Code42: what changed

Code42: the page https://trust.mimecast.com/ changed since our last read.

Code42: EU data residency stated is now recorded as not measured.

Code42: Public API documented as yes (verified). A first finding of ours, not a change at the vendor. Corrected on 2026-09-08: the value returned to the earlier form; two of our own readers write it differently, and this was not a change at the vendor.

Code42: Public API is no longer documented as yes; that value was withdrawn and is now recorded as not measured. This describes our measurement, not a change at the vendor. Corrected on 2026-09-02: the value returned to the earlier form; two of our own readers write it differently, and this was not a change at the vendor.

Code42: FedRAMP authorisation documented as yes (verified). A first finding of ours, not a change at the vendor. Corrected on 2026-09-02: the value returned to the earlier form; two of our own readers write it differently, and this was not a change at the vendor.

Code42: Mobile app (iOS or Android) is now recorded as not measured.

Code42: GDPR compliance stated is now recorded as not measured.

Code42: FedRAMP authorisation is now recorded as not measured.

Code42: Audit log is now recorded as not measured.

Code42: Uptime commitment is now recorded as not measured.

Code42: SCIM user provisioning is now recorded as not measured.

Code42: SOC 2 Type II documented (verified). This is a finding of ours, not necessarily a new certification. Corrected on 2026-09-08: the value returned to the earlier form; two of our own readers write it differently, and this was not a change at the vendor.

Code42: ISO/IEC 27001 documented (verified). This is a finding of ours, not necessarily a new certification. Corrected on 2026-09-08: the value returned to the earlier form; two of our own readers write it differently, and this was not a change at the vendor.

Code42: HIPAA compliance stated documented (verified). This is a finding of ours, not necessarily a new certification. Corrected on 2026-09-08: the value returned to the earlier form; two of our own readers write it differently, and this was not a change at the vendor.

Code42: PCI DSS stated is now recorded as not measured.

Code42: Small businesses named as an audience documented (verified).

Code42: Enterprises named as an audience documented (verified).

Code42: SOC 2 Type II is now recorded as not measured.

Code42: ISO/IEC 27001 is now recorded as not measured.

Code42: Single sign-on is now recorded as not measured.

Code42: HIPAA compliance stated is now recorded as not measured.

Code42: Manufacturing named as a market is now recorded as not measured.

Code42: Healthcare named as a market is now recorded as not measured.

Code42: Financial services named as a market is now recorded as not measured.

Code42: Retail or e-commerce named as a market is now recorded as not measured.

Code42: Public sector named as a market is now recorded as not measured.

Code42: Education named as a market is now recorded as not measured.

Code42: Energy or utilities named as a market is now recorded as not measured.

Code42: Logistics or supply chain named as a market is now recorded as not measured.

Code42: Remote or hybrid teams named as an audience is now recorded as not measured.

Code42: Students named as an audience is now recorded as not measured.

Code42: Gaming named as a use is now recorded as not measured.

Code42: Creators named as an audience is now recorded as not measured.

Code42: Freelancers named as an audience is now recorded as not measured.

Code42: Families named as an audience is now recorded as not measured.