Trust Center
Committed to your trust.
mxHERO maintains an operational environment built to meet and exceed our security, availability, confidentiality and privacy commitments, and keeps extending its security and privacy credentials.
SOC 2 Type II
Independently audited controls.
mxHERO is SOC 2 Type II certified by Dansa D’Arata Soucia. The report describes mxHERO’s security and organizational controls against the AICPA Trust Services criteria for security, availability, processing integrity, confidentiality and privacy.
A copy of the SOC 2 report is available on request. Contact your account team.
Service architecture
Built like a router, not a repository.
mxHERO serves most clients (13,000+ domains and more than a million active users) from its Amazon AWS cluster, run by a small team with decades of enterprise and telco operations experience.
The service is a gateway: email is processed in transit for integration with cloud storage, not retained. Processing normally takes under 30 seconds, after which local temporary copies are deleted. All temporary storage uses encrypted file systems, so data is encrypted at rest at all times.
Service monitoring
Watched around the clock, by overlapping systems.
Continuous internal and external monitoring with automated self-correction keeps availability above 99.9% per month and enables proactive defense, 24×7.
Statuspage
Live, on-demand service status for customers at status.mxhero.com. Trust is built on transparency.
Zabbix
Enterprise real-time monitoring of metrics across mxHERO’s servers, virtual machines and network devices.
AWS CloudWatch
Metrics, logs and alarms across AWS resources, with automatic reaction to changes in operational health.
Detectify
Automated security testing for the OWASP Top 10, CORS, S3 and DNS misconfigurations, powered by findings from ethical hackers.
Intrusion detection
Network and system monitoring for malicious activity or policy violations, reported and collected centrally.
Certifications and compliance
Privacy and regulatory commitments.
EU-U.S. Data Privacy Framework
mxHERO complies with the EU-U.S. Data Privacy Framework, the UK Extension and the Swiss-U.S. Data Privacy Framework, and has certified its adherence to the U.S. Department of Commerce. See the Privacy Policy and dataprivacyframework.gov.
HIPAA
mxHERO does not store ePHI, but has mapped its control framework to HIPAA security requirements and signs Business Associate Agreements on request.
FERPA
mxHERO does not store education records. It maintains a comprehensive security and privacy program that supports FERPA’s objectives for institutions routing records through the platform.
BBB accredited
mxHERO meets Better Business Bureau accreditation standards, including a commitment to resolve consumer complaints in good faith.
Awards and recognition
Recognized for email security and partnership.
ASTORS Homeland Security Award
With Canon USA, mxHERO won the ASTORS for Best Email Security Solution in 2019, 2020 and 2021. 2021 winners
Box Solution Partner of the Year
Named Box Solution Partner of the Year in 2025, after being Box Elite Partner of the Year in 2016. Announcement
See mxHERO on your own email and cloud storage.
A 30-minute walkthrough with our team, tailored to your mail system, storage platform and AI tools.