Is Mindstamp SOC 2 or ISO 27001 certified?

1. Read the current Privacy Policy and the security resources listed below.
2. Email [email protected] for the evidence your review needs.
3. For a questionnaire or custom contract terms, bring your requirements to the Enterprise team.

• Account users sign in with email and password or Google.
• Administrator MFA is confirmed for AWS, Heroku, Cloudflare and GitHub accounts; this does not claim a universal customer MFA setting.
• The inspected production Heroku Postgres database uses encryption at rest; inspected S3 buckets have AES-256 default encryption.
• API tokens can be revoked. OAuth connections use the scopes granted by the customer.
• The organisation AI switch governs Mindstamp MCP. Eligible trial transcription and other feature-specific AI paths are separate.

A provider certification does not certify Mindstamp. A written procedure does not prove a completed exercise. Ask for the current evidence relevant to your requirements.

• Security overview
• AI governance
• Provider directory