Mailchimp (Intuit)

Communications United States Website Reviewed Sept. 2, 2026

Intuit-owned email marketing and automation platform: campaigns, audiences, landing pages and transactional email via Mandrill.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
SOC 2 Type II Independent third-party auditor Mailchimp platform; report available to customers on request — — Current
ISO/IEC 27001 Accredited third-party certification body Intuit information security management system - confirm whether Mailchimp is named in scope — — Current

Compliance Frameworks

SOC 2 Type 2
Full
GDPR 2016/679
Full
Mailchimp acts as processor under its DPA; SCCs and UK addendum available
ISO/IEC 27001:2022
Partial
Verify that the Intuit certificate explicitly covers Mailchimp

Assess Mailchimp (Intuit) in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register