Mixpanel
Connect Mixpanel to Safeguard: what it provides, how to set it up, and the frameworks it provides evidence for.
Connect Mixpanel to collect data export evidence with automated compliance tests, switched on per workspace.
| Category | Data Export |
| Connect with | API token |
| What a connection produces | Automated compliance tests |
| Mixpanel's guide | docs.mixpanel.com |
Connect with an API token
-
In Mixpanel:
- In Mixpanel, open Organization Settings and go to the Access Security tab.
- In the SCIM menu, generate a token and save it right away; you will see it only once.
Where to find the other values:
- Region (optional): Mixpanel's SSO/SCIM page lists only the base endpoint
https://mixpanel.com/api/app/scim/v2; regional endpoints were not documented there.
Mixpanel shows the secret only once, so copy it before you leave the page.
Mixpanel's public documentation does not cover every step.
"Only accounts with an Enterprise plan have access to SCIM at the moment." The SCIM endpoint only affects users whose email domain is in your verified claimed domains, so claim and verify your domain first. Not sourced: the exact button label for generating the token, the role required (an organization admin/owner is likely), and EU/India SCIM endpoints. A SCIM token can also create and change users; there is no read-only one.
Source: docs.mixpanel.com, checked 2026-10-07.
The permissions Safeguard needs:
SCIM token. A SCIM token can also create and change users, and Mixpanel has no read-only one. Safeguard only reads with it. Needs Mixpanel's Enterprise plan. -
On Compliance › Connectors, open Mixpanel, click Connect, choose API token and fill in:
Field What to enter SCIM token Required. Stored encrypted and never shown again. Region (optional) — -
Click Connect with token.
Frameworks
Safeguard's automated tests read Mixpanel and map to the controls below. When a test passes, the result is evidence toward each control it maps to, in every framework listed. It is evidence toward a control, not proof that the control is met on its own.
| Framework | Evidence | Controls | Tests |
|---|---|---|---|
| SOC2 | Automated tests | CC6.2, CC6.3 | 2 |
| ISO/IEC 27001 | Automated tests | A.5.16, A.5.18, A.6.5 | 2 |
| HIPAA Security Rule | Automated tests | 164.308(a)(3), 164.308(a)(4) | 2 |
| PCI DSS | Automated tests | 7.2.4, 8.2.5 | 2 |
| NIST CSF 2.0 | Automated tests | PR.AA-01, PR.AA-05 | 2 |
These tests are switched on per workspace by the Safeguard team.
Related
- Data Export connectors
- Compliance connectors: how connecting works, card statuses and multiple accounts
- Connector setup reference: every connector in one table
- Frameworks and connectors: how connectors provide evidence for frameworks