Commitment to security
Information security and customer data protection are of utmost importance to MaxMind and our employees. We understand our customers trust us with their information, and we are committed to maintaining a safe, secure, and trusted global approach to IP intelligence and fraud protection.
For a copy of MaxMind's SOC 3 Report, click here to download it, or if you have any questions about our security practices, please contact privacy@maxmind.com.
Security
MaxMind maintains an information security management system based on the ISO 27001 standard, and has completed a SOC 2 Type II audit. We regularly review, test, and update our security controls and their implementation, and conduct internal security training to keep ourselves sharp. As a globally connected company, we work with security professionals to guide our digital security procedures across our operations.
We host our services with Google Cloud Platform, meaning your data is protected in these highly secure data centers.
Access to our customers data is restricted based on the principle of least privilege, and we use multi-factor authentication technologies to further protect it.
Privacy
You decide what data to send to our services. Please contact MaxMind Customer Support or your account manager to inquire about what data you can share with us, and the best ways to do so, to help us better detect fraud for you.
For personal data transferred from the European Union, the UK, and Switzerland to third countries that do not ensure an adequate level of data protection, we will provide appropriate safeguards, such as through the use of Standard Contractual Clauses. In addition, MaxMind has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF). We provide additional information about how we use and protect your data in our privacy policy. You may read about how we handle data privacy, including laws like the GDPR, and how to make data privacy requests on our knowledge base.
View our European Union and our United Kingdom compliance certificates.
Availability
We have designed our services to be highly available, using redundant data centers located across the globe. Our service availability is supported by 24/7 monitoring, backups, and business continuity and incident response planning. Code changes go through review and quality assurance tests before going to production.