Data security Your client data stays protected, and your team sees only what they should.
SimplyConvert keeps case data under a SOC 2 Type II audit, encrypted in transit, in hardened data centers. You decide who can see a case, change it, or administer the firm.
Controls
Three layers around every case file
An independent audit, the controls of the hosting environment, and the permissions you set inside the app.
SOC 2 Type II
An independent auditor reviews how the security controls are designed and how they operate over a period of time. Ask for the report when you are evaluating SimplyConvert.
Hardened hosting
Case data sits on hardened servers in secure data centers. Firewalls, authentication, and monitoring protect access. Data is backed up, and archives are stored off-site.
Roles and permissions
You decide who can see a case, who can change it, and who can administer the firm. Each person opens the cases and tools their role allows.
Inside your firm
Your admins decide who gets in
Firm-wide settings, a record of what changed, the people on your team, and encryption on every connection.
Admin controls
Admins decide who can change firm-wide settings, invite people, and manage the account.
Audit logs
Important actions on a case are recorded, so you can see what changed and who made the change.
Teams
Invite the people who work your cases and give each person a role. When someone leaves, an admin can remove their access.
Encryption in transit
Every connection to SimplyConvert uses HTTPS, so case data is encrypted while it moves between your browser and the platform.
Privacy
Health information and personal data stay with the right people
Case files hold more than contact details. The same access controls apply to medical records and to requests from people about their own information.
Health information on the case
Medical records, authorizations, and other health details are handled under the HIPAA privacy and security frameworks. Who can open them is still a decision your firm makes.
Requests about personal information
A person can ask to see or delete information they provided. Those requests, including under the CCPA and CPRA, are handled as described in the privacy policy.
Audited controls, reviewed over time
SOC 2
Type II. Security controls reviewed across a period of operation.
The audit looks at how controls are designed and how they run in practice. Your firm still decides who inside the practice can open a case, change it, or administer the account.
Ask for the report when you are evaluating SimplyConvert.
What firms ask about security
The questions that come up when a firm is reviewing how case data is hosted, encrypted, and shared inside the practice.
Still have a question?
Walk through roles, admin controls, and the audit log on a live case.
Does SimplyConvert have an information security program? +
Yes. Security controls are reviewed in a SOC 2 Type II audit. Case data is hosted in hardened data centers, with firewalls, authentication, monitoring, backups, and off-site archives. Ask for the report while you are evaluating the platform.
Is SimplyConvert cloud-based, and who runs the data centers? +
SimplyConvert is a cloud platform. Case data sits on hardened servers in secure data centers. SimplyConvert does not operate those facilities.
How is data encrypted? +
Connections use HTTPS, so case data is encrypted in transit between your browser and SimplyConvert.
Who can see a case? +
You decide. Roles control who can see a case, who can change it, and who can administer the firm. Admins invite the team, assign roles, and remove access when someone leaves.
Do you keep an audit log? +
Yes. Important actions on a case are recorded, including what changed and who did it.
How is health information handled? +
Medical records and other health details on a case are handled under the HIPAA privacy and security frameworks. Access still follows the roles your firm sets.
How are California privacy requests handled? +
The privacy policy describes how personal information is used and how a person can ask to access or delete it, including under the CCPA and CPRA.
Can we review the SOC 2 report? +
Yes. Ask for the report when you are evaluating SimplyConvert.
See how access works on a live case
Book a walkthrough of roles and permissions, or create an account and set them for your firm.