Switching email platforms feels like an IT task: export, import, reconnect the forms, send. Buried in that export file, though, is the legal basis for every message you send, and migrations are where consent records most often get quietly lost.
The contacts who matter most in a migration are not the engaged subscribers. They are the unsubscribed, the complained, the bounced, because those records are the only thing standing between your new platform and a very old mistake.
Export the evidence, not just the addresses
A proper migration export carries, per contact: email, current status, opt in timestamp, opt in source and form, the consent wording version where available, and the full event history that explains the status. If the old platform cannot export a field, document that gap before you switch, not after a complaint.
Take the export before cancelling anything, and take it twice, once for the working import and once as an untouched archive. The archive is your evidence of the list's state on migration day, whatever happens to the working files later.
Suppressions move first, send later
Build the new platform's suppression list from the old platform's unsubscribes, spam complaints, and hard bounces before importing a single marketable contact. Then verify the counts match. A short count is a stop sign, not a rounding difference.
Never treat migration as a chance to retest old unsubscribes because they might have changed their minds. They have a mechanism for that, called subscribing again. Importing them as active is the one migration error that reliably produces regulatory attention.
Re permissioning: when it helps, when it harms
For genuinely old, disengaged segments whose consent basis is murky, a re permission campaign on the old platform, before migrating, is cleaner than importing doubt. Those who confirm carry a fresh, well documented consent into the new system.
But do not re permission a healthy, well documented list out of anxiety. You will lose a third of good subscribers to inbox fatigue and gain nothing legally. The migration question is about evidence quality, not list size fear.
The first sends from the new platform
Warm up gradually even though the list is yours. New sending infrastructure plus a full list blast is how domains earn spam folder placement, and a consent perfect list in the spam folder still sends nothing.
Send first to the most engaged segment, watch complaints and bounces against the old platform's baselines, and only then widen. Any spike in complaints after migration usually traces back to a status that did not survive the import, which is why the archive export matters.
Related reading
These earlier guides go deeper on connected questions: Cookiebot Alternatives: A Practical Comparison A practical way to compare consent platforms side by side: blocking, records, pricing units, design control, and support, with a shortlist method any team can run., Consent in Companion Apps for Connected Devices Smart devices phone home through companion apps that track, sync, and share. Where consent should appear in that flow, and the dark corners most setups miss., and Consent and Email Preference Centers: Giving Subscribers Control Without Losing Them A preference center turns an unsubscribe into a choice. Designing consent options subscribers actually use, and honoring them everywhere the data travels..
Frequently asked questions
Do subscribers need to opt in again after a platform switch?
No, if their consent was valid and your records of it migrated intact. Consent belongs to the relationship with the brand, not to the software. The migration duty is preserving the evidence, not recollecting the permission.
What happens to consent given through forms on the old platform?
Recreate the forms on the new platform with the same wording and double opt in settings before switching the website over. A gap week where the old form feeds a dead account loses subscribers and muddles records.
Can I clean the list during migration by removing inactive contacts?
Yes, removing or sunsetting inactive actives is good hygiene and carries no consent risk. The risk runs the other way: reactivating people whose status said no. Deletions are safe; resurrections are not.
How long should I keep the old platform's archive?
Keep the untouched export for the same retention period as your consent records generally, measured in years, in storage you control. Platform accounts get closed and data purged on their schedule, not yours.