Snapshot 13928
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content
Mixpanel, Inc.
Mixpanel is a powerful, self-serve digital analytics platform that helps teams analyze user behavior in real time to make faster, data-informed decisions.
grc@mixpanel.com
Privacy PolicyOpens in new tab
Filter by
Mixpanel is a digital analytics platform that allows anyone to get answers from their customer and business data in seconds. It offers powerful real-time charts and visualizations of how people interact with your digital products and company. With insights into behaviors like conversion and retention, teams can collaborate more effectively and make informed decisions. Regardless of technical expertise, builders can double down on what’s working, cut what isn’t, and spend more time on their best ideas with Mixpanel.
Compliance
SOC 2
ISO 27001:2022
ISO 27701
GDPR
CCPA
HIPAA
CSA STAR
Resources
View all
Certifications & Attestations
Mixpanel SOC 2 ISAE Type 2 Report w. HIPAA Mapping 04.30.26.pdf
Mixpanel ISO 27701:2019 Compliance Certificate FINAL 6.25.2026.pdf
Mixpanel ISO 27001:2022 Compliance Certificate FINAL 6.25.2026.pdf
Mixpanel SOC 2 Bridge Letter 09.11.2026.pdf
Penetration Test
Mixpanel 2025 Penetration Test HackerOne Executive Summary Report.pdf
Mixpanel 2025 Penetration Test HackerOne Executive Summary Retest Report.pdf
Policies
Acceptable Use Policy
Asset Management Policy
Business Continuity Plan
Software Development Policy
View 13 more
Legal
Terms of Use
Opens in new tab
Supplemental Terms
Opens in new tab
California Data Privacy Addendum (CDPA)
Opens in new tab
Data Processing Addendum (DPA)
Opens in new tab
View 2 more
Privacy
Privacy Statement
Opens in new tab
Marketing Privacy Notice
Opens in new tab
Mixpanel & the GDPR
Opens in new tab
Mixpanel Data Residency Program: US, EU & India
Opens in new tab
View 7 more
Architectural Design
Mixpanel Data Flow Chart.pdf
Security Questionnaires
CAIQ 4.03
Opens in new tab
Other resources
Certificate of Insurance
ISO 27001:2022 Statement of Applicability (SoA)
ISO 27701:2019 Statement of Applicability (SoA)
Controls
View all
Infrastructure security
Unique network system authentication enforced
Remote access MFA enforced
Remote access encrypted enforced
View 2 more Infrastructure security controls
Organizational security
Information System Activity Review
Performance evaluations conducted
Product security
Data encryption at rest
Application and infrastructure penetration testing performed
Internal security procedures
Cybersecurity insurance maintained
System changes externally communicated
Organization structure documented
View 3 more Internal security procedures controls
Subprocessors
View all
Google, Inc.
•
Infrastructure/Crash Reporting
USA
Google Cloud Platform ("GCP") provides infrastructure and storage of Customer Content, Personal Information, and hosts Mixpanel's Analytics platform. We also use GCP for crash reporting, DNS, and other infrastructure that supports the Application Services.
Amazon Web Services, Inc.
•
Supplemental Storage
USA
Amazon Web Services provides supplemental storage and backup storage for Mixpanel's Analytics platform, as well as disaster recovery storage that support our business continuity efforts.
Zendesk, Inc.
•
Customer Account Administration and Support
USA
Zendesk provides Mixpanel with customer account administration and support. Zendesk receives limited access to customer names, emails, and basic customer support information about servicing customer accounts. Zendesk does not process or gain access to Personal Information stored in or processed by Mixpanel as part of these services.
Atlassian Pty, Ltd.
•
Bug Tracking
USA
Atlassian provides products for bug tracking and remediation.
Updates
View all
Compliance
Announcing Our Latest Security and Privacy Milestones
Published August 5, 2025
We are excited to announce several major achievements that strengthen our security and privacy posture, demonstrating our ongoing commitment to protecting our customers' data. We have successfully completed our SOC 2 Type 2 audit and have updated our key ISO certifications.
New SOC 2 Type 2 Report
We have once again successfully completed our Service Organization Control (SOC) 2 Type 2 examination. The audit, conducted by the independent firm Baker Tilly US, LLP, covers the period from May 1, 2024, to April 30, 2025, and affirms that our security controls and practices meet the highest industry standards.
Transition to ISO/IEC 27001:2022
We have successfully transitioned our Information Security Management System (ISMS) from the ISO 27001:2013 standard to the latest ISO/IEC 27001:2022 standard. This update ensures our security framework aligns with the most current global best practices for managing information security.
Successful ISO/IEC 27701:2019 Surveillance Audit
Additionally, we have completed our annual surveillance audit for ISO/IEC 27701:2019, confirming our continued adherence to the standards for our Privacy Information Management System (PIMS). This reinforces our dedication to robust data privacy practices.
Access the Reports and Certificates
Your trust is our top priority. The latest SOC 2 Type 2 report, ISO 27001:2022 and ISO 27701:2019 certificates are now available for viewing in our trust center
General
Uploaded new version of our 2024 Pentest Report
Published July 14, 2025
Our pentest report now properly reflects the current state of the reported findings. A false positive medium-severity finding has been removed and the two remaining medium-severity findings accurately report as remediated.
No further revisions of this report shall be made. Our 2025 pentest engagement kicks off in August and a new report shall be posted early Fall.
General
Trust Center Migration to Vanta - Initial Phase Complete
Published March 21, 2025
We are pleased to announce the initial phase of our Trust Center migration to Vanta is now complete. This transition represents a significant step in enhancing our security and compliance program. All documents and resources previously available in our Panorays Security Passport (our previous security documentation repository) have been successfully migrated and are accessible here.
As we continue to refine and optimize our Vanta implementation, you may observe ongoing updates and improvements to the Trust Center. We are committed to providing you with comprehensive and up-to-date information regarding our security posture.
We are actively working to deliver a seamless and robust experience. Should you require any specific information or have any questions during this transition, please do not hesitate to contact us at grc@mixpanel.com. We appreciate your patience and understanding as we work to further elevate our trust and security standards.