security practices

legal Technical and Orginzational Measures

legal

Terms of Use

DPA

Supplemental Terms

Partner Program Agreement

Supply Chain Transparency Statement

Get in touch with legal

privacy +

Privacy Statement

Marketing Privacy Notice

GDPR

EU and India Data Residency

CCPA

HIPAA

LGPD

PDPA

Apple App Dev Privacy Guidance

Transparency Report

Mixpanel AI - Trust, Safety, and Compliance

security +

Security Overview

Security Questionnaire

Security Awareness

legal Technical and Orginzational Measures

legal

Terms of Use

DPA

Supplemental Terms

Partner Program Agreement

Supply Chain Transparency Statement

Get in touch with legal

privacy +

Privacy Statement

Marketing Privacy Notice

GDPR

EU and India Data Residency

CCPA

HIPAA

LGPD

PDPA

Apple App Dev Privacy Guidance

Transparency Report

Mixpanel AI - Trust, Safety, and Compliance

security +

Security Overview

Security Questionnaire

Security Awareness

legal

Terms of Use

DPA

Supplemental Terms

Partner Program Agreement

Supply Chain Transparency Statement

Get in touch with legal

privacy +

Privacy Statement

Marketing Privacy Notice

GDPR

EU and India Data Residency

CCPA

HIPAA

LGPD

PDPA

Apple App Dev Privacy Guidance

Transparency Report

Mixpanel AI - Trust, Safety, and Compliance

security +

Security Overview

Security Questionnaire

Security Awareness

Legal

Technical and Organizational Measures

Measures pseudonymising and/or encrypting personal dataMixpanel maintains Customer Content encrypted in transit with TLS and at rest with AES 256-bit encryption.Measures for ensuring ongoing confidentiality, integrity, availability and resilience of processing systems and servicesThe infrastructure for the Application Services spans multiple fault-independent availability zones in geographic regions physically separated from one another; a variety of tools and processes are in place to maintain high availability and resiliency.Measures ensuring the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incidentBackups of the Customer Content are performed on a regular schedule and recovery testing is periodically conducted. Customer Content is encrypted in transit with TLS and at rest with AES 256 bit encryption.Processes for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures in order to ensure the security of the processingMixpanel maintains an enterprise-wide security program that includes administrative, organizational, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of Customer Content.

Mixpanel conducts periodic reviews of its security program through various internal and independent third-party auditing services.Measures for user identification and authorisationMixpanel enforces password and multi-factor authentication requirements. Access rights are promptly removed with personnel termination. Mixpanel operates under the principle of least privilege which ensures that only those with a business need to access a system or data are authorized and utilizes role-based access controls (RBAC) to provision and control access.Measures for the protection of data during transmissionMixpanel maintains Customer Content encrypted in transit with TLS.Measures for the protection of data during storageMixpanel maintains Customer Content encrypted with AES-256 bit encryption.Measures for ensuring physical security of locations at which personal data are processedCustomer Content is stored in the Google Cloud. Google Cloud data centers physical security features a layered security model. Google Cloud data centers are monitored twenty-four (24) hours a day, seven (7) days a week via video surveillance and intrusion detection systems. Access to Google Cloud data centers floor is secured by multi-factor access control including security badges and biometrics. Further information on Google Cloud security program can be found on Google Cloud Compliance Center at https://cloud.google.com/security/compliance/.**Measures for ensuring events logging**Mixpanel maintains application and infrastructure event logs. Events logs are managed centrally and contextually by the security team.Measures for ensuring system configuration, including default configurationMixpanel maintains a change management policy with approval processes applicable to pre-production.