Data & Privacy
How Simple handles your data, where it's stored, what we share and what we don't, and how we comply with GDPR and other privacy requirements.
6 questions
We treat your data with the same care a family office expects from any trusted advisor. Personal data is encrypted at rest and in transit. We never sell or share your data with third parties for marketing purposes. Access is role-based and audited. Our data handling policies are available on request.
Simple's infrastructure is hosted on secure, SOC 2–compliant cloud providers. Data is stored in regions appropriate to your jurisdiction. European clients' data remains in EU-based data centres. We can provide detailed infrastructure documentation on request.
Start by deciding where your data may go, because it is often unclear what happens to files uploaded to tools like ChatGPT. Powerful open-source models can now run on an office's own infrastructure. Bear in mind that AI-first workplace suites from Google and Microsoft already have access to email and documents.
Yes. Simple complies with GDPR and other applicable data protection regulations. We maintain a data processing agreement (DPA) for all clients, honour data subject access requests, and implement privacy by design across our platform and tools.
No. We do not sell, rent, or share your personal data with third parties for marketing or commercial purposes. Data may be processed by infrastructure providers (hosting, email) under strict data processing agreements, but is never exposed to advertisers, data brokers, or unrelated services.
Yes. You can request complete deletion of your account and associated data at any time. We honour deletion requests within 30 days, consistent with GDPR requirements. Some data may be retained where legally required (e.g. billing records), but personal data is fully removed.