Mixpanel

Technology’s Special Publication 800-88 (“Guidelines for Media Sanitization”).Does Mixpanel keep customer information after termination?No. If a customer ends its relationship with Mixpanel, their data is purged from Mixpanel’s systems. Customers can use Mixpanel’s data export and data transfers tools to remove their data prior to its deletion.Third PartiesDoes Mixpanel subcontract any of its services?Mixpanel uses third-party vendors to provide the services, principally the Google Cloud Platform. Mixpanel uses other vendors to monitor the performance of the Application Services after they have been vetted and signed the appropriate contractual protections to handle customer data.How does Mixpanel select its subcontractors?Mixpanel has a vendor assessment policy that includes security team review of the vendor use case, their security posture, and their ability to access personal information. The legal team additionally requires privacy and security provisions in the contract where necessary to protect customer information.AuditsDoes Mixpanel have security certifications?Mixpanel maintains an active SOC 2 type II attestation as well as ISO 27001 and ISO 27701 certifications. Copies of these reports can be requested by emailing grc@mixpanel.com.Additionally, our Cloud Service Provider Google regularly undergoes independent verification of security, privacy, and compliance controls against the following standards: ISO/IEC 27001, ISO/IEC 27017, SOC 1, SOC 2, SOC 3, PCI DSS, HIPAA, CSA Star, FedRAMP and many others. Additional details are available at: Mixpanel conduct regular internal and external audits?We undergo an annual third-party security audit, annual penetration testing, and a source code audit of our production services. Additionally, we maintain a bug bounty program through HackerOne where security researchers are invited to submit vulnerabilities to Mixpanel throughout the year. We complement these assessments by performing regular, automated, vulnerability scans on our external and internal networks. Finally, security review is an integral part of our development lifecycle, incorporated into our design, implementation, and test processes.How are vulnerabilities submitted

Last UpdatedNovember 1, 2024Mixpanel Security QuestionnaireMixpanel’s Global Security Program, or the GSP, was built to safeguard our customers’ data. Information security plays a role in every aspect of Mixpanel’s services, and the Team has prepared this overview of our security practices to provide additional assurances and insights into how Mixpanel’s protects our customers’ data.Global Security ProgramDedicated Security TeamLed by the Head of Global Privacy and Security, Mixpanel’s Global Security Program is staffed with full-time, subject matter experts in both the United States, India and the European Union. The Program includes alumni from the Department of Defense, the Federal Reserve System, and Microsoft.Data Security and GovernanceHow does Mixpanel segment and separate data?All customer data is tagged with a project-specific token, and a customer must have access to the corresponding API key and secret in order to retrieve that data via API (access to the web UI is controlled via username and password). This provides logical separation between data belonging to multiple clients. Mixpanel is the sole tenant on our infrastructure. A customer’s data may reside on database systems which house data belonging to other customers, but our logical controls (token, key and secret) separates one client from another client’s data.Does Mixpanel support single sign-on and multifactor authentication?Our product supports single sign-on and provides authentication options through these providers. We also support multifactor authentication outside of single sign-on. Details on how to enable single sign-on are located at: and Password ManagementDoes Mixpanel encrypt customer data?When a user visits a website or application with Mixpanel instrumented, the details of their interactions are captured and sent to Mixpanel through API calls secured over HTTPS/HTTP, based on how Mixpanel is configured by the customer. All of our other APIs and websites use HTTPS exclusively. All data transferred over HTTPS is encrypted. Mixpanel uses NIST Suite

For customers participating in the India residency program, data is stored in the Google Cloud Platform’s asia-south1 (Mumbai) data center region.Data Retention and DeletionHow is customer data backed up?All client data is fully backed up on a daily basis to secondary data centers.Mixpanel utilizes the Google Cloud Platform for all services supporting the Mixpanel application, ensuring that:Data is written to multiple GCP zones and is available for restoration from the secondary zone in the event that data is corrupted or deleted in one zone.Persistent disk backups occur daily.Backups are stored for a two-week period and can be used to restore dataBackups occur on a rolling schedule across all disks in the project.The Business Continuity Plan is reviewed and disaster recovery drills are conducted annually.Can Mixpanel delete customer data?Mixpanel supports account holders’ ability to request the deletion or export of end user data.Requests can be submitted through either a form found in a Mixpanel project or through a personal data export and deletion API.Additional information can be found here: Mixpanel have the ability to sanitize computing resources of client data if a customer leaves Mixpanel?Mixpanel’s data destruction procedure involves three phases:Phase 1: Deletion Request. Mixpanel’s support or engineering team submits a deletion request command.Phase 2: Soft Deletion. The data marked for deletion is identified and logically deleted from the production environment, is rendered generally inaccessible but remains in a recoverable state. It remains in this state for 30 days.Phase 3: Hard Deletion. 30 days after the deletion request, the data identified is encrypted, the encryption key is deleted, and the data overwriting process begins. The overwriting process involves the logical and physical overwriting of data in Mixpanel’s active and backup environments. The overwriting process takes 90 days.The procedures set out above comply with the United States National Institute of Standards and

Dashboarding tool that allows users to track, measure, and analyze their data. Amplitude offers features such as customizable dashboards, reports, and integrations. Amplitude is a good option for nonprofits that need to track a lot of data and want to be able to customize their dashboards and reports.Integrations: Salesforce, Google Analytics, Segment, Mixpanel – Data & Marketing Integrations | Amplitude Price: Depends on usage, has a free option. About Company: Founded in 2012 as Sonalight, they were taken public in 2021 with a market cap of $7.1bn. Amplitude (company) – Wikipedia Good For:Nonprofits that need to track a lot of data those who want to customize their dashboards and reports Offers features such as customizable dashboards, reports, and integrationsMixpanelWebsite: What is it? Mixpanel is an analytics platform that offers a range of features, including data visualization, event tracking, and cohort analysis. Mixpanel is a good option for nonprofits that need to track detailed user interactions and need advanced features such as event tracking and cohort analysis.Integrations: Connects to all major data sources including Salesforce, MySQL, Postgres, Amazon Redshift, – Interactive Event Analytics From Your Data Lake. Price: Has a free level up to 100k tracked users. Mixpanel Pricing | A Plan for Every Product – Note: There is a special nonprofit pricing available but you need to contact them directly to get pricing information. About Company: Founded in 2009, based in San Francisco, Mixpanel’s most recent funding round happened in November 2021, raised a Series C round, a $200 million investment on a $1.05 bn valuation from Bain Capital Tech Opportunities.. Mixpanel – Wikipedia. Good For:Nonprofits that need to track detailed user interactionsNeed advanced features such as event tracking and cohort analysisBonus DashboardsDashThis – $39/month – pulls in social analytics/web Databox – free tier – pulls in social/web/biz dataCyfe – $19/month – pulls in social/web/other data Whatagraph – $299/month – pulls in ad data, social/web/biz metricsDashboard Terms to KnowWhen it comes to your nonprofit’s analytics, there are a lot of technical terms that get thrown around. It can be difficult to keep track of all of them, let alone understand what they mean. To help you out, we’ve compiled a list of some common Dashboard terms and their definitions.Business Intelligence (BI): Business intelligence is a process for transforming data into insights that can inform and guide business decisions.Key Performance Indicator (KPI): A key performance indicator is a metric that organizations use to track and measure progress towards their goals.API: An application programming interface (API) is a set of rules and protocols that developers can use to access data and functionality from an external system.Data Set: A data set is a collection of data that can be used for analysis.Dataset Filters:

A few weeks ago we introduced 12 new charting colors in Mixpanel, with some additional considerations for vision accessibility. In this post, I walk through our process for choosing these colors, and why it matters to your experience as a Mixpanel user. Let’s go!The colors we had in Mixpanel…existed, but that doesn’t necessarily make them good. But what makes colors objectively good? Objectively good for us meant expanding our palette, making it more accessible, and making the colors more flexible in more contexts.Why did we do this?The previous palette was limited to 6 colors.The existing palette had color blindness issues, particularly as it related to repeat colors.To increase access to people experiencing vision differences (such as color blindness).To increase accessibility across the board.To increase the number of segments visible at once without repeat colors.To increase the contrast between colors.To Increase the range of our palette.Okay, but from a product perspective, does this even matter?Yes! Segmentation is one of the most clear cut examples of where color as language is important. Color provides an identifying feature that becomes challenging for all kinds of visibility concerns, and without considering color thoroughly, we’d be ignoring the ability to understand valuable aspects of our product.But isn’t color subjective?Yes and no. When it comes to branding, it’s relatively easy for a skilled designer to create compelling logic to make a series of colors make sense together. However, when it comes to this color update specifically—we focused on the constraint of accessibility, flexibility, and identifiability in