Klaviyo

Sent via metric-triggered flows (e.g. 'Placed Order'), not a separate paid product. Each message must be individually submitted for and approved as 'transactional' status (up to 24 hours review); only available on paid accounts, not the free plan.

Confirmed by a Klaviyo Community Manager in an official forum reply: 'SMTP credentials are not something we offer.' Klaviyo recommends setting up a branded/dedicated sending domain instead.

Maintained SDKs in Python, PHP, Ruby, and Node in addition to the REST API.

Webhooks API forwards Klaviyo events to external endpoints; max 10 webhooks per account, HMAC-SHA256 signed. Separate in-flow webhook actions also exist.

Flow builder supports multi-branch conditional splits (up to 20 paths) on profile/event data, time delays, data actions, and multi-channel steps (email, SMS, push, webhook) within a single flow.

Native predictive analytics: historic/predicted/total customer lifetime value, churn risk, expected date of next order, and predicted gender, usable directly as segment conditions.

Native A/B testing for campaign subject lines, content, and send time, plus separate flow-email and flow-branch A/B testing.

SMS/MMS available in the US, Canada, and ~17 other countries (UK, Ireland, Australia, New Zealand, and a growing list of EU/Nordic countries as of this research pass); billed as a per-message dollar rate (not credits) drawn from a monthly Mobile Messaging spend pool that does not roll over. WhatsApp also supported per help.klaviyo.com/hc/en-us/articles/13502982552347.

Native, standalone hosted landing pages with their own URL (company.myklpages.com or a custom domain), built in the same editor as sign-up forms; this shipped in early 2026 — prior to that, Klaviyo relied on third-party landing-page-builder integrations.

Native popup, flyout, full-page, and embedded sign-up forms with built-in CAPTCHA bot prevention.

Native Deliverability Hub tracks open/click/bounce/unsubscribe/spam-complaint rates and sender reputation; automated SPF/DKIM setup for branded sending domains. No native inbox-preview or spam-content testing tool was found — the article directs users to external tools (e.g. Google Postmaster Tools) for some monitoring.

Available only to accounts that 'qualify' (consistent high-volume sending cadence); requires reaching out to a Customer Success Manager. Whether qualification carries an additional fee on top of the plan price is not documented in this article — see reports/needs-verification.md.

Official app installed and authorized directly from within Shopify/Klaviyo; syncs customer profiles, orders, and product catalog, plus bidirectional profile-data sync back to Shopify. Widely reported as Klaviyo's flagship/most-used integration.

Official WordPress plugin; syncs Started Checkout, Placed Order, and Ordered Product events in real time for abandoned cart and purchase-based flows.

Official Magento 2 (Community and Enterprise Edition) extension; initial historical sync plus ongoing sync every 30 minutes of customer, order, and browsing data.

Native 'product feeds' / dynamic product blocks recommend items based on catalog data and individual browsing/purchase behavior.

Native flow templates triggered by 'Started Checkout' (and 'Added to Cart' for Shopify with behavioral tracking enabled); no third-party tool required.

Native multi-channel (cooperative, configurable-window) attribution model assigns conversion/revenue credit across email, SMS, and push per campaign and flow.

No phone support for product/technical help is documented; a publicly listed Klaviyo phone number is for sales only, not support. Paid accounts get 24/7 email and 24/5 live chat (regional hours vary); free accounts get email support for their first 60 days only, plus Help Center/Academy/Community access.

Free plan gets email support for the first 60 days only; no live chat on the free plan.

DPA incorporates Standard Contractual Clauses (Module Two and Module Three) and states Klaviyo self-certifies under the EU-U.S. Data Privacy Framework.

DPA states Klaviyo 'may store and process Customer Personal Data anywhere Klaviyo or its Sub-processors maintain facilities'; no EU-only data residency option is offered — international transfers rely on SCCs/DPF rather than data localization.

Klaviyo's compliance help section footer displays an AICPA SOC certification badge alongside ISO 27001, ISO 27017, and PCI DSS; this page does not specify Type I vs Type II, but SOC 2 Type II is consistently reported elsewhere (Klaviyo Trust Center at trust.klaviyo.com, multiple secondary sources).