--- title: "Simple Poll security review: ISO 27001, data, scopes" url: "https://simplepoll.rocks/buying/security-review/" description: "Everything a security reviewer needs to approve Simple Poll for Slack: ISO 27001, what data it can see, encryption, hosting, GDPR and questionnaires." --- # Simple Poll security review For: IT and security reviewers This page collects what a security or IT reviewer needs to approve Simple Poll in one place. Where a source page exists, it's linked so you can cite it in your review. The short version: Simple Poll is ISO 27001 certified and sees only the polls and votes your team creates. ## At a glance - **Certification:** ISO 27001. The certificate is linked from the [security page](https://simplepoll.rocks/security/). - **Data access in Slack:** the polls and votes your team creates. No channel history, no files, no DMs. - **Hosting:** Amazon Web Services, in the United States. - **Encryption:** in transit (TLS on every connection) and at rest. - **Sign-in:** the dashboard uses Slack single sign-on. There are no Simple Poll passwords. - **Privacy:** a UK company registered with the Information Commissioner's Office, and GDPR compliant. See [GDPR](https://simplepoll.rocks/gdpr/) and the [privacy policy](https://simplepoll.rocks/privacy-policy/). - **Testing:** regular external penetration tests and a public bug bounty on HackerOne. - **Payments:** handled by Stripe, which is PCI compliant. ## Slack permissions Simple Poll requests the scopes a poll app needs and explains each one on the [scopes page](https://simplepoll.rocks/scopes/). In short: the `/poll` and `/simplepoll` commands, posting polls and messages, joining public channels where someone uses it, reading member names so named polls can show voters, and reading channel membership so it knows where it has been added. It doesn't read message history. ## Documents you can get - The ISO 27001 certificate and the security overview, on the [security page](https://simplepoll.rocks/security/). - The list of [sub-processors](https://simplepoll.rocks/sub-processors/), with what each one provides and where. - The [privacy policy](https://simplepoll.rocks/privacy-policy/) and [terms of service](https://simplepoll.rocks/terms/). - A DPA, an MSA and completed security questionnaires, on the Enterprise plan. ## Sending a questionnaire Send security questions to security@simplepoll.rocks. Completed security reviews and questionnaires are part of the Enterprise plan, so if your process needs one, contact sales@simplepoll.rocks at the same time to set up [Enterprise](https://simplepoll.rocks/buying/enterprise-grid/). If your workspace requires app approval, the admin steps are in [how to review a Slack app request](https://simplepoll.rocks/guides/how-to-review-a-slack-app-request/). ## FAQ ### Can Simple Poll read our Slack messages? No. It sees the polls and votes your team creates, not channel history, files or DMs. ### Where is our data stored? Simple Poll is hosted on Amazon Web Services in the United States. Personal information is stored and processed in the United States and the United Kingdom, or where its partners and providers have facilities, as the [privacy policy](https://simplepoll.rocks/privacy-policy/) explains. The [sub-processors](https://simplepoll.rocks/sub-processors/) page lists every provider and where each one operates. ### Is there a DPA? Yes, on the Enterprise plan, along with an MSA and completed security questionnaires. ### Do people need a Simple Poll password? No. The dashboard signs in with Slack single sign-on, and everything else happens inside Slack. ## Related - [How to review and approve a Slack app request](https://simplepoll.rocks/guides/how-to-review-a-slack-app-request/): By default, any member of a Slack workspace can install apps. Turning on app approval means members request apps and a Workspace Owner or an app manager approves or restricts each one. The steps below follow Slack's own help centre; the checks are what a careful reviewer looks at before saying yes. - [Simple Poll for Slack Enterprise Grid](https://simplepoll.rocks/buying/enterprise-grid/): Simple Poll's Enterprise plan is for large organizations, and for any company on Slack Enterprise Grid. It covers the whole Grid org with every Premium feature, and adds the things large companies need to buy and roll out software: a security review, contracts, invoice billing and a person to help. - [What is Simple Poll? A guide for whoever approves it](https://simplepoll.rocks/buying/what-is-simple-poll/): Simple Poll is a Slack app for polls and surveys. People type /poll in a channel, write a question and options, and the team votes with a click. It's the #1 polls and surveys app in the Slack Marketplace, used by 945,000+ teams with 130 million+ votes cast. - [How to pay for Simple Poll: card, invoice or purchase order](https://simplepoll.rocks/buying/how-to-pay/): There are two ways to pay for Simple Poll. Premium is self-serve: someone in the workspace upgrades with a card. Enterprise is billed annually by invoice, against a purchase order if you need one. --- Simple Poll is the #1 polls and surveys app for Slack. Add it to Slack: https://simplepoll.rocks/. Pricing: https://simplepoll.rocks/pricing/.