security
Security Questionnaire
legal
+
Terms of Use
DPA
Supplemental Terms
Partner Program Agreement
Supply Chain Transparency Statement
Get in touch with legal
privacy
+
Privacy Statement
Marketing Privacy Notice
GDPR
EU and India Data Residency
CCPA
HIPAA
LGPD
PDPA
Apple App Dev Privacy Guidance
Transparency Report
Mixpanel AI - Trust, Safety, and Compliance
security
Security Overview
Security Questionnaire
Security Awareness
security
Security Questionnaire
legal
+
Terms of Use
DPA
Supplemental Terms
Partner Program Agreement
Supply Chain Transparency Statement
Get in touch with legal
privacy
+
Privacy Statement
Marketing Privacy Notice
GDPR
EU and India Data Residency
CCPA
HIPAA
LGPD
PDPA
Apple App Dev Privacy Guidance
Transparency Report
Mixpanel AI - Trust, Safety, and Compliance
security
Security Overview
Security Questionnaire
Security Awareness
legal
+
Terms of Use
DPA
Supplemental Terms
Partner Program Agreement
Supply Chain Transparency Statement
Get in touch with legal
privacy
+
Privacy Statement
Marketing Privacy Notice
GDPR
EU and India Data Residency
CCPA
HIPAA
LGPD
PDPA
Apple App Dev Privacy Guidance
Transparency Report
Mixpanel AI - Trust, Safety, and Compliance
security
Security Overview
Security Questionnaire
Security Awareness
Security
Last Updated
November 1, 2024
Mixpanel Security Questionnaire
Mixpanel’s Global Security Program, or the GSP, was built to safeguard our customers’ data. Information security plays a role in every aspect of Mixpanel’s services, and the Team has prepared this overview of our security practices to provide additional assurances and insights into how Mixpanel’s protects our customers’ data.
Global Security Program
Dedicated Security Team
Led by the Head of Global Privacy and Security, Mixpanel’s Global Security Program is staffed with full-time, subject matter experts in both the United States, India and the European Union. The Program includes alumni from the Department of Defense, the Federal Reserve System, and Microsoft.
Data Security and Governance
How does Mixpanel segment and separate data?
All customer data is tagged with a project-specific token, and a customer must have access to the corresponding API key and secret in order to retrieve that data via API (access to the web UI is controlled via username and password). This provides logical separation between data belonging to multiple clients. Mixpanel is the sole tenant on our infrastructure. A customer’s data may reside on database systems which house data belonging to other customers, but our logical controls (token, key and secret) separates one client from another client’s data.
Does Mixpanel support single sign-on and multifactor authentication?
Our product supports single sign-on and provides authentication options through these providers. We also support multifactor authentication outside of single sign-on. Details on how to enable single sign-on are located at: https://docs.mixpanel.com/docs/admin/sso.
Encryption and Password Management
Does Mixpanel encrypt customer data?
When a user visits a website or application with Mixpanel instrumented, the details of their interactions are captured and sent to Mixpanel through API calls secured over HTTPS/HTTP, based on how Mixpanel is configured by the customer. All of our other APIs and websites use HTTPS exclusively. All data transferred over HTTPS is encrypted. Mixpanel uses cipher suites configured in accordance with NIST SP 800-52 Rev 2 to secure data in transit.