- © 2025 Mindtickle Inc. All rights reserved
- Privacy Policy
- CSR Policy
- Terms of Service
- Sitemap
- Do Not Sell or Share My Personal Information
- ESG Policy
Explore how Mindtickle prioritizes data privacy, compliance, and security to deliver a trusted and reliable platform for your business.
Standard for implementing and continually improving processes using Information Security Management System (ISMS)
Standard for protecting cloud environments with information security techniques addressing evolving threats and risks
Standard for safeguarding personal information in public clouds considering privacy principles and regulatory compliance
Standard for managing business disruptions and platform recovery through Business Continuity Management System (BCMS)
AICPA Service Organization Control Report on Security, Privacy, Availability, and Confidentiality based on Trust Service Principles
Executive summary of SOC 2 Report demonstrating control effectiveness and management assertion
Security, Trust and Assurance Registry (STAR) Level 1 Certified with Cloud Security Alliance for Cloud security and transparency
Standard for safeguarding personal data and ensuring compliance through Privacy Information Management System (PIMS)
EU General Data Protection Regulation (GDPR) for Data Protection and Privacy of EU Individuals and Export of PII
California Consumer Privacy Act (CCPA) for Data Privacy and Consumer Protection of California Residents
The Data Protection Act (DPA) 2018 is the United Kingdom’s (UK) implementation of the General Data Protection Regulation (GDPR)
EU Standard Contractual Clauses (SCCs) for lawful and secure transfer of PII from the EU to third countries under the GDPR
UK International Data Transfer Agreement (IDTA) for safeguarding PII transfers from UK to countries without an adequacy decision
Asia-Pacific Economic Cooperation Privacy Recognition for Processors (APEC PRP) framework for data protection in Asia-Pacific region
Standard for ensuring ethical, secure and transparent governance of AI through AI Management System (AIMS)
EU regulation for AI systems establishing risk-based framework mandating transparency, governance, and human oversight
US Health Insurance Portability and Accountability Act for Data Privacy and Security of Protected Health Information
US FDA Regulation for Controls on Computer Systems used in Electronic Records in support of GxP-regulated Activities
SEC Rule 17a-4 regulation by the U.S. Securities and Exchange Commission and mandated by FINRA for dealer-brokers
Aligned with the Standardized Information Gathering (SIG) questionnaire developed by Shared Assessments.
Vendor Security Alliance (VSA) led an industry-recognized security assessment to evaluate vendors’ security practices.
Higher Education Community Vendor Assessment Toolkit (HECVAT) for data protection in higher education institutions
Mindtickle is hosted on a highly secure Amazon Web Service (AWS) cloud infrastructure with best-in-class security processes and comprehensive compliance programs such as Cloud Security Alliance, SOC1, SOC2, ISO 27001, ISO 27017, ISO 27018, PCI DSS, FIPS, GxP, HIPAA and NIST.
Automatic data distribution across multiple availability zones across regions provides replication and scalability across the platform for low latency and accelerated delivery of content; and ensures preparedness towards responding to business continuity events and disasters.
Our infrastructure and platform are guarded with advanced Distributed Denial of Service (DDoS) protection for always-on detection and automatic in-line mitigations that provide protection against all known infrastructure attacks to minimize application downtime and latency.
Extensive security measures are installed for intelligent threat monitoring, ongoing intrusion detection, automated code scanning, periodic vulnerability assessments, and penetration testing, regular privacy reviews, and health monitoring through dashboards and alerting.
Customer information is protected using cryptographic security for data in transit using HTTPS through Transport Layer Security (TLS) protocol to safeguard from eavesdroppers and for data at rest with Advanced Encryption Standard (AES) to protect from unauthorized disclosure.
Stringent security controls are offered to customers to enable secure Single Sign-On (SSO) integration through SAML 2.0, setup account password complexity, configure email domain restrictions for platform access, and granular role-based access control.
To meet our contractual and regulatory compliance obligations toward security and customers’ data protection, we have implemented detailed controls through a security policy. Our security policy comprehensively covers all the areas of the security program and processes implemented at organizational, technical, and cloud infrastructure levels for data protection.
Mindtickle platform is designed to ensure privacy by default, allowing protection and control of customer and user personal data through powerful user data management functionalities, log pseudonymization, data subject rights, transparent data breach disclosures, and data retention policy.
In alignment with our commitment to protect the data our customers have entrusted to us, we are promoting a culture of responsible disclosure of vulnerabilities that affects the security and privacy of our platform and its users.
Mindtickle has reviewed the content player pages of the platform to provide accessibility features towards Americans with Disability Act (ADA) and Section 508. The platform follows some of the best industry practices around accessibility standards including Web Content Accessibility Guidelines (WCAG) and Web Accessibility Standards (WAS).
Mindtickle has its presence in all leading vendor cyber security assessment platforms to ensure hassle-free onboarding compliant with your third-party procurement process. We are available on SafeBase, SecurityScorecard, Whistic, CyberGRX, ThirdPartyTrust, Panorays, Conveyor, Openli, and ComplianceRank.
Mindtickle is certified for compliance with EU-U.S. and Swiss-U.S. Data Privacy Framework (DPF), along with its UK Extension, which were developed by U.S. Department of Commerce and the European Commission, UK Government, and Swiss Federal Administration.
Data Privacy Framework provides us with a reliable mechanism for personal data transfers to the United States from the European Union, United Kingdom, and Switzerland while ensuring data protection that is consistent with EU, UK, and Swiss law.
Our Data Privacy Framework compliance certification along with participation status, the purpose of data collection, and dispute resolution mechanism can be accessed here.
Industry-leading cloud infrastructure
Mindtickle is hosted on a highly secure Amazon Web Service (AWS) cloud infrastructure with best-in-class security processes and comprehensive compliance programs
Globally Distributed Infrastructure
Mindtickle’s automatic data distribution across multiple regions ensures scalability, low latency, and faster content delivery. It also supports business continuity and disaster recovery.
Advanced DDoS Protection
Mindtickle’s infrastructure is equipped with advanced DDoS protection, offering always-on detection and automatic mitigation to safeguard against infrastructure attacks, minimizing downtime and latency.
Industry-leading cloud infrastructure
Mindtickle is hosted on a highly secure Amazon Web Service (AWS) cloud infrastructure with best-in-class security processes and comprehensive compliance programs
Continuous Threat Monitoring
Mindtickle employs robust security measures, including intelligent threat monitoring, intrusion detection, automated code scanning, vulnerability assessments, penetration testing, privacy reviews, and health monitoring through dashboards and alerts.
Strongest-Grade Encryption
Mindtickle ensures customer data security with HTTPS and TLS for data in transit, and Advanced Encryption Standard (AES) for data at rest, protecting against unauthorized access and eavesdropping.
Vendor Assessment-Ready Profiles
Mindtickle is listed on leading cybersecurity assessment platforms like SecurityScorecard, Whistic, CyberGRX, ThirdPartyTrust, Panorays, Conveyor, Openli, and ComplianceRank, ensuring smooth and compliant onboarding for your third-party procurement process.
Security Policy
Mindtickle’s comprehensive security policy ensures compliance with contractual and regulatory obligations, implementing detailed controls across organizational, technical, and cloud infrastructure levels to protect customer data.
Responsible Vulnerability Disclosure
Mindtickle fosters a culture of responsible vulnerability disclosure, ensuring that any security or privacy issues affecting our platform are addressed promptly, protecting the data our customers trust with us.
Security Policy
Mindtickle’s comprehensive security policy ensures compliance with contractual and regulatory obligations, implementing detailed controls across organizational, technical, and cloud infrastructure levels to protect customer data.
Training, content, & insights revenue teams need to win over buyers and close more deals.