GDPR Compliance Statement
Trust is the foundation of our relationship with all our customers and users. We value the confidence you've put in us and take the responsibility of protecting your information seriously.
We are committed to the principles inherent in the GDPR, ensuring the security and protection of the personal information that we process and providing a compliant and consistent approach to data protection. In addition, we aim to ensure:
- transparency with regard to our use of data
- that any processing is fair, lawful and necessary for a specific purpose
- that data is accurate, kept up to date and removed when no longer necessary
- that data is kept safely and securely.
Processor or Controller
Simana is a Data Controller as we determine the purposes and means of processing the personal data. Read more about why Simana is a data controller.
Data Subject Rights
The GDPR grants individuals with eight rights related to their personal data including the rights to be forgotten, to object and to erasure. To make a data request, or enact any of your rights as a data subject, please contact us.
Third Party Processing & International Data Transfers
Simana uses certain trusted third parties (for example, providers of data centres, email services and IT services) to help us provide, improve, protect, and promote our services. We carry out strict due diligence to verify that any third parties comply with the GDPR.
In some instances, personal data may be transferred outside of the EU (or European Economic Area – EEA) for processing as part of our email and IT services. Our third party providers comply with the Standard Contractual Clauses (SCC), safeguarding the transfer and storage of any information.
The SCC refer to the Data Protection Directive 95/46/EC. They are the standard contractual clauses adopted by the European Commission for the transfer of personal data from data controllers in the EU to data processors in jurisdictions outside the European Economic Area (EEA) (Decision 2010/87/EU).
Sub-Processors
To support Simana in delivering its services, Simana may engage third party service providers to assist Simana with its data processing activities. When we work with these service providers in our capacity as a data processor, the third-party service provider is a Sub-processor of Simana.
Before engaging any Sub-processor, we perform due diligence, including security and legal analysis. We do not engage a Sub-processor unless our quality standards are met. Our Sub-processors are all subject to contract terms that enforce compliance with applicable data protection laws.
Our business needs may change from time to time. For example, we may deprecate a Sub-processor to consolidate and minimize our use of Sub-processors. Similarly, we may add a Sub-processor if we believe that doing so will enhance our ability to deliver our Services. We will periodically update this page to reflect additions and removals to our list of Sub-processors.
Below is a current list of Simana Sub-processors:
Third Party Sub-Processor |
Purpose | Sub-Processor location |
Amazon Web Services |
Hosting & Infrastructure | United States |
Appcues |
Product adoption and user onboarding platform | United States |
Hubspot |
Customer relationship management (CRM) tool | United States |
Slack |
Slack is a cloud-based team communication platform. Integrates with other Sub-Processors | United States |
Teams (Microsoft) |
Video and telephone communications | United States |
Trello |
Manage verification of new users and organisations | United States |
Zoom |
Video and telephone communications | United States |
Privacy Policy
This Compliance Statement provides an overview of our commitments to securing your personal data. More information is available in our Privacy Policy.
Contact
If you have any questions about the protection of personal data in Simana, please contact us.

Accelerate your improvement
Alias delectus sit magnam. Maxime doloremque sunt qui. Consectetur quod facere. Maxime delectus accusantium et aliquid maiores quasi.