Security
Where your data sits, and who can reach it.
Simply is built for agencies working with confidential candidate and client data every day. That is why security, privacy and compliance sit in every layer of the platform. From encryption to EU hosting, your ATS and CRM data stays safe, private and yours.
Privacy and compliance
Your data stays yours
Recruitment data is confidential by nature. Simply is GDPR compliant, and the processing agreement sets out what we do with your data and what we do not.
ISO 27001 certified
We work to an internationally recognised standard, with a documented set of controls, policies and procedures. We share the certificate on request.
No training on your data
Simply never uses your candidate or client data to train models. Your data stays yours.
EU-hosted infrastructure
Your data is stored and processed inside the EU. That covers AI processing too: we run all of it on European infrastructure.
Security and encryption
Enterprise-grade security
Personal data is encrypted with JSON Web Encryption and transport runs over TLS. Those measures are in the processing agreement, so you are owed them rather than told about them.
Controlled access
Only approved users can reach your workspace. Permissions, authentication and access control run through four layers.
Every change recorded
Every write goes into an append-only audit log in the same transaction. Lines are added and never removed, not even by an administrator.
Integrations and API
API keys are issued per workspace and revoked per environment. Outgoing webhooks are HMAC-signed, so your receiver can establish that a message came from us.
Data hosted in the Netherlands
A Dutch platform
Your data stays yours
ISO 27001 certified
The documents
The contract text governs over this page. Where they disagree, the contract wins and this page has a bug.
- Data processing agreement (DPA)Part B of the terms. What we may and may not do with your data.
- Security measuresAnnex B2. Encryption at rest and in transit, access control, tenant separation, backups and audit records, as contract text.
- Sub-processorsAnnex B3. Per party: what for, which data, where it is stored and processed, and the transfer basis.
- Terms and conditionsThe contract itself: subscription terms, the processing agreement with its three annexes, and support and availability.
- Privacy statementWhat we record about visitors and users, and why.
- Cookie policyWhat gets set in your browser.
Ready for your security review.
Whether you are a growing agency or an established firm, Simply provides the security foundation to run recruitment on AI-native infrastructure. We share the ISO 27001 certificate and completed security questionnaires on request.
Get in touchPrefer to email us directly? Use [email protected]
Have your security reviewer sit in.
A demo with your IT or compliance colleague in the room answers more than a page can. Or start free and look at the product first.