Charity Automator: Data Security, Access, and Retention

Your primary constituent and transaction records remain in your organization’s systems of record. SimpliPhi follows a principle of minimal data retention: we collect and maintain the data required to provide the agreed service, rather than keeping unnecessary copies.

Charity Automator Data Warehouse maintains the reporting data needed while your service is active. Data Flow handles data moving between connected systems and applies your approved processing rules.

For product capabilities and reporting use cases, see the Data Warehouse overview.

For a closer look at Charity Automator Data Flow, explore Data Flow’s technical capabilities.

• Where is client data stored?

  Charity Automator is hosted on both AWS and Azure. Data Flow clients are hosted on AWS. Data Warehouse clients are hosted primarily on Azure — particularly for organizations using Microsoft products to analyze their data — though AWS is also available as a hosting option.

  Canadian client data is hosted and processed in Canada; US client data is stored in the United States. We review the proposed data sources, transfer path, hosting location, and access requirements with your team during implementation.

• Does Charity Automator store payment card information?

  Charity Automator does not store cardholder information or process card payments.

• What happens if there is a security incident?

  SimpliPhi has a formal incident response plan and a team responsible for managing security incidents. The plan includes processes for investigation, response, notification, and communication.

• Who owns the data, and can we take it with us?

  Your organization retains ownership of its data. SimpliPhi does not sell client data or use it for unauthorized secondary purposes. Upon request or contract termination, SimpliPhi will assist with returning or transferring applicable data in a structured, machine-readable format, such as CSV or JSON.