Data Security
What is in place, stated plainly rather than impressively. Where a control belongs to a provider rather than to Upsimplify, this page says so.
Encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
Infrastructure
Hosted on SOC 2 Type II certified cloud infrastructure (AWS).
Access Controls
Administrative access is limited to the founder, with multi-factor authentication enforced on every provider account.
Personnel
Upsimplify LLC is currently a single-person company. One named individual is accountable for every system in the data path.
Incident Response
Report a suspected issue to security@upsimplify.net. Affected clients are notified within 24 hours of confirmation.
Provider Logging
Access logging is handled by the underlying providers (AWS, Supabase) under their standard retention.
Security Practices
All client data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Client workloads run in isolated environments on AWS, whose infrastructure maintains SOC 2 Type II and ISO 27001 certifications.
Access to those environments is limited to the founder, with multi-factor authentication enforced on every provider account.
Data Handling
- Isolation: Each client's data is logically isolated and never used to train models for other clients.
- Retention: Data is retained only as long as necessary and securely deleted upon request.
- Backup: Encrypted backups are managed by the underlying providers under their standard schedules.
- Transmission: All API communications use TLS 1.3 encryption.
Vendor Security
The processors in the data path are AWS (hosting), Supabase (lead storage), n8n (report generation and email delivery), Cal.com (booking) and Loom (video). AWS maintains SOC 2 Type II and ISO 27001 certifications; those are AWS's certifications, not Upsimplify's. Upsimplify LLC is not itself SOC 2 or ISO 27001 certified.
The full list, with each provider's purpose, is in the Privacy Policy.
Security Inquiries
For security questions, or to report a vulnerability, contact:
Upsimplify LLC