{
  "slug": "mimecast-advanced-email-security",
  "category": "spam-filters",
  "name": "Mimecast Advanced Email Security",
  "description": "Cloud email security service that filters inbound and outbound mail for spam, phishing, malware and impersonation. It runs as a gateway in front of the mail server or connects by API to Microsoft 365 and Google Workspace.",
  "website": "https://www.mimecast.com/products/email-security/",
  "license": null,
  "platforms": [
    "web"
  ],
  "jurisdiction": {
    "code": "GB",
    "name": "United Kingdom",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": true,
    "cloud_act": "agreement"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 28,
  "coverage": 100,
  "summary": "Mimecast Advanced Email Security scores 28 out of 100 (grade F) on the spam and virus filtering criteria. It meets 1 of 8 criteria: tells users about requests. It partly meets no ads or data sales, independent audit, TLS configuration and security headers. It does not meet open source, no trackers or telemetry and transparency report. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A- and Mozilla HTTP Observatory grade B.",
  "url": "https://privacyratings.com/spam-filters/mimecast-advanced-email-security/",
  "markdown": "https://privacyratings.com/spam-filters/mimecast-advanced-email-security/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.mimecast.com/legal/privacy-statement/",
      "note": "The website loads Google Tag Manager, and the privacy statement describes Google Analytics with remarketing that shows Mimecast ads on other sites."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.mimecast.com/legal/privacy-statement/",
      "note": "Paid business service with no ads, and Mimecast says it does not sell or rent personal data, but website cookies are used to target its own ads on third-party sites."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://trust.mimecast.com/",
      "note": "The trust center lists ISO/IEC 27001 certification and a SOC 2 Type 2 report, but no full audit report is published on the website."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "no",
      "evidence": "https://www.mimecast.com/legal/privacy-statement/",
      "note": "No transparency report or government request policy is published. The privacy statement only says data may be shared to cooperate with law enforcement, judicial orders and regulatory inquiries."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://media.mimecast.com/download/16a9a3ce928e11f1b67872bc9030a2d6",
      "note": "The service agreement requires reasonable prior written notice to the customer before confidential information is disclosed under a law or judicial or administrative order, where lawfully permitted."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=login.mimecast.com&hideResults=on",
      "note": "Grade A-"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=login.mimecast.com",
      "note": "Grade B (70/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    }
  },
  "tests": {
    "ssllabs": "A-",
    "observatory": "B",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Tag Manager",
        "host": "www.googletagmanager.com",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-03T10:04:52.996Z"
  },
  "last_modified": "2026-10-03T10:27:12Z"
}