Trust Center

Transparency for our customers and their DPOs and procurement teams — legal documents, security practices, and platform commitments in one place.

  SimpleSecurity is currently in pre-launch. The operating Swedish company (aktiebolag) is under registration — org.nr [ORG-NR] will be inserted here once registration completes.

All customer data is hosted in the EU — platform data in AWS eu-north-1 (Stockholm, Sweden) and email at OVHcloud (France), with no transfers of personal data outside the EU/EEA. SimpleSecurity is built GDPR-first, and a signable Data Processing Agreement is available to every customer. Below you'll find our full set of legal documents, security disclosures, and platform commitments.

Legal documents

Data Processing Agreement

The GDPR Article 28 agreement governing how we process personal data on your behalf.

Version 1.2 · Updated 31 July 2026 View online · printable PDF

Technical & Organisational Measures

The security measures protecting your data, referenced as Annex 1 to the DPA.

Version 1.4 · Updated 2 September 2026 View online · printable PDF

Sub-processor List

Every third party that receives personal data on our behalf, referenced as Annex 2 to the DPA.

Version 1.2 · Updated 2 September 2026 View online · printable PDF

Data Retention & Deletion

How long each category of data is kept, which periods you can shorten yourself, and how deletion works on account closure.

Version 1.4 · Updated 31 July 2026 View online · printable PDF

Customer-Controlled Retention

Your administrators set retention per data category, switch off services entirely, and can place the whole organisation under legal hold — applied to data you already hold, not just new data.

In-product · User Management → Data Retention

Privacy Notice

How we process personal data for individuals using or represented on the platform.

Updated 15 August 2026

Terms of Service

The terms governing use of the SimpleSecurity platform.

Updated 24 July 2026

Security

Penetration Test Summary

An honest self-assessment by our own security engineers, operating from an external attacker's position: tenant isolation, authentication, encryption, and email security.

Version 1.0 · Assessed 23 August 2026 View online · printable PDF

Security Overview

How we protect infrastructure, data, and access across the platform.

Version 1.0 · Updated 24 July 2026 View online · printable PDF

Incident Response & Breach Notification

How we detect, respond to, and notify customers of security incidents.

Version 1.0 · Updated 24 July 2026 View online · printable PDF

GDPR Compliance Statement

Our posture and control mapping against ISO 27001, SOC 2, NIS2, and MSBFS 2020:6-8.

Version 1.0 · Updated 24 July 2026 View online · printable PDF

Responsible Disclosure

How to report a security vulnerability to us.

security@simplesecurity.se

Platform

Service Level Agreement

Our uptime commitment, service credits, and support response times for paid plans.

Version 1.0 · Updated 24 July 2026 View online · printable PDF

Status Page

Live platform availability.

Security Practices

An overview of the security controls built into the platform.

Questions?

For any security, privacy, or compliance question, contact us directly.

security@simplesecurity.se