resell our wholesale infrastructure

Move the sliders to model your reseller economics. The math takes our PowerMTA Pro tier (€1,499/mo, 20 dedicated IPs, 150K msg/hr) divided across your customer base, and lets you pick a retail price per customer. The output is your gross margin per active customer per month.

20800
€15 (entry SMB)€400 (enterprise tier)
StandardProEnterprise
€0 (lean)€20K (full SaaS team)

Math: (active customers × retail price) − wholesale tier − operating overhead = monthly gross profit. Wholesale tiers: Standard €899/mo, Pro €1,499/mo, Enterprise €2,799/mo (managed PowerMTA infrastructure). Overhead is what you spend on staff, billing system, support, sales — outside of email infrastructure.

Monthly gross profit
€2,381
40% gross margin on revenue
Monthly revenue €5,880
Wholesale cost €1,499
Operating overhead €2,000
Per-customer net €19.84

A reseller business at this scale typically pays for itself when active customers cross ~80-100 (depending on retail price). Below that, you're investing in customer acquisition. Above 200 active customers on a single Pro tier, infrastructure utilisation is the bottleneck — that's when the conversation moves to Enterprise (€2,799/mo, 30 IPs, 500K msg/hr) or splitting across two boxes.

Build vs buy vs resell

Where each option actually wins

We've watched ESPs go all three routes. They're not equivalent. Here's the honest version of each, including the cases where we're not the right answer.

Option 1 — Build

PowerMTA or KumoMTA on your own iron

Buy the license (or commit to KumoMTA's open source), rent bare metal, hire deliverability talent, build the abuse-detection layer yourself. The cheapest possible per-message cost at very high volumes.

Best for
100M+ msg/mo, deep engineering bench
Year-1 cost
~€100K-180K (incl. one engineer)
Time to market
3-6 months
Honest trade-off

The PowerMTA license is the cheap part. The deliverability engineer who knows what to do when Spamhaus lists your /24 is the expensive part. Most ESPs we've seen on this path discover by month nine that the engineer needs a partner.

Option 2 — SES Tenants

Resell Amazon SES Tenants under your branding

SES Tenants launched August 2025 explicitly to support ISV-on-behalf sending up to 10K isolated tenants (300K on request). Amazon's billing, your invoice on top.

Best for
US-jurisdiction-friendly customers, AWS-native shops
Year-1 cost
$24.95/IP/mo + per-message
Time to market
4-8 weeks
Honest trade-off

Margins compress because your customer can buy directly from AWS at the same price. EU customers will ask the Schrems II question. And when a tenant gets paused at 2am, you're calling AWS support — you don't have a Stockholm phone number.

Option 3 — Resell us

Wholesale managed PowerMTA, you sell the platform on top

We ship the operator-managed infrastructure: PowerMTA, dedicated IPs, FBL, DNSBL monitoring, Stockholm on-call. You ship the platform, the UI, the billing, the customer relationship.

Best for
EU-positioned ESPs, agencies, MSPs that want margin not engineering
Year-1 cost
€10,788-€33,588 (Standard to Enterprise)
Time to market
2-3 weeks
Honest trade-off

You're capped by our pricing, so the per-message cost is higher than building yourself at very high volumes. Above ~400M messages/month, the build-it-yourself math starts winning. Below that, the engineering you don't do pays for the wholesale margin you give up.

The actual MTA landscape

What ESPs are actually running underneath, April 2026

Platform License model Throughput class Multi-tenant primitives Year-1 reality
Authorize Hosting
managed PowerMTA
Flat EUR monthly. €899-€2,799 per server tier, no per-IP add-on. 50K-500K msg/hr per server, scales horizontally vMTAs per customer + per-IP FBL routing + per-tenant reputation policies €10,788-€33,588 + your platform layer
PowerMTA (raw license)
Bird-owned
$8,000/year minimum, volume-tiered up. Dev/test license billed separately. Up to 7-9M msg/hr per server (vendor claims) vMTAs, IP pools, per-domain throttling — best-in-class primitives License + bare metal (~€1,200/yr) + engineer (~€80K loaded) ≈ €100K min
KumoMTA
open-source Rust, 2024+
Free (Apache 2.0). Commercial support packages from KumoCorp. PowerMTA-class on equivalent hardware Lua-scripted routing, IP pools, per-domain configuration €0 license + bare metal + engineer (deeper Lua/Rust skill needed)
GreenArrow Engine
commercial, on-prem or cloud
Cloud from $250/mo, On-Prem Standard $600/mo or $6K perpetual, Pro $800/mo or $9K perpetual Millions msg/hr on proper hardware, cooperative throttling for clusters IP pools, per-domain throttling, suppression management $3K-$10K + bare metal + engineer
Amazon SES Tenants
launched Aug 2025
$0.10/1K + $24.95/IP/mo, AWS-native consumption pricing Whatever AWS gives you per region (no per-server number disclosed) Tenants feature with up to 10K (default)/300K (request) isolated tenants per account Variable per use; reseller economics depend on the spread you charge above SES
MailWizz / Sendy / Mautic
PHP/web-app layer, BYO MTA
License or open source. Need a real MTA underneath. Limited by the MTA you put underneath Customer-list separation, basic per-list throttling €500-€4,000 license + the MTA decision above

PowerMTA pricing verified against vendor pages and Capterra/SourceForge listings April 2026. KumoMTA license terms from kumomta.com. GreenArrow tiers from greenarrow.com. SES Tenants pricing from AWS launch documentation August 2025. The "Year-1 reality" column includes our estimate of what you actually spend including bare metal hosting and a competent engineer where required.

How a reseller engagement actually works

The boring mechanics of selling email infrastructure on top of ours

The reseller relationship is contractually simpler than most people expect. We sign a wholesale agreement with you that gives you a managed PowerMTA tier (your choice of Standard / Pro / Enterprise based on volume), white-label-friendly access to the underlying infrastructure, and a sub-account API for provisioning your customers as separate tenants on the box. There's no per-customer fee from our side. You're paying for the iron and the operator desk.

The platform you build on top — the customer-facing UI, the campaign builder, the analytics dashboard, the billing system, the support portal — is yours. Most resellers we work with run something based on MailWizz, Mautic, or a custom-built admin panel that connects to our PowerMTA over SMTP relay or our HTTP API. A few use the open-source Mautic ecosystem. One built their entire UI in Vue and pipes everything through our API. We don't have a strong opinion about which one is right; what we care about is that the architecture below it (vMTAs, IP allocation, FBL routing) is correct.

Customer onboarding from your end looks like this: you create a new tenant in our control plane (one API call), assign it dedicated IPs from your pool (you decide how many — typically 2-4 for a starter customer, scaling with volume), generate the DKIM keys, configure the SPF includes, and hand the customer SMTP credentials or an API key scoped to their tenant. The customer's reputation is then isolated — bad behaviour from one tenant doesn't bleed into the others. The Spamhaus listing we've described elsewhere on this site only affects the IPs allocated to that tenant.

The pieces of operator work we do that you don't: daily DNSBL sweeps across all 50+ lists for every IP allocated to your customers, FBL ingestion from Yahoo, AOL, Hotmail, Microsoft 365, La Poste, and Comcast (per IP, routed back to the originating tenant), SBL/CSS remediation when something does list, hardware replacement when a server fails, OS patching, PowerMTA version upgrades. None of these are visible to your customer; they just see "the platform works." That invisibility is what you're paying us for.

Pricing scales with infrastructure: as your customer book grows past what one Pro server can carry (roughly 200 active customers depending on their volume distribution, or 150K msg/hr aggregate), we either add a second box for an Enterprise upgrade, or split the customer book across two boxes for redundancy. The decision usually has more to do with the shape of your traffic than the absolute number — one customer doing 100M/mo is very different from a hundred customers averaging 1M each, even though the totals match.

Pricing tiers

How resellers usually start, and how the conversation evolves

PowerMTA Standard · €899/mo

For resellers under 50 active customers

Xeon E-2388G, 32 GB ECC, 1 TB NVMe, 10 dedicated IPs, 50K msg/hr. Where you start when you're proving the channel works. Most resellers stay here for 6-12 months while they build their customer book.

See full PowerMTA spec
PowerMTA Pro · €1,499/mo · Most common

For resellers between 50-200 active customers

Xeon Gold 6326, 64 GB ECC, 2 TB NVMe, 20 dedicated IPs, 150K msg/hr. The tier where most resellers settle for the long term. Margin per customer compounds as the book scales toward 200.

See full PowerMTA spec
PowerMTA Enterprise · €2,799/mo

For resellers past 200 customers or one large enterprise account

Xeon Gold 6338, 128 GB ECC, 4 TB NVMe, 30 dedicated IPs, 500K msg/hr. The tier where resellers either consolidate growth, or split the customer book across two Pro boxes for redundancy and continue scaling.

Talk through your sizing
Common questions before signing

What ESPs and resellers ask before moving infrastructure

Will you ever sell directly to my customers if they find you?

+

No. The wholesale agreement includes an explicit non-circumvention clause: if a customer of yours contacts us trying to buy direct, we route them back to you. We don't have your customer list and we don't want it — that's not the business model. The only exception is if a customer of yours is actively in distress because you've gone out of business or stopped paying us, in which case we'll work with them directly to keep their email running while they migrate, and you'd already know about it.

Can we white-label the infrastructure entirely so our customers never see "Authorize Hosting" anywhere?

+

Yes. The HELO hostnames, Received headers, FBL configuration, and rDNS PTRs all use your branded hostname. The IP pool is allocated to you out of our /24 ranges and is registered to you in our records. Your customers see relay.your-platform.com, not us. The only place we appear is on legal documents (the DPA and the underlying T&Cs your customer doesn't see).

Worth noting: full IP-level branding requires AS/RIPE-side delegation work, which we handle as part of the onboarding. Plan two weeks for that to fully propagate.

What happens if a single customer of mine gets a Spamhaus SBL listing?

+

The IPs you've allocated to that customer get listed; the other IPs in your pool don't, because they're separate. Our operator desk gets the alert from our daily DNSBL sweep within the first 24 hours. We pause that customer's sending automatically (configurable per-tenant policy), open the SBL ticket with Spamhaus, work with you to identify what triggered the listing in the customer's content or list, and remediate from our side.

You handle the customer conversation; we handle Spamhaus. Most listings resolve in 48-72 hours once the underlying behaviour is corrected. For a really nasty case (purchased list, compromised account sending malware), 5-7 days is realistic.

How do I migrate from my current PowerMTA license without my customers noticing?

+

The 14-28 day IP warmup window is what dictates the pace. We ship the new dedicated IPs warmed against test traffic before they carry your customers. During the cutover, your platform's SMTP relay endpoint changes (or your API endpoint) to ours, and the customer-facing system continues to send. Customer-side, nothing changes — same SMTP/API, same DKIM, same domain.

Most resellers we've migrated do it tenant-by-tenant over 2-3 weeks. Heaviest customers go last (or sometimes first, depending on whether the priority is risk minimisation or reputation establishment). The previous PowerMTA license can be cancelled at the next renewal, which usually saves enough money in year one to pay for our infrastructure.

What's the contractual commitment? Can I leave?

+

Month-to-month on every tier. There's no annual lock-in, no termination fee, no per-customer offboarding charge. Annual prepayment knocks 10% off the bill if you want to stabilise the unit economics, but it's not required. We've found that the kind of relationship that lasts ten years isn't built on cancellation friction; it's built on the absence of reasons to cancel.

Do you support the European MailWizz / Mautic / Acumbamail / Inxmail integrations?

+

MailWizz and Mautic point at our SMTP relay or HTTP API exactly the same way they'd point at any PowerMTA. Acumbamail and Inxmail are full-stack ESPs with their own infrastructure — they're not the resell-our-infrastructure case. CleverReach, Rapidmail, and the German enterprise ESPs (Inxmail, Mapp, Agnitas, Xqueue) all run on their own backends. Your customers might integrate with their CRMs but the email transport stays on our PowerMTA.

What about the GDPR data-controller relationship?

+

The standard chain: your customer is the data controller, you're the processor (under your customer's DPA), we're the sub-processor (under your reseller agreement with us). Our DPA is structured around this pattern. Data residency stays in EU by default (Stockholm primary, Frankfurt secondary). Your customers get a chain that ends at an EU operator with no US ownership and no transfer-impact-assessment surprise.

For German and Austrian customers, we provide an AVV per Art. 28 DSGVO that you sign on behalf of your customers. For French customers we provide the equivalent under their RGPD framing. Spanish customers get the LOPD-GDD overlay on top of GDPR.

Wholesale email infrastructure isn't a complicated conversation

Tell us your active customer count, your current MTA, and roughly the volume distribution across your book. We'll come back with a sized configuration, a migration plan, and a wholesale agreement that doesn't have any clauses you'd be surprised by.