Mimecast

Cybersecurity United Kingdom Website Reviewed Sept. 2, 2026

Email security, archiving, continuity and awareness training, widely used alongside Microsoft 365 in UK SMBs.

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001 Accredited third-party certification body Mimecast email security and archiving services Current
ISO 27018 Accredited third-party certification body Protection of PII in public cloud for Mimecast services Current
SOC 2 Type II Independent third-party auditor Mimecast services; report available to customers under NDA Current
Cyber Essentials Plus IASME on behalf of the NCSC Mimecast UK operations - verify the current certificate Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
SOC 2 Type 2
Full
GDPR 2016/679
Full
UK and EU data residency available; processor under its DPA
Cyber Essentials
Partial
Verify the current Cyber Essentials Plus certificate with Mimecast
ISO 22301:2019
Partial
Email continuity service supports customer business continuity objectives

Assess Mimecast in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.