TopicsSecurity and privacy
Security and privacy
Compliance, data storage, personal data, single sign-on, and accessibility.
- Is Mindstamp SOC 2 or ISO 27001 certified?Mindstamp has no SOC 2 report or ISO 27001 certification. Review the security controls, evidence limits and procurement options available to your team.
- Does Mindstamp support GDPR requirements?Review Mindstamp privacy roles, viewer data controls, processing terms, international transfers and the steps for a privacy request.
- Is Mindstamp HIPAA compliant?Mindstamp is not HIPAA compliant. Do not collect protected health information in Mindstamp videos. Healthcare teams can still train staff without PHI.
- Where is Mindstamp data stored?Core application processing is in the US. Default Bunny video storage has global replicas; Enterprise media settings do not localise the full service.
- What personal data does Mindstamp collect from viewers?Mindstamp records viewer identifiers, progress and interactions. IP and location report fields can be disabled for an organisation on request.
- Does Mindstamp offer single sign-on (SSO)?SSO and SAML are available on Enterprise as custom work scoped for each account. Self-service plans sign in with email and password or Google.
- Do you complete security reviews and legal documents?Enterprise buyers can bring security questionnaires, vendor onboarding, NDA and MSA needs. Self-service plans do not include document review.
- What accessibility features does Mindstamp offer?Captions, transcripts, keyboard support, screen reader labels, read-aloud questions and translated player text. How to build an accessible video.