Data processing agreement (dpa) — SimpleLocalize

Cited by

Facts read from this source

• DPA updated Report an error

  “Last updated at: October 15, 2026”

• Controller processor roles Report an error

  “the customer is the data controller and that SimpleLocalize.io is its data processor”

• Data ownership Report an error

  “you 100% own and control all of your translation data”

• No data sale Report an error

  “We don’t sell or rent your customer data to any third-parties.”

• Personal data types Report an error

  “Email addresses IP addresses social sign-up identifiers (GitHub, Google, Microsoft) Project metadata and activity logs”

• EU storage Report an error

  “All of your customer data is stored in the EU, and it never leaves the EU, except when the customer explicitly enables optional machine translation or AI features”

• Breach notification 48h Report an error

  “it shall without undue delay (not later than 48 hours after having become aware of it), notify customer by email”

• Objection termination Report an error

  “SimpleLocalize.io shall notify the controller when modifying the list of sub-processors as described in point 13. The controller is able to legitimately object and may terminate the agreement.”

• Change notice period Report an error

  “notify the controller of any intended changes to the list of sub-processors by email to the account owner and by publishing a notice on its publicly available Changelog at least 14 days prior to the changes taking effect”

• Audit rights Report an error

  “SimpleLocalize.io shall allow and contribute to audits or inspections conducted by the controller or a designated third-party auditor to verify compliance with this agreement and GDPR. Such audits shall be subject to: Prior written notice of at least 30 days.”

• Deletion 30 days Report an error

  “We will irrevocably remove all other information within 30 days of your request.”

• Account deletion email Report an error

  “You can choose to delete your account and delete your projects at any time by e-mailing us at contact@simplelocalize.io.”

• DPA acceptance Report an error

  “By using our product, you are agreeing to our terms of service, and you are automatically accepting our DPA and do not need to sign a separate document.”

• DPA shareable Report an error

  “Yes. The DPA is a publicly available document, and customers who wish to share it with their customers to confirm our security measures and other terms may feel free to do so.”

• MFA enforced Report an error

  “Multifactor authentication (MFA) is enforced for administrative and support accounts.”

• Aws EU Report an error

  “Data is hosted exclusively in secure EU-based data centers operated by certified cloud providers (AWS EU regions).”

• Datacenter certifications Report an error

  “Data centers are ISO 27001, SOC 1, and SOC 2 certified.”

• Backup daily encrypted Report an error

  “Encrypted backups are created daily and stored in geographically redundant EU locations.”

• Rpo rto Report an error

  “Recovery Point Objective (RPO): ≤72 hours; Recovery Time Objective (RTO): ≤48 hours.”

• Vulnerability scans quarterly Report an error

  “Automated vulnerability scans are performed at least quarterly.”

• Breach notification annex Report an error

  “In case of a personal data breach, SimpleLocalize.io will notify affected controllers without undue delay and within 48 hours of becoming aware of the breach.”

• Export available Report an error

  “Before deletion, the customer may export its data at any time using the export features of the service.”

• Backup deletion 180 days Report an error

  “all personal data is securely deleted from active systems within 30 days and from backups within 180 days.”

• Deletion standard Report an error

  “Secure deletion follows NIST SP 800-88 standards.”

• Infrastructure certifications Report an error

  “Hosting infrastructure complies with ISO 27001, ISO 27017, and SOC 2 Type II.”

• Owasp cis Report an error

  “Internal practices align with OWASP security principles and CIS Benchmarks.”

• Company Report an error

  “Copyright © 2026 Jakub Pomykała Software registered in Poland. All rights reserved.”

• Made in europe Report an error

  “Developed and maintained, adhering to the highest standards of data protection and privacy regulations, including GDPR.”

• Certification review Report an error

  “Sub-processor security certifications (e.g., ISO 27001, SOC 2) are reviewed periodically.”

• Assistance dpia Report an error

  “assist the Customer in ensuring compliance with the obligations pursuant to Articles 32 to 36 of the GDPR, including obligations related to data protection impact assessments (DPIA) and prior consultations with supervisory authorities.”

• Human access Report an error

  “We as humans can access your data to help you with support requests you make and to maintain and safeguard SimpleLocalize.io to ensure the security of your data and the service as a whole.”

• Changelog github Report an error

  “Detailed changelog of the document can be found on our GitHub repository.”

Scores citing this record

• The App Developer Confidentiality of translated content
• The App Developer Data export, portability & self-hosting
• The App Developer European sovereignty
• The Data Protection Officer Confidentiality of translated content
• The Data Protection Officer Data export, portability & self-hosting
• The Data Protection Officer European sovereignty
• The In-House Document Translator Confidentiality of translated content
• The In-House Document Translator Data export, portability & self-hosting
• The In-House Document Translator European sovereignty
• The E-Commerce Marketer Confidentiality of translated content
• The E-Commerce Marketer Data export, portability & self-hosting
• The E-Commerce Marketer European sovereignty
• The Localization Manager Confidentiality of translated content
• The Localization Manager Data export, portability & self-hosting
• The Localization Manager European sovereignty
• The Skeptic Confidentiality of translated content
• The Skeptic Data export, portability & self-hosting
• The Skeptic European sovereignty