Snapshot 8114
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Trust Center Start your security review View & download sensitive information Ask for information Trust Center Data protection regulations in general are designed to protect the personal data of individuals and impose obligations on organizations that collect, process, and store such personal data. These obligations apply to both our customers and Mimecast. We take our obligations under these data protection regulations (such as GDPR, CCPA, POPIA and PIPEDA) governing the services we provide seriously. We are always reviewing our products and services and making enhancements to help support our customers’ data privacy compliance journey. We also commit ourselves to data protection through our Data Processing Addendum which is available to our customers. Scroll down this page for information cards including: Certification and Attestation reports (security packs) Data Processing Addendum AI Development Pledge Processing details Technical and Organizational Measures Sub-processors Accessibility Statement Privacy Statement We're here to help. Contact us at: certificationqueries@mimecast.com. Compliance ISO/IEC 27001:2022 ISO/IEC 27701:2019 ISO 22301:2019 ISO/IEC 42001:2023 ISO 14001:2015 Cyber Essentials Cyber Essentials Plus SOC 2 Type 2 HIPAA HITECH TISAX ENS Documents Featured Documents COMPLIANCEISO 14001:2015 COMPLIANCEISO 22301:2019 COMPLIANCEISO/IEC 27001:2022 COMPLIANCEISO/IEC 27701:2019 COMPLIANCEISO/IEC 42001:2023 COMPLIANCESOC 2 Type 2 Certification and Attestation Global - Common to All Regions Securing Your Data North America View more Access Control Overview Remote Access Identification and Authorisation View more Privacy (Compliance) Overview Authority to Process Consent and Privacy Notice View more Resilience Overview Planning, Policy and Procedures Alternate Storage View more Information Security Packs Global Australia Canada View more AI Development Mimecast’s Pledge Customer Data Usage in AI/ML Model Development AI/ML Model Development Process View more Legal Data Processing Addendum/Datenverarbeitungsvertrag/Addendum relatif au traitement des données Mimecast Intercompany Agreement Customer Regulatory Notices Data Processing Information / DPA Annexures Data Processing Details Technical and Organization Measures Sub-Processors Data Privacy Data Privacy Statement Data Subject Access Request Preference Center View more Cross Border Transfers Our Commitment Data Privacy Framework Statement Australia View more Accessibility Statement Our Approach Our Commitment Our Products Accessibility View more Mimecast Climate Disclosure Climate Strategy, Environmental Stewardship and Regulatory Alignment Compliance and Reporting Climate Impact – Transition and Physical Risks Trust Center Updates Adobe Campaign Classic Vulnerability Vulnerabilities Summary: Mimecast is not affected by the Adobe Campaign Classic vulnerability We are aware of a maximum-severity vulnerability recently disclosed in Adobe Campaign Classic. CVE-2026-48449 is an Incorrect Authorization vulnerability affecting Adobe Campaign Classic. It carries a maximum CVSS score of 10.0. Exploitation allows arbitrary code execution without requiring any user interaction. Mimecast does not use Adobe Campaign Classic anywhere in our environment. We can confirm that Mimecast and our customers are not affected by this vulnerability. We continue to monitor this threat and will update customers if our position changes. SonicWall SMA 1000 Vulnerability Chain Vulnerabilities Summary: Mimecast does not use SonicWall SMA 1000 appliances anywhere in our environment. We can confirm that Mimecast and our customers are not affected by this vulnerability. We are aware of the recently disclosed vulnerability chain affecting SonicWall SMA 1000 series appliances. The chain involves two flaws. CVE-2026-15409 carries a CVSS 10.0 score and allows an unauthenticated attacker to establish a WebSocket tunnel to internal services on the appliance. CVE-2026-15410 is a post-authentication code injection flaw with a CVSS score of 7.2. Chained together, these flaws let an attacker move from an unauthenticated request to root control of the appliance. We continue to monitor this threat and will update customers if our position changes. Cisco Secure Firewall Management Center (FMC) Vulnerabilities Mimecast does not run Cisco Secure Firewall Management Center in any part of our environment. These vulnerabilities do not affect our infrastructure or our services to customers. No action is required by customers. We will continue to monitor for any related developments and will update this notice if our position changes. Summary Cisco has disclosed active exploitation of two vulnerabilities in Secure Firewall Management Center (FMC) software: CVE-2026-20316. A static credential flaw. CVSS 5.3. Rated High by Cisco due to chaining risk. CVE-2026-20079. A critical authentication bypass. CVSS 10.0. Can allow root access. Both were flagged in Cisco's 29 July advisory update. CISA has added CVE-2026-20316 to its Known Exploited Vulnerabilities catalogue, with a remediation deadline of 1 August 2026 for federal agencies. Mimecast's AI Vulnerability Intelligence & Attack Surface Management General Mimecast actively monitors coordinated disclosure programs from leading AI developers, including Anthropic, as well as disclosures from multiple sources across the frontier AI ecosystem. We maintain a comprehensive Vulnerability and Attack Surface Management program that includes, but is not limited to, threat intelligence, industry-leading detection and assessment tools, a bug bounty and vulnerability disclosure program, and penetration testing and red team exercises — all augmented by AI tooling and best practices, and all integral to our Secure Software & Systems Development Lifecycle (SSDLC) program. Vulnerabilities are ranked by severity and exploitability and managed accordingly. This is part of our standard operating process and further strengthens — but does not alter — how we handle and report incidents.