Mimecast

SafeBaseVerified May 2026

Mimecast Compliance & Certifications

SOC 2 Type IIISO 27001ISO 27701ISO 42001HIPAAGDPRCCPACSA STARNISTStateRAMP

Frequently Asked Questions

Does Mimecast have SOC 2 Type II?

Yes. Mimecast holds SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001, HIPAA, GDPR, CCPA, CSA STAR, NIST, StateRAMP certifications. You can view their trust center at trust.mimecast.com for full security and compliance documentation.

Where can I find Mimecast's security documentation?

Mimecast publishes their trust center on SafeBase at trust.mimecast.com. It includes security policies, compliance certifications (SOC 2 Type II, ISO 27001, ISO 27701, ISO 42001, HIPAA, GDPR, CCPA, CSA STAR, NIST, StateRAMP), and other documentation.

Does Mimecast have ISO 27001 certification?

Yes, Mimecast is ISO 27001 certified. This international standard confirms they have implemented a comprehensive information security management system (ISMS).

Is Mimecast HIPAA compliant?

Yes, Mimecast is HIPAA compliant and can support healthcare organizations that handle protected health information (PHI).