Transparency & trust
Legal
Find SmartC’s policies and compliance information in one place: privacy, terms, security, and data processing.
Security Overview
- ✓ Encryption in transit (HTTPS/TLS) and at rest.
- ✓ Role-based access control & least privilege.
- ✓ 2FA and session/device management.
- ✓ Per-submission audit logs & activity history.
- ✓ Regular backups and disaster recovery testing.
- ✓ GDPR-aligned data lifecycle management.
Data Processing Addendum (DPA)
If you are a firm (controller) and use SmartC as a processor, our DPA forms part of the Terms and sets out the subject matter and duration of processing, nature and purpose, type of personal data, and data subject categories.
Sub-processors
We use carefully selected sub-processors to deliver the service. We will update this list before making material changes.
| Name | Purpose | Region |
|---|---|---|
| Stripe | Payments & billing | EU/US |
| Email provider | Transactional emails | EU/UK |
| Cloud hosting | App & data hosting | EU/UK |
Want a signed copy or custom DPA terms? Contact us.
Questions about our policies?
We’re happy to clarify anything in plain English.