Mimecast
London-registered e-mail security vendor whose Incydr product tracks data exfiltration by employees and AI agents
Quick Overview
| Company | Mimecast Services Limited |
|---|---|
| Category | Data Loss Prevention Software |
| Headquarters | London, United Kingdom |
| Founded | Not stated |
| EU Presence | Yes - United Kingdom (registered office in London); local entities in Germany, the Netherlands and France |
| Data Location | Data residency options (see vendor) |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | No |
| Main Features | Exfiltration visibility, MIP tag and AI content inspection, adaptive controls, departing employee scenarios, shadow AI and agent tracking, integrations with HCM, EDR/XDR and IAM |
| Pricing | Tailored plans, quote on request |
| Best For | Security teams that care about insider risk and shadow AI more than rule-based blocking |
| Replaces | Forcepoint DLP, Symantec DLP, Code42-style insider risk tools |
Detailed Review
Incydr is Mimecast's data protection product. It focuses on seeing and scoring data movement by people and AI agents, not on writing content rules first.
The privacy statement names Mimecast Services Limited, registered in England and Wales with an office in London, and lists local entities in Germany, the Netherlands and France.
Visibility first
Incydr claims to show risk across e-mail, endpoint, cloud, browser and agent activity from day one, with no tagging and no policies to configure. It can use MIP tags and AI content inspection to detect PII, PCI and custom data risks.
Adaptive controls
Responses range from in-the-moment education to allow-with-justification and targeted blocking. Scenarios include departing employees, unsanctioned MCP connections and shadow AI tools.
Lightweight agent
The vendor says the agent uses less than 1% of CPU and the browser extension only watches for risky data movement.
Limitations to Consider
The page is about insider risk and exfiltration scoring, so it is not a classic content-rule DLP with fine-grained policy writing. Plans and prices are by quote. The contract documents are PDFs that could not be read, so the contracting entity by region is unconfirmed, and the page also mentions FedRAMP authorisation, which points to a strong US customer base. Performance and ROI figures are vendor claims. For rule-based endpoint DLP compare Safetica or Sophos.
Who Should Use Mimecast
Security teams in European organisations that want exfiltration visibility and shadow AI tracking with limited policy writing.
Pros and Cons
Pros
- Covers e-mail, endpoint, cloud, browser and agents
- No policies needed to start
- Graduated responses from education to blocking
- Data residency options mentioned
- UK-registered operating company
Cons
- Not a rule-based content DLP
- Quote-only pricing
- Contract entity by region unconfirmed
- Efficiency figures are vendor claims
Alternatives to Mimecast
Other European data loss prevention software worth comparing before you decide:
Safetica
Czech Republic · Data loss prevention and insider risk in one console
Acronis
Switzerland · Behaviour-based DLP added to a backup and security platform
Darktrace
United Kingdom · Label-free outbound email DLP that reads sending context
Matrix42
Germany · Endpoint Data Protection with device control and encryption
See all European data loss prevention software or compare them directly against Forcepoint DLP on our alternatives page.
Frequently Asked Questions
The vendor says no tagging and no policies are required to start, because it scores risk from day one.
Yes. The page describes shadow AI discovery and an Agent Risk Center that classifies AI agent activity.
The privacy statement lists Mimecast Germany GmbH, Mimecast Netherlands B.V. and Mimecast France SARL beside Mimecast Services Limited in London.