Built for organisations thattake trust seriously.

Cyber Essentials Plus

Independently verified UK cyber security

SimpleVote Ltd is certified to Cyber Essentials and Cyber Essentials Plus (issued 24 June 2026). The UK government-backed scheme assesses firewalls, secure configuration, access control, malware protection, and patching.

What you can rely on

• ✓Cyber Essentials and Cyber Essentials Plus certified by IASME
• ✓Verify our certificate on the Blockmark registry at any time

Cloud infrastructure

Built on independently audited providers

SimpleVote runs on cloud platforms that publish scoped assurance reports and certifications. Those provider controls do not certify SIMPLEVOTE LTD. We publish our subprocessors, TOMs and DPA for due diligence.

What you can rely on

• ✓Provider SOC 2 reports may be available for their scoped services
• ✓Provider ISO/IEC 27001 certification under a shared responsibility model
• ✓Documented subprocessors, retention rules, and a standard DPA for organisers

Data protection

Privacy by design for member elections

Primary database storage is in London. Transactional email is sent from Ireland. Edge delivery, support and recipient mail systems may process data elsewhere under transfer safeguards.

What you can rely on

• ✓Primary database region: London; transactional email region: Ireland
• ✓Scheduled removal of voter names and emails 30 days after an election closes
• ✓UK GDPR-aligned processing with data minimisation and purpose limitation
• ✓Registered with the UK ICO (reference ZC162594)

Data protection

Encryption by default

Voters and election managers can trust that data is protected in storage and in transit.

What you can rely on

• ✓Encryption at rest (AES-256) for database records and backups
• ✓Encryption in transit (HTTPS/TLS) for every connection to SimpleVote
• ✓Provider-managed edge protection against common denial-of-service attacks

Payments

Card data stays with your payment provider

When you pay for larger tiers, card details are handled by a certified payment provider. SimpleVote never stores card numbers.

What you can rely on

• ✓PCI DSS Level 1 payment processing via a certified provider (e.g. Stripe)
• ✓SimpleVote only receives payment confirmations, not card data