What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
Regulatory evidence
Mixpanel is event analytics for builders that need answers.
For each regulation, how many of the requirements it places on your vendors Mixpanel’s public evidence reaches. Open one for every item with its date and source.
What the vendor lists, typed; public items can be read now, the rest are available on request.
17 documents listed on Mixpanel’s trust centre
trust.mixpanel.comAnswers the vendor publishes to questions buyers ask, quoted with the link to where it says so.
Where data is hosted or processed
Where are Mixpanel’s data centers?
“Mixpanel persistently stores customer data in one of its three data centers. For customers not participating in India or EU residency, data is stored in the United States on the Google Cloud Platform in the US-Central 1 region (Iowa, United States). For customers participating in the EU residency program, data is stored in the Google Cloud Platform’s europe-west4 (Eemshaven, Netherlands) data center region. For cu...”
Regions named: EU, US, Netherlands, Indiaas of 30 Sep 2026Source
Encryption
Does Mixpanel encrypt customer data?
“When a user visits a website or application with Mixpanel instrumented, the details of their interactions are captured and sent to Mixpanel through API calls secured over HTTPS/HTTP, based on how Mixpanel is configured by the customer. All of our other APIs and websites use HTTPS exclusively. All data transferred over HTTPS is encrypted. Mixpanel uses NIST Suite B compliant cipher suites to secure data in transit...”
as of 30 Sep 2026Source
Encryption
Are customer passwords encrypted?
“Customer passwords are hashed using the PBKDF2 algorithm with a SHA256 hash, a password stretching mechanism recommended by NIST.”
as of 30 Sep 2026Source
Incident and breach notification
When and how will I be notified of a suspected breach?
“In keeping with GDPR requirements, Mixpanel will notify customers within 72 hours of a suspected breach via e-mail.”
as of 30 Sep 2026Source
Data retention and deletion
Can Mixpanel delete customer data?
“Mixpanel supports account holders’ ability to request the deletion or export of end user data. Requests can be submitted through either a form found in a Mixpanel project or through a personal data export and deletion API. Additional information can be found here: https://help.mixpanel.com/hc/en-us/articles/360000881023”
as of 30 Sep 2026Source
Solomon Amos · 2 Nov 2026 · 10 min read
Solomon Amos · 26 Sep 2026 · 8 min read
This maps third-party obligations to the vendor evidence that may support them. It is not legal advice and never a statement that a vendor or its customers comply; confirm scope and sufficiency with your counsel or auditor. “No public evidence” means nothing public was found at the last check. Citations link to the official text.