How we protect your data
Infrastructure, access, and day-to-day controls that keep accounts and communications secure.
Secure infrastructure
Hosted on Amazon Web Services with SOC 2, ISO 27001, PCI Level 1, and FISMA-accredited infrastructure.
Credit card safety
Payments run through Stripe. Card data is collected, processed, and stored by Stripe for PCI compliance—not on SimplyNotified servers.
Vulnerability scanning
We routinely scan production infrastructure, applications, and networks for vulnerabilities and known threats.
Security training
All employees complete security training covering phishing, passwords, attachments, and other human-targeted risks.
Access control
Staff access requires multi-factor authentication. Customer data access is limited to people who need it for support.
Encryption
Data is protected in transit and at rest with modern encryption standards.
Certifications
Frameworks we’re aligning to—with clear status so you know what’s live vs in progress.
GDPR
In progress · Dec 2025
Data protection and subject rights for people in the EU and UK.
CCPA
In progress · Dec 2025
Privacy rights and consumer protection for California residents.
SOC 2
In progress · Dec 2025
Independent controls for security, availability, and confidentiality.
