Our Approach

Security at SimpleDisco

Last Updated: January 6, 2025

At SimpleDisco, we take security seriously. We know that you trust us with your data, and we work hard to make sure it's secure. Here's an overview of our security practices and policies.

  • Secure by Default. SimpleDisco offers built-in security for all your data, including encryption, simple access & share settings, and secure data storage.
  • Organizational Security. Our team is small, but mighty, and our size allows us to maintain a high level of security and privacy for our customers, and strong commitment to compliance. Where possible, we turn on security features like encryption and two-factor authentication.
  • Subprocessors (our vendors). We build our software in a secure way, and we only use vendors who share our commitment to security and privacy. Read more below.
  • Contact Us. If you have any questions about this security information, or want to disclose a potential vulnerability on our platform, please chat with us below.

Subprocessors

We build our software in a secure way, and we only use vendors who share our commitment to security and privacy. Here are the subprocessors we use to help us provide our services:

  • Microsoft We use Microsoft Azure for various AI features in SimpleDisco, such as receipt scanning and categorization. We may also use Microsoft 365 office software, like Outlook and Excel, when communicating with you and processing your data. The code that we write to build SimpleDisco is stored on Github, a Microsoft platform.Examples of other businesses using this vendor: Heineken, PWC, AT&TSecurity at Microsoft
  • Vercel We use Vercel to host our website and services. Network traffic and data that flow through Vercel are encrypted in transit.Examples of other businesses using this vendor: Meta, Volvo, EbaySecurity at Vercel
  • Supabase We use the Supabase database service to store and manage our data. Supabase is a cloud-based database service that provides high availability, scalability, and security.Examples of other businesses using this vendor: PWC, Mozilla, GithubSecurity at Supabase
  • Stripe We use Stripe to process payments and manage billing for our customers. Stripe is a secure payment platform that is certified to PCI Service Provider Level 1, the most stringent level of certification available in the payments industry.Examples of other businesses using this vendor: Amazon, Lyft, InstacartSecurity at Stripe
  • Clerk We use Clerk to manage user authentication and authorization. Clerk is a secure user management platform that provides features like passwordless login, multi-factor authentication, and user roles and permissions.Examples of other businesses using this vendor: Grafbase, Basehub, HoneyLoveSecurity at Clerk
  • inngest We use inngest to more easily build complex features like receipt data extraction and workflow automation.Examples of other businesses using this vendor: Tripadvisor, Soundcloud, ResendSecurity at inngest
  • OpenAI We use OpenAI to provide AI-powered features in SimpleDisco, such as natural language processing and image recognition.Examples of other businesses using this vendor: Salesforce, Microsoft, Match GroupSecurity at OpenAI