At a glance
- Certification: ISO 27001. The certificate is linked from the security page.
- Data access in Slack: the polls and votes your team creates. No channel history, no files, no DMs.
- Hosting: Amazon Web Services, in the United States.
- Encryption: in transit (TLS on every connection) and at rest.
- Sign-in: the dashboard uses Slack single sign-on. There are no Simple Poll passwords.
- Privacy: a UK company registered with the Information Commissioner's Office, and GDPR compliant. See GDPR and the privacy policy.
- Testing: regular external penetration tests and a public bug bounty on HackerOne.
- Payments: handled by Stripe, which is PCI compliant.
Slack permissions
Simple Poll requests the scopes a poll app needs and explains each one on the scopes page. In short: the /poll and /simplepoll commands, posting polls and messages, joining public channels where someone uses it, reading member names so named polls can show voters, and reading channel membership so it knows where it has been added. It doesn't read message history.
Documents you can get
- The ISO 27001 certificate and the security overview, on the security page.
- The list of sub-processors, with what each one provides and where.
- The privacy policy and terms of service.
- A DPA, an MSA and completed security questionnaires, on the Enterprise plan.
Sending a questionnaire
Send security questions to [email protected]. Completed security reviews and questionnaires are part of the Enterprise plan, so if your process needs one, contact [email protected] at the same time to set up Enterprise.
If your workspace requires app approval, the admin steps are in how to review a Slack app request.
Questions
Can Simple Poll read our Slack messages?
No. It sees the polls and votes your team creates, not channel history, files or DMs.
Where is our data stored?
Simple Poll is hosted on Amazon Web Services in the United States. Personal information is stored and processed in the United States and the United Kingdom, or where its partners and providers have facilities, as the privacy policy explains. The sub-processors page lists every provider and where each one operates.
Is there a DPA?
Yes, on the Enterprise plan, along with an MSA and completed security questionnaires.
Do people need a Simple Poll password?
No. The dashboard signs in with Slack single sign-on, and everything else happens inside Slack.
Related
- How to review and approve a Slack app request
By default, any member of a Slack workspace can install apps. Turning on app approval means members request apps and a Workspace Owner or an app manager approves or restricts each one. The steps below follow Slack's own help centre; the checks are what a careful reviewer looks at before saying yes.
- Simple Poll for Slack Enterprise Grid
Simple Poll's Enterprise plan is for large organizations, and for any company on Slack Enterprise Grid. It covers the whole Grid org with every Premium feature, and adds the things large companies need to buy and roll out software: a security review, contracts, invoice billing and a person to help.
- What is Simple Poll? A guide for whoever approves it
Simple Poll is a Slack app for polls and surveys. People type /poll in a channel, write a question and options, and the team votes with a click. It's the #1 polls and surveys app in the Slack Marketplace, used by 945,000+ teams with 130 million+ votes cast.
- How to pay for Simple Poll: card, invoice or purchase order
There are two ways to pay for Simple Poll. Premium is self-serve: someone in the workspace upgrades with a card. Enterprise is billed annually by invoice, against a purchase order if you need one.