Compliance

Mammoth is SOC 2 Type II and ISO 27001 certified and supports GDPR and HIPAA compliance. This page is for security and compliance reviewers. It covers what is certified and how the Activity Log supports your own audit and reporting obligations.

Certifications

Certification	Scope
SOC 2 Type II	Security controls attested by an independent audit
ISO 27001	Information security management system

To request security documentation, contact your account manager or support@mammoth.io.

GDPR

Customer data is stored in AWS Ireland (EU). Your organization is the data controller and Mammoth is the data processor.

Mammoth also handles GDPR deauthorization requests for third-party platform integrations (for example, Shopify) through webhooks when an end customer revokes consent.

HIPAA

Mammoth supports HIPAA compliance for healthcare customers. To discuss your requirements, contact your account manager or support@mammoth.io.

Audit trail for compliance reporting

The Activity Log records who did what and when across your workspace. See Audit Logs for how to filter and export it.