// Trust & Security Report
Mention (owned by Agorapulse SAS)
Social listening and media monitoring platform that tracks mentions across 1 billion+ web and social media sources with real-time monitoring, sentiment analysis, competitive intelligence, and brand reputation management. Acquired by Agorapulse in April 2025.
Certifications held
1
Maturity
Enterprise
Trains on your data
Unknown
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on mention.com“Terms page states verbatim: 'If you, as a data controller, require Mention to agree to data protection requirements under Article 28, GDPR, or under UK data protection laws, Mention makes available a data processing addendum.' It also states 'under the GDPR, you have the right to request a copy of your personal data which are processed by Mention.' Data protection officer contact listed as gdpr@mention.com.”
> Show 8 unconfirmed / not-held certifications
source: mention.comMention references AWS SOC 2 certifications as infrastructure provider: 'Servers hosted on AWS...AWS maintains SOC 2/SSAE 16 compliance' (https://mention.com/en/terms-and-conditions/). Parent company Agorapulse holds SOC 2 Type II via Vanta, but scope coverage of Mention product post-acquisition (May 2025) is not explicitly stated. AWS certification is infrastructure-level, not Mention's own certification.
source: mention.comMention references AWS ISO 27001 certification as infrastructure provider. AWS maintains ISO 27001 compliance as hosting provider, but Mention does not hold independent ISO 27001 certification. No public evidence of Mention-level ISO 27001 certification found.
source: mention.comNo public evidence of HIPAA compliance or HIPAA BAA offering found on Mention website, privacy policy, or trust documentation.
source: mention.comNo public evidence of PCI DSS compliance for Mention product found. While AWS may be PCI-compliant as a host, Mention does not claim independent PCI DSS compliance.
source: mention.comNo public evidence of ISO 27017 certification for Mention found.
source: mention.comNo public evidence of ISO 27018 certification for Mention found.
source: mention.comNo public evidence of ISO 27701 certification for Mention found.
source: mention.comNo public evidence of ISO 42001 or other AI governance certifications found. Mention advertises 'AI tools' and sentiment analysis but does not claim AI governance certifications.
// Privacy & AI training
Trains on customer data
Not stated
Data processing agreement
Offered
Data region
EU (AWS, OVH, and Scaleway - all EU-based data centers)
Mention features sentiment analysis and AI tools prominently on homepage and product pages. However, no explicit statement found regarding whether Mention trains on user data, whether user monitoring data is used for model improvement, or whether customers have opt-out rights for AI training. This should be clarified in vendor conversation.
// Security controls
Encryption at Rest
Data encrypted using industry-standard encryption algorithms in database storage
mention.comSecurity Testing
Automated daily security testing and daily production updates with full traceability
mention.comCode Review
Code review process with all code reviewed by another person before deployment
mention.comBreach Notification
72-hour mandatory notification to French data authority (CNIL) on personal data breaches, with routine breach management procedures in place
mention.comAccess Control
Employee and consultant access to production data granted by granularity levels; individual password protection and encryption of all employee devices per IT policy
mention.com// Products & data scope
data: Monitors 1 billion+ sources across web, social media (30+ channels), and public data in real-time for up to 2 years of historical data
Primary product. Features: real-time monitoring, sentiment analysis, share of voice metrics, influence scoring, competitor tracking, market research, crisis management alerts, ready-to-use reporting templates. User data: brand mentions and conversations from public sources (not customer proprietary data).
data: Social media publishing and community engagement features - RETIRED January 30, 2026
Feature removed as part of post-acquisition consolidation. Users directed to Agorapulse for publishing and engagement capabilities.
// What to watch
- CERT SCOPE AMBIGUITY: Mention references AWS SOC 2 and ISO 27001 certifications on its terms page, but these are infrastructure provider (AWS) certifications, not Mention's own independent certifications. This creates potential for customer confusion about responsibility levels.
- POST-ACQUISITION UNCLEAR: Mention was acquired by Agorapulse in May 2025. While Agorapulse holds SOC 2 Type II (via Vanta), it is not explicitly stated whether this certification covers the Mention product. Scope documentation needed.
- AI TRAINING POLICY MISSING: Mention advertises 'AI tools' and sentiment analysis features prominently, but the privacy policy does not explicitly state whether Mention trains its ML models on user monitoring data, whether there is an opt-out, or how customer data is used for model improvement. This is a gap for AI-aware customers.
- RECEIVERSHIP HISTORY: Mention underwent court-ordered receivership prior to Agorapulse acquisition, indicating past financial distress. Product is now stable under Agorapulse ownership but this context is relevant for long-term viability assessment.
- PRODUCT CONSOLIDATION: Mention's Publish & Respond (engagement) features were retired January 30, 2026, with customers directed to Agorapulse instead. This signals ongoing consolidation and potential for further feature deprecation.
- DPO CONTACT: Data Protection Officer contact listed on Mention's terms page is gdpr@mention.com (Mention domain). Privacy documentation additionally references Agorapulse, consistent with post-acquisition integration.
- NO HIPAA/PCI: No evidence of HIPAA or PCI DSS compliance. Mention is not positioned for healthcare or payment card industry use cases.
// At a glance
Pricing model
SaaS subscription - free trial (14 days), paid plans starting $49/month with tiered features (basic, professional, agency, enterprise)
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Mention (owned by Agorapulse SAS)'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-07. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
mention.com