Security / trust page (GDPR) — Mailgun

Cited by

Facts read from this source

• Role Report an error

  “Mailgun is considered a processor. We act on the instructions of the controller (you), which come in the form of API or SMTP requests.”

• Message body retention days Report an error

  “Mailgun stores the bodies of messages for up to seven days for both incoming and outgoing messages.”

• Message metadata retention days Report an error

  “The metadata of a message, which includes the sender, recipient(s), subject line, originating IP address and other routing data is indexed and maintained for 30 days.”

• Suppressions retention Report an error

  “We store suppressions until you remove them or your account has been deleted.”

• Suppressions backup retention days Report an error

  “Suppressions may be stored in a backup system for disaster recovery purposes for up to 30 days after removal.”

• Recipient data pseudonymization Report an error

  “Mailgun stores recipient email addresses activity information in a hashed (pseudonymization) format.”

• Data subject request engagement days Report an error

  “When we, as a processor, receive directly a request from a data subject, we will engage the respective customer within seven days to respond to the data subject request (unless otherwise required by law).”

• DPA available Report an error

  “To make your life easier, we have drafted a DPA that our customers can sign. Our DPA is designed to address the requirements of Article 28 of the GDPR.”

• EU model contractual clauses Report an error

  “We also have in place EU Model standard contractual clauses in our Data Processing Addendum, and in place with all our vendors to ensure any data transfers are done properly and securely.”

• Breach notification procedures Report an error

  “We have implemented or are working on new policies and procedures to be able to detect personal data breaches and notify our customers without undue delay to ensure they meet the breach notification requirements of the GDPR.”

• Record of processing activities Report an error

  “We created and maintain a record of our data processing activities.”

• Employee training Report an error

  “We carry out regular data protection training for our employees and staff.”

• Providers Report an error

  “We, at Mailgun, use cloud infrastructure providers like Amazon Web Services, Rackspace, Softlayer, and Google Cloud Platform to host Mailgun.”

• List available to customers Report an error

  “If you are one of our customers, we will provide you with an exhaustive list of the sub-processors we use.”

• Self service data requests Report an error

  “We have designed our platform with several self-service features that our customers can leverage to assist in reviewing the personal data stored on our platform to respond to data requests.”

• Message retrieval deletion features Report an error

  “Additionally, we offer features that prevent the retrieval of messages programmatically or allows the messages to be securely deleted after delivery.”

• Staff message access Report an error

  “Finally, our staff may access message bodies to assist customers in troubleshooting delivery issues or in response to a potential AUP violation. Employee access is routinely audited”

• Events API logs Report an error

  “This data is available in its entirety via our logs and Events API.”

• Page last updated Report an error

  “Last updated: 8/28/2020”

• Data retention automation Report an error

  “Where possible, we employ mechanisms that allow us to automatically remove data after it is no longer needed to offer our services.”

Scores citing this record

• The Agency Lead Message data, retention & security
• The Agency Lead European sovereignty
• The Data Protection Officer Message logs, events & webhooks
• The Data Protection Officer Message data, retention & security
• The Data Protection Officer European sovereignty
• The Shop Operator Message logs, events & webhooks
• The Shop Operator Message data, retention & security
• The Shop Operator European sovereignty
• The Platform Engineer Message logs, events & webhooks
• The Platform Engineer Message data, retention & security
• The Platform Engineer European sovereignty
• The SaaS Developer Message logs, events & webhooks
• The SaaS Developer Message data, retention & security
• The SaaS Developer European sovereignty
• The Skeptic Message logs, events & webhooks
• The Skeptic Message data, retention & security
• The Skeptic European sovereignty