Security & compliance

Protected from program setup to every mentoring session

Your organization’s trust and data privacy are at the heart of everything we build. Mentorgain follows strict global data protection standards and builds security into every layer of our platform.

Request security pack →View our DPA →
Secure data flow
Organization
Your People & Data
↔
Mentorgain
Secure Platform
& Controls
↔
Mentors & Mentees
Meaningful Connections
People
Process
Technology
SOC 2 Type II
GDPR Compliant
Data Encryption
Tenant-Level Controls
Penetration Tested
Our security architecture

Security at every layer

Mentorgain combines people, process and technology controls to help protect your mentoring program data throughout its lifecycle.

01

Identity & Access

Ensure the right people have the right access.

  • Role-based access controls
  • Secure authentication
  • Access limited to authorized users
02

Application Controls

Built with security best practices from the ground up.

  • Secure development lifecycle
  • Input validation and application safeguards
  • Regular security reviews
03

Data Protection

Your data is protected in transit and at rest.

  • Data encryption
  • Tenant-level data separation
  • Strict access controls
04

Monitoring & Testing

We continuously assess and improve.

  • Regular penetration testing
  • Ongoing vulnerability management
  • Continuous security improvements
Evidence, not vague promises

Compliance you can verify

Give your security, legal and procurement teams a clear starting point for their review.

Independent assurance

SOC 2 Type II

Mentorgain’s controls have been independently evaluated against recognized trust-services criteria.

Request SOC 2 documentation →
Organization controls
Active
Authentication
Configured
Access controls
Managed
Calendar access
Optional
Communications
Custom
Configurable by design

Your organization stays in control

Mentorgain gives program teams practical settings for the way their organization works—without exposing participants to unnecessary complexity.

  • Authentication controls for intentional platform access.
  • Calendar access configured around your program’s needs.
  • Communication preferences aligned to participant experience.
  • Organization-level configuration for tenant-specific requirements.
Procurement-ready

Start your review with the right documents

Privacy Policy
How Mentorgain handles personal data
→
Data Protection Addendum
Processing commitments for customers
→
Terms of Service
The terms governing platform use
→
Security documentation
Request materials for your review
→
Security FAQ

Clear answers for your review

Start here, then bring us the questions unique to your organization.

Is Mentorgain SOC 2 Type II compliant?

Yes. Mentorgain has completed a SOC 2 Type II examination. The report is available to qualified prospects and customers upon request, subject to appropriate confidentiality requirements.

How does Mentorgain support GDPR obligations?

Mentorgain maintains privacy and data-processing practices designed to support organizational responsibilities under GDPR. Review the DPA or contact the team for details relevant to your deployment.

Can our procurement team review a DPA?

Yes. Mentorgain’s Data Protection Addendum is available online and can be reviewed as part of your procurement process.

Does the platform undergo security testing?

The platform undergoes penetration testing and ongoing security review. Detailed evidence can be requested during a security assessment.

How do we request security documentation?

Use the request button or email support@mentorgain.com. The team will share the materials appropriate to your review.

Ready for your security review

Bring your security questions.
We’ll bring clear answers.

Talk to our team →