This page answers the questions security and procurement teams ask most often when they review Mida.
Is Mida ISO 27001 certified?
Yes. We can send you our ISO 27001 certificate and Statement of Applicability. Contact our support team to request them.
Do you have a SOC 2 report?
No. We don't currently hold a SOC 2 Type I or SOC 2 Type II report.
Mida is hosted on Google Cloud Platform (GCP). GCP's certifications, including SOC 2 Type II, SOC 3, ISO 27001, ISO 27017 and ISO 27018, are named in the sub-processor list in our Data Processing Agreement.
Do you have a Data Processing Agreement (DPA)?
Yes. Our DPA is here: https://www.mida.so/data-processing-agreement-dpa
It covers:
The EU Standard Contractual Clauses (SCCs)
Our technical and organisational security measures
Our list of sub-processors, including Google Cloud Platform as our hosting provider
Do you have a document I can send to my security team?
Yes. Send them our DPA (link above) and our Privacy Policy: https://www.mida.so/privacy-policy
If they need our ISO 27001 certificate or our company registration documents, contact our support team and we will send them.
Is Mida GDPR compliant?
Yes. Mida is GDPR compliant. See our Privacy Policy and the General Data Protection Regulation (GDPR) article for details.
Where is my data hosted? Can I choose the region?
Mida is hosted on Google Cloud Platform. Accounts are hosted in the US or in the EU (Germany), and we can commit to your selected hosting region.
If your account is in the US region and you want to move it to the EU region, see the article "Account changes: transfer ownership, change login email, move data region".
Do you support SSO?
Yes. SAML SSO is available on our Enterprise plan. The Free and Paid plans do not include SSO.
Do you offer an SLA?
An SLA, with uptime and response times in writing, is included on our Enterprise plan. The Free and Paid plans do not include an SLA.
Will I get a dedicated account rep?
A dedicated team, including an account manager, is included on our Enterprise plan. The Free and Paid plans do not include a dedicated account rep. If you have questions about using or setting up Mida, you can book a call with our team here: https://cal.com/team/team-mida/setup-call
Can you fill in a W-9?
No. Mida is not incorporated in the US, so we don't have a W-9. Mida is operated by Equals One Ventures Sdn. Bhd., a company registered in Malaysia. For vendor setup we can send you a signed W-8BEN-E and our company registration details. Contact our support team to request them.
Related articles
Data Processing Agreement (DPA)
General Data Protection Regulation (GDPR)
Privacy Policy
How to Configure IP Address Privacy (IP Masking)