{"@context":"https://certreports.com/llms.txt","vendor":{"slug":"mixpanel","name":"Mixpanel","domain":"mixpanel.com","category":"Analytics","one_liner":"Mixpanel is event analytics for builders that need answers.","trust_center_url":"https://trust.mixpanel.com/","security_page_url":null,"url":"https://certreports.com/vendors/mixpanel/security","last_verified_at":"2026-09-17T00:00:00.000Z","claimed":false,"verified_profile":false},"attestations":[{"framework":"csa-star","framework_name":"CSA STAR","state":"verified_registry","state_label":"Verified","sentence":"Listed in the CSA STAR registry as of 17 Sep 2026.","kind":"self_assessment","status_text":"STAR Level 1 self-assessment (CAIQ)","issued_at":"2020-03-24","expires_at":null,"period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"csa_star","url":"https://certreports.com/vendors/mixpanel/csa-star","evidence":[{"source_type":"registry","source_name":"CSA STAR registry","url":"https://cloudsecurityalliance.org/star/registry/mixpanel-inc","fetched_at":"2026-09-17 15:44:42.254747+00","content_hash":"e7f124247f5399c92ba048620a83c0b6cca1f9a2f97419f32566e462a3b1bda7","wayback_url":null,"quote":"mixpanel, inc.: STAR Level 1 self-assessment (CAIQ)","confidence":1}]},{"framework":"dpf","framework_name":"EU-US Data Privacy Framework","state":"verified_registry","state_label":"Verified","sentence":"Listed in the Data Privacy Framework list as of 17 Sep 2026.","kind":"listing","status_text":"Active: EU-US Certification, UK Extension Certification, SW-US Certification","issued_at":"2016-11-07","expires_at":"2027-08-10","period_start":null,"period_end":null,"auditor":null,"impact_level":null,"as_of":"2026-09-17","under_review":false,"source":"dpf","url":"https://certreports.com/vendors/mixpanel/security","evidence":[{"source_type":"registry","source_name":"Data Privacy Framework list","url":"https://www.dataprivacyframework.gov/participant/7814","fetched_at":"2026-09-17 15:50:17.082016+00","content_hash":"2fe780a792338e452bf208498ff0e916198a3dca5e1e81bb9b7bac4cfd8e1c58","wayback_url":null,"quote":"Mixpanel, Inc.: Active: EU-US Certification, UK Extension Certification, SW-US Certification","confidence":1}]}],"brief":{"summary":"As of 17 Sep 2026, Mixpanel is listed in the CSA STAR registry with a Level 1 self-assessment (CAIQ) issued 24 Mar 2020. As of 17 Sep 2026, Mixpanel is also listed in the EU-US Data Privacy Framework registry as active, covering the EU-US Certification, the UK Extension Certification and the SW-US Certification. The EU-US Data Privacy Framework listing for Mixpanel, as of 17 Sep 2026, shows an issue date of 7 Nov 2016 and an expiry date of 10 Aug 2027. As of 17 Sep 2026, no public evidence was found for a SOC 2 report for Mixpanel. As of 17 Sep 2026, no public evidence was found for a FedRAMP authorization for Mixpanel.","bullets":["CSA STAR: listed in registry, Level 1 self-assessment (CAIQ), issued 24 Mar 2020 (as of 17 Sep 2026).","EU-US Data Privacy Framework: listed in registry, active (EU-US, UK Extension, SW-US Certifications), issued 7 Nov 2016, expires 10 Aug 2027 (as of 17 Sep 2026).","SOC 2 and FedRAMP: no public evidence found (as of 17 Sep 2026)."],"model":"claude-sonnet-5 (subscription)","generated_at":"2026-09-19 11:50:15.804489+00"},"legal_docs":[],"subprocessors":[],"disclaimer":"CertReports indexes public evidence. A missing framework means no public evidence was found at the last check, not that the vendor is non-compliant. SOC 2 is a report, not a certification; HIPAA has no certification.","generated_at":"2026-09-20T04:02:35.889Z"}