Trust Center
Data protection regulations in general are designed to protect the personal data of individuals and impose obligations on organizations that collect, process, and store such personal data. These obligations apply to both our customers and Mimecast. We take our obligations under these data protection regulations (such as GDPR, CCPA, POPIA and PIPEDA) governing the services we provide seriously.
We are always reviewing our products and services and making enhancements to help support our customers’ data privacy compliance journey. We also commit ourselves to data protection through our Data Processing Addendum which is available to our customers.
Scroll down this page for information cards including:
- Certification and Attestation reports (security packs)
- Data Processing Addendum
- AI Development Pledge
- Processing details
- Technical and Organizational Measures
- Sub-processors
- Accessibility Statement
- Privacy Statement
We're here to help. Contacts us at: certificationqueries@mimecast.com.
Mimecast Update on MongoBleed (CVE-2025-14847).
In response to the recent MongoBleed vulnerability (CVE-2025-14847), we are making the following statement:
• Our investigation to date has not identified any software impacted by CVE-2025-14847 (MongoBleed).
• There have not been any remediation steps taken as Mimecast’s investigation has not identified any vulnerable software within our environment. However, Mimecast’s continuous monitoring and security tools have detections for indicators of compromise associated with CVE-2025-14847 and we continue to monitor the situation.
Mimecast Update on React2Shell (CVE-2025-55182)
On December 3, 2025, a critical remote code execution vulnerability was disclosed affecting React Server Components.
Mimecast does not use the vulnerable React Server Components in our products.
Our investigation has confirmed that no Mimecast systems or customer data are affected by this vulnerability. Our investigation continues into the impact on our supply chain and partners.
We continue to monitor the situation and will provide updates if circumstances change.