Is mixpanel GDPR compliant?

Yes. Mixpanel is committed to complying with GDPR, and enabling our customers to comply with GDPR. Mixpanel has an ongoing commitment to providing leading data protection to our customers.

How does SaaS become GDPR compliant?

GDPR checklist for SaaS companies

1. Appoint an internal Data Protection Officer (DPO)
2. Create a detailed cookie policy.
3. Update the content and language of your privacy policy.
4. Update your cookie consent banner.
5. Create a record of data processing flows.
6. Inquire whether your third-party vendors are compliant or not.

Is mixpanel a CRM?

Because innovation can’t happen with a one-size-fits-all approach, Mixpanel has partnered with Segment and over a hundred other companies to support the declaration that Customer Relationship Management (CRM) systems are no longer enough for the digital era.

Is segment GDPR compliant?

In keeping with our ongoing commitment to privacy and security, Segment updated its practices to be GDPR compliant before the May 25, 2018, enforcement date. As the central record for your customer data, we are also committed to making it easier for you to comply with the GDPR.

Where is mixpanel data stored?

Mixpanel persistently stores customer data in one of its two data centers. For customers not participating in EU residency, data is stored in the United States on the Google Cloud Platform in the US-Central 1 region (Iowa, United States).

Is a SaaS provider a data processor?

Where a SaaS supplier does not have any purpose of its own for processing the personal data and they only act on a SaaS customer’s instructions, they are a data processor – even if the SaaS supplier make some technical decisions about how to process the personal data.

Does GDPR apply to customer data?

GDPR has a big effect on how businesses collect, store and secure personal customer data. This means that GDPR impacts marketing, it changes sales prospecting and it requires change in customer service departments as all personal data needs to be handled in a more professional manner.

Is segment SOC 2 compliant?

Their Security program is broadly aligned with our own (we maintain our own ISO 27001 certification and a SOC 2 Type 2 attestation).

Is mixpanel secure?

Mixpanel application data is secured in transit using TLS, and encrypted at rest in Mixpanel’s proprietary analytics database format. The Mixpanel application logically separates user data, and access to your data is protected by strong authentication and authorization controls.

How will the GDPR affect your SaaS business?

Under the GDPR, SaaS suppliers face direct obligations relating to data processing activities. They will need to ensure that their product agreements with customers comply with the upcoming data regulations. Failure to do so could result in customers, their customer’s customers, and local data protection authorities imposing breaches against them.

What does the GDPR mean for your personal data?

At Sanity.io, we’re big fans of the GDPR. Personal data has historically been used and shared indiscriminately, and stored indefinitely “just in case”. The GDPR encourages businesses to be more aware of the data they collect and what they do with it, and gives individuals much more control over what happens to their data.

Do you need a data protection officer for your SaaS business?

Since personal data processing is a core activity for many SaaS businesses, you need to appoint a Data Protection Officer (DPO) tasked with making sure all personal data is handled properly, and register the DPO with the local data protection authorities.

How can you ensure your business is GDPR compliant?

If you employ third-party processors (e.g. a cloud provider or email service), you must make sure they process the data in a manner that is compatible with your terms and the GDPR – likewise, as a processor you should provide your customers (the controllers) with terms and tools which allow them to be GDPR compliant. That’s pretty much it.