How Mynder protects data, governs access and handles security in practice — where data is processed, security governance, incident response and sub-processors.
Security at Mynder
"Mynder builds trust infrastructure. That means we must be open about how we protect data, govern access and handle security in practice."
This page describes the most important security principles in Mynder. We do not publish details that could in themselves weaken security.
Where data is processed
See the sub-processors page for details on where data is processed.
See sub-processors
Identity, access and customer isolation
Access is granted on the principle of least privilege and legitimate need.
There is logical separation between customers.
Partner access is limited to customers for which the partner has an active mandate or customer relationship.
Access across customers and portfolios is treated as a security deviation.
Integrations use separate customer contexts and access credentials where relevant.
Security by design
AI assistants do not get direct access to raw credentials or access keys. They use defined tools and interfaces, while the backend handles system calls.
Data minimisation: where metadata is sufficient, content is not retrieved.
Relevant actions are recorded in audit trails.
Access can be revoked when the need or authorisation ends.
Customer data is not used for our own incompatible purposes or to train general models.
Secure development and testing
We use technical controls, code review, dependency monitoring, logging and testing.
Relevant findings are prioritised by risk.
Security governance
Information security is a governance area for us, not just technical configuration.
Governing security policies
Risk assessment and mitigations
Access management and periodic reviews
Supplier and sub-processor management
Incident handling and learning
Secure development and change management
Continuous measurement and improvement
Incident response
Mynder has an active Incident Response Policy with defined severity levels, responsibilities and phases.
Detect
Classify
Contain
Investigate
Remediate
Learn
Sub-processors
Mynder uses selected sub-processors to deliver and operate the platform.
See Mynder's sub-processors
Found a possible security vulnerability?
Report security incidents and vulnerabilities to