Snapshot 243564
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Trust Center Data protection regulations in general are designed to protect the personal data of individuals and impose obligations on organizations that collect, process, and store such personal data. These obligations apply to both our customers and Mimecast. We take our obligations under these data protection regulations (such as GDPR, CCPA, POPIA and PIPEDA) governing the services we provide seriously. We are always reviewing our products and services and making enhancements to help support our customers’ data privacy compliance journey. We also commit ourselves to data protection through our Data Processing Addendum which is available to our customers. Scroll down this page for information cards including: Certification and Attestation reports (security packs) Data Processing Addendum AI Development Pledge Processing details Technical and Organizational Measures Sub-processors Accessibility Statement Privacy Statement We're here to help. Contact us at: certificationqueries@mimecast.com. Compliance ISO/IEC 27001:2022 ISO/IEC 27701:2019 ISO 22301:2019 ISO/IEC 42001:2023 ISO 14001:2015 Cyber Essentials Cyber Essentials Plus SOC 2 Type 2 HIPAA HITECH TISAX ENS RD311/2022 HIGH Documents Featured Documents COMPLIANCEISO 14001:2015 COMPLIANCEISO 22301:2019 COMPLIANCEISO/IEC 27001:2022 COMPLIANCEISO/IEC 27701:2019 COMPLIANCEISO/IEC 42001:2023 COMPLIANCESOC 2 Type 2 Certification and Attestation Global - Common to All Regions Securing Your Data North America View more Access Control Overview Remote Access Identification and Authorisation View more Privacy (Compliance) Overview Authority to Process Consent and Privacy Notice View more Resilience Overview Planning, Policy and Procedures Alternate Storage View more Information Security Packs Global Australia Canada View more AI Development Mimecast’s Pledge Principles Customer Data Usage in AI/ML Model Development View more Legal Data Processing Addendum/Datenverarbeitungsvertrag/Addendum relatif au traitement des données Mimecast Intercompany Agreement Customer Regulatory Notices Data Processing Information / DPA Annexures Data Processing Details Technical and Organizational Measures Sub-Processors Data Privacy Data Privacy Statement Data Subject Access Request Preference Center View more Cross Border Transfers Our Commitment Data Privacy Framework Statement Australia View more Accessibility Statement Our Approach Our Commitment Our Products Accessibility View more Mimecast Climate Disclosure Climate Strategy, Environmental Stewardship and Regulatory Alignment Compliance and Reporting Climate Impact – Transition and Physical Risks Trust Center Updates Customer Advisory: Critical PHP Vulnerabilities (CVE-2026-109618 and CVE-2026-109619) Vulnerabilities Summary On 21 October 2026, the PHP project released emergency security updates for two critical vulnerabilities, CVE-2026-109618 and CVE-2026-109619. Both are rated 9.2 (Critical) on CVSS v4 and could allow an unauthenticated attacker to execute code remotely with the privileges of the web worker. PHP has reported that working exploits were developed during its research, and it considers Apache mod_php installations the highest risk. Fixes are available in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. On 23 October 2026, the PHP project released details regarding a new vulnerability classified as CVE-2026-115560. Our position Mimecast has reviewed its product portfolio for exposure to these three vulnerabilities. Our review has confirmed that no Mimecast products or services are currently affected and no action is required from customers.