Security

Data Protection

All client data you store in Simplio is encrypted at rest using AES-256 encryption. Data in transit is protected using TLS 1.3. Your data is stored in secure data centers with physical security controls, redundant power, and fire suppression.

Authentication

We use magic link authentication, which means you never have to create or remember a password. Each time you sign in, you receive a unique, time-limited link to your email. This approach eliminates common password-related vulnerabilities.

Access Control

We implement the principle of least privilege. Our team members only have access to the systems and data they need to do their jobs. All access is logged and audited.

Security Practices

We follow industry best practices:

• Regular security audits and penetration testing
• Automated daily backups with point-in-time recovery
• Strict access controls and role-based permissions
• Monitoring and alerting for suspicious activity
• Incident response procedures and regular drills
• Employee security training and background checks

Data Backups

We perform automated daily backups with 30-day retention. Point-in-time recovery is available in case of data issues. Backups are stored in a separate geographic region for disaster recovery.

Compliance

Our infrastructure providers maintain SOC 2 Type II, ISO 27001, and other industry certifications. We are committed to meeting the highest security standards.

Reporting Vulnerabilities

If you discover a security vulnerability, please report it to security@simplio.io. We appreciate responsible disclosure and will work with you to address any issues quickly.

Questions

Have security questions or need more details for your compliance requirements? Contact us at security@simplio.io.