Mailgun
Connect Mailgun to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Mailgun to collect communications platforms evidence with automated compliance tests, switched on per workspace.
| Category | Communications Platforms |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Mailgun's guide | documentation.mailgun.com |
Connect with an API token
-
In Mailgun:
- In the Mailgun dashboard, go to Account Settings and open the API keys page.
- Click Create key and fill in the form fields in the modal; where role selection is offered, choose the Admin role (the only role that can read the users on an account). Click the modal's Create Key button.
- Record the generated key secret right away; Mailgun shows it only once.
Mailgun shows the secret only once, so copy it before you leave the page.
Mailgun's public documentation does not cover every step.
Role-based API keys (Admin, Analyst, Developer, Support) are available only on Enterprise and certain Business plans; in Mailgun's permissions table only Admin has Read on 'Users on an account', so no narrower role lists users. Missing: where the account's US or EU region is shown (for the Region field) was not confirmed from a fetched page. Click path labels come from a summarized extraction.
Source: documentation.mailgun.com, checked 2026-10-07.
The permissions Safeguard needs:
list users. -
On Compliance › Connectors, open Mailgun, click Connect, choose API token and fill in:
Field What to enter API key Required. Stored encrypted and never shown again. Region (optional) — -
Click Connect with token.
Frameworks
Safeguard's automated tests read Mailgun and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.1, CC6.2, CC6.3 | 4 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.18, A.6.5, A.8.2, A.8.5 | 4 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.308(a)(4), 164.312(d) | 4 |
| PCI DSS | Automated tests | 7.2.2, 7.2.4, 8.2.5, 8.4.2 | 4 |
| NIST CSF 2.0 | Automated tests | PR.AA-01, PR.AA-03, PR.AA-05 | 4 |
These tests are switched on per workspace by the Safeguard team.
Related
- Communications Platforms connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks