Compliance and Security

Trusted Security and Data Protection You Can Rely On

At SimpliTrain, your trust and security are at the heart of everything we do. Developed by Mundrisoft, an ISO 9001 and ISO 27001 certified company, SimpliTrain is built on a strong foundation of data protection, operational excellence, and continuous improvement.
We follow globally recognized standards to secure your information, ensure compliance, and maintain the reliability of our platform.

ISO Certifications & Governance

SimpliTrain’s security and quality frameworks are powered by Mundrisoft’s ISO-certified processes, ensuring a strong culture of governance and accountability.

• ISO 9001 (Quality Management): Our development, delivery, and support processes follow structured workflows, measurable quality metrics, and ongoing improvement cycles to deliver dependable, high-quality solutions.
• ISO 27001 (Information Security): We adhere to a comprehensive risk management framework designed to protect the confidentiality, integrity, and availability of your data.
• Policies & Internal Controls: Regular audits, management reviews, and continuous employee training ensure compliance is maintained and improved across every function.

Infrastructure Security

Hosted exclusively on Microsoft Azure, SimpliTrain benefits from one of the most secure and compliant cloud infrastructures available globally.

• Reliable Storage: Azure’s secure and redundant storage ensures your data remains available and protected.
• Regular Backups: Automated daily backups are distributed across multiple data centres and availability zones, enabling quick recovery when needed.
• Strong Encryption: All Azure servers and databases are protected with AES-256 encryption to safeguard sensitive data.
• Multi-Factor Authentication: Administrative access requires multi-factor authentication, limiting access to authorized personnel only.
• Firewalls & DDoS Protection: SimpliTrain leverages Azure’s network and web application firewalls, along with advanced DDoS mitigation.
• Endpoint Protection: Enterprise-grade endpoint security solutions safeguard all connected systems and devices.
• Disaster Recovery & Incident Response: Comprehensive business continuity and incident response frameworks are in place to ensure rapid mitigation during any disruption.

This multi-layered defence ensures SimpliTrain’s infrastructure remains secure, resilient, and always ready to protect your data.

Application Security

Security is integrated into every stage of our software development lifecycle.

• Secure Development Lifecycle (SDLC): Our team follows secure coding guidelines, conducts code reviews, automated vulnerability scans, and penetration tests to identify and remediate risks proactively.
• Encrypted Connections: All user interactions are protected through TLS (HTTPS) encryption—using protocols TLS 1.2 or higher.
• Encryption at Rest: All customer data is encrypted using AES-256 to ensure maximum protection even in case of unauthorized access.
• Network Protection:
  • Azure Network Security Groups and Web Application Firewalls (WAF) prevent malicious traffic and unauthorized access.
  • Production and test environments are fully separated to minimize data exposure risks.
  • Private, secure load balancers manage all ingress traffic to isolate critical systems.
• Intrusion Detection: Continuous monitoring via Microsoft Defender for Cloud alerts our security team to any anomalous or suspicious behaviour for immediate investigation.

This defence-in-depth approach ensures your data remains protected at every level of the application lifecycle.

Internal Security at SimpliTrain

Security is not just a policy—it’s part of our culture. Every member of our team plays an active role in protecting customer information.

• Confidentiality Agreements: All employees sign confidentiality agreements and adhere to strict data handling standards.
• Customer Data Protection: Customer data is never stored on local devices, ensuring minimal exposure.
• Ongoing Security Training: Regular training keeps our teams up to date on the latest security threats, compliance standards, and privacy regulations.
• Dedicated Security Function: A specialized internal team oversees compliance, audits, incident response, and continuous improvement.
• Azure-Enabled Security Tools: We leverage Azure’s identity management, access control, and monitoring capabilities to enhance internal safety.
• Continuous Improvement: Security practices are reviewed and updated regularly to stay ahead of evolving risks and industry best practices.