Source
Message data, retention & security — found from sitemap — Mailgun
Checked for Mailgun on 1 Nov 2026
- Page
- https://www.mailgun.com/security/
- Checked
- 1 Nov 2026, 09:37 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:d89a37d48ac2c30b3e2fe57e4ee3bbc6bb287c032bc1c74e024f9c6688dc497f
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Provider Report an error
“Mailgun has built our services on top of GCP to provide you with the best security experience possible”
-
SOC 2 type ii Report an error
“Sinch Mailgun is SOC 2 Type II and ISO/IEC 27001 Certified, as well as GDPR compliant.”
-
ISO 27001 Report an error
“Sinch Mailgun is SOC 2 Type II and ISO/IEC 27001 Certified, as well as GDPR compliant.”
-
GDPR Report an error
“Sinch Mailgun is SOC 2 Type II and ISO/IEC 27001 Certified, as well as GDPR compliant.”
-
Datacenter certifications Report an error
“all providers are SOC 2 Type II and ISO 27001 certified.”
-
Employee training Report an error
“Through regular training on risk prevention and identification, employees are educated on risk factors to ensure they can keep Sinch Email and our customers’ data safe.”
-
2FA Report an error
“2-Factor Authentication (2FA)”
-
SAML Report an error
“SAML authentication”
-
Encryption at rest Report an error
“AES-256 encryption-at-rest for all customer data”
-
Encryption transit Report an error
“Encryption via TLS and HTTPS”
-
Account lockdown Report an error
“Account lockdown for suspected compromise”
-
Log retention Report an error
“Critical security-based log retention for 365 days”
-
Bug bounty Report an error
“Third-party bug bounty program”
-
Backups Report an error
“Daily account data back-ups with incremental/point-in-time encrypted recovery on all primary databases.”
-
Ids Report an error
“Intrusion detection systems (IDS) in place to detect unauthorized account access”
-
Least privilege Report an error
“Administrative access to Mailgun systems and services follows the principle of least privilege. Access to systems is based on job roles and responsibilities.”
-
Unique usernames Report an error
“Sinch Mailgun utilizes individually identifying usernames that are not permitted to be shared or reassigned to another person.”
-
Internal access controls Report an error
“VPN and multi-factor authentication being used to access internal support tools and product infrastructure.”
-
Patching Report an error
“Sinch Mailgun’s patch management process ensures that all of our systems go through a patch once at least a month.”
-
Vulnerability scanning Report an error
“Monitoring, alerting, and routine vulnerability scanning occurs to ensure that all product infrastructure runs smoothly after all patches.”
-
Expedited patching Report an error
“When necessary, Mailgun can patch infrastructure in an expedited manner in response to the disclosure of critical vulnerabilities.”
-
Privacy no selling Report an error
“we never share your private information with unauthorized third-parties or sell your email addresses.”
-
Abuse report Report an error
“the best way to inform us is to report it to abuse@mailgun.com.”
-
DPA available Report an error
“Report Spam Cookie Notice GDPR Compliance Acceptable Use Policy Terms of Service Privacy Policy DPA”
1 fact read from this page is not shown because it could not be confirmed on the page as captured.
Scores citing this record
- The Agency Lead Message data, retention & security
- The Data Protection Officer Message data, retention & security
- The Data Protection Officer European sovereignty
- The Shop Operator Message data, retention & security
- The Shop Operator European sovereignty
- The Platform Engineer Message data, retention & security
- The Platform Engineer European sovereignty
- The SaaS Developer Message data, retention & security
- The SaaS Developer European sovereignty
- The Skeptic Message data, retention & security
- The Skeptic European sovereignty