Is this your company? Buyers are checking Simplifi Holdings Inc here. Claim simpli.fi free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Simplifi Holdings Inc
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Simplifi Holdings Inc is SOC 2 Type II compliant.
About
Simpli.fi is the leading advertising success platform; a DSP that empowers advertisers to maximize relevance with results delivered across CTV, video, display, and audio. As a mature and trusted company, we pride ourselves in providing technology that mirrors our company's core values and takes data privacy and security very seriously.
Compliance & infrastructure
Hosting
AWSGCP
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Subprocessors
16- GGitHub · Version control
- GGoogle Cloud Platform · Cloud provider
- AAmazon Web Services · Cloud provider
- VVanta · Security
- DDatadog · Cloud monitoring
- OOkta · Identity provider
- JFrog - Artifactory
- CConfluence · Document management
- PPagerDuty · Cloud monitoring
- PPerimeter 81
- ZZendesk · Customer support
- SSlack · Collaboration
Show all 16 subprocessorsShow fewer
- DDocuSign · Document management
- BBitwarden · Password management
- JJira · Collaboration
- MMiro · Collaboration
Compliance leadership
The person who leads Simplifi Holdings Inc's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Simplifi Holdings Inc's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
5/11 details · 45%SOC2C shows the verified essentials. 6 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Simplifi Holdings Inc SOC 2 compliant?
Simplifi Holdings Inc is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Simplifi Holdings Inc SOC 2 Type I or Type II?
Simplifi Holdings Inc is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Simplifi Holdings Inc's SOC 2 for a vendor risk assessment?
Yes. Simplifi Holdings Inc's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Simplifi Holdings Inc penetration tested?
Simplifi Holdings Inc hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Simplifi Holdings Inc secure?
Security isn't a single yes/no, but Simplifi Holdings Inc is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Simplifi Holdings Inc have a bug bounty or vulnerability disclosure program?
Simplifi Holdings Inc hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@simpli.fi or via a /security page (Simplifi Holdings Inc lists a security contact).
Who are Simplifi Holdings Inc's subprocessors?
Simplifi Holdings Inc lists 16 subprocessors on its trust center, including GitHub, Google Cloud Platform, Amazon Web Services, Vanta, Datadog. Buyers use this for fourth-party risk review.
Where does Simplifi Holdings Inc host or store data?
Simplifi Holdings Inc hosts on AWS, GCP, and handles Customer personally identifiable information, Employee personally identifiable information, Credit card information, Personal health information. Data residency details are on its trust center.
Where is Simplifi Holdings Inc's trust center or security page?
Simplifi Holdings Inc's trust center is at https://trust.simpli.fi. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Do you comply with privacy regulations and frameworks?
Simpli.fi demonstrates strong compliance with privacy regulations and frameworks. The company has developed a comprehensive Data Protection Program and associated policies to ensure adherence to applicable data protection laws, including GDPR, CCPA, CPRA, and others relevant to its operations. Simpli.fi’s policies are designed to protect personally identifiable information (PII) and ensure compliance with legal, contractual, and industry requirements.
Do you process PII?
Simplifi may use personal and online identifiers (such as email address, postal address, or unique online identifiers, internet or other electronic network activity information (such as browsing history, search history, interactions with a website, email, application, or advertisement), geolocation information (including precise location derived from your device), or inferences reflecting potential interests or characteristics, including race/ethnicity, health and wellness interests, and political interests.
Do you encrypt data?
Yes. Data is encrypted in transit using HTTPS/TLS1.2 and AES256. Personal Information is encrypted in transit and device and cookie IDs are hashed throughout the system. Some stored data is encrypted with 128-bit hashing, but not all data is encrypted at rest.
How do you protect data confidentiality, integrity and availability?
We protect your data with a comprehensive set of physical, technical, and administrative safeguards. We use strong encryption (AES256) and strict access controls to ensure confidentiality. Your data's integrity is maintained through continuous monitoring and real-time data replication across secure data centers. For availability, we use redundant servers and have a disaster recovery plan in place. Additionally, all our systems are protected, regularly audited, and our personnel are trained on data security.
Where are you servers located?
We utilize GCP as well as hosted servers in San Jose, Dallas, District of Columbia, Singapore, Netherlands.
What is your brand safety policy? What brand safety measurements do you have in place?
Simpli.fi utilizes bot lists from the IAB (Internet Advertising Bureau) and OTA (Online Trust Alliance). We also have a bot detection integration with Pixelate which provides user agent strings in real-time. We are integrated with RiskIQ for malware detection, as well as standard exchange level malware filtering. Our platform also works with industry leading measurability vendors like Moat and IAS to judge site quality, viewability and brand safety. Finally, we analyze our own data, both manually and via automated processes, for patterns to determine fraudulent traffic sources and bot net locations and notifies the proper exchanges.
What is your policy for fraudulent inventory? How do you reconcile with us fraudulent inventory over your defined threshold?
To date we have not had any fraud or malware events that have eclipsed our materiality threshold for revenue/impressions/clicks for any given advertiser, client, or individual campaign. We are open to discussing the application of a third party ad-fraud monitoring solution and are open to approach any issues of fraud detection with necessary reconciliation.
How do you typically partner with advertising agencies on data privacy matters?
Simpli.fi partners with agencies on data privacy primarily through its Data Protection Addendum, ensuring compliance with regulations like the CCPA, GDPR, and other applicable privacy laws. Simpli.fi requires agencies to ensure their advertisers meet strict obligations, including transparent privacy policies and consent for Interest-Based Advertising. Simpli.fi processes data as a processor, uses Standard Contractual Clauses for secure data transfers overseas, and engages vetted subprocessors.
What is Simpli.fi’s process for handling a data breach or privacy incident?
Simpli.fi maintains a formal Incident Response Plan. This includes a dedicated process to identify, record, and report privacy incidents, including required notifications to external authorities and affected clients as mandated by law.
How does Simpli.fi ensure platform stability during high-traffic periods?
Simpli.fi maintains sufficient redundancy capacity across its environment to ensure that services are not impacted during peak usage or in multi-tenancy environments.
Does Simpli.fi process or store personal data across national borders?
No. Based on current security controls, personal information is not accessed, disclosed, processed, or retained by third parties across national borders.
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public