Trust Center
Data protection regulations in general are designed to protect the personal data of individuals and impose obligations on organizations that collect, process, and store such personal data. These obligations apply to both our customers and Mimecast. We take our obligations under these data protection regulations (such as GDPR, CCPA, POPIA and PIPEDA) governing the services we provide seriously.
We are always reviewing our products and services and making enhancements to help support our customers’ data privacy compliance journey. We also commit ourselves to data protection through our Data Processing Addendum which is available to our customers.
Scroll down this page for information cards including:
- Certification and Attestation reports (security packs)
- Data Processing Addendum
- AI Development Pledge
- Processing details
- Technical and Organizational Measures
- Sub-processors
- Accessibility Statement
- Privacy Statement
We're here to help. Contacts us at: certificationqueries@mimecast.com.
Mimecast Update on MongoBleed (CVE-2025-14847).
In response to the recent MongoBleed vulnerability (CVE-2025-14847), we are making the following statement:
• Our investigation to date has not identified any software impacted by CVE-2025-14847 (MongoBleed).
• There have not been any remediation steps taken as Mimecast’s investigation has not identified any vulnerable software within our environment. However, Mimecast’s continuous monitoring and security tools have detections for indicators of compromise associated with CVE-2025-14847 and we continue to monitor the situation.