GDPR Compliance and Security

Workload is committed to protecting your data and respecting the General Data Protection Regulation (GDPR)

Transparency documents

Security overview, vendor questionnaire, and DPA checklist (template) on the Trust page. Templates are not signed contracts.

Open the Trust page →

GDPR Compliance

Workload is compliant with the General Data Protection Regulation (GDPR) which came into effect on May 25, 2018.

  • Explicit consent for data processing
  • Right of access to your data (Article 15)
  • Right to rectification (Article 16)
  • Right to erasure (Article 17)
  • Right to data portability (Article 20)

Security

Your data is protected by enterprise-level security measures

  • Encrypted communications (HTTPS/TLS)
  • Integration secrets encrypted before storage
  • Capacity data hosted and processed in the EU
  • Organization export anytime (Excel, JSON, CSV)
  • Audit logs of sensitive actions in the product

Audit & organization export (SoR)

For IT/security due diligence: full organization export including audit logs.

  • Audit trail of sensitive actions (who, what, when)
  • Excel/JSON export across data types (projects, allocations, timesheet, auditLogs…)
  • ADMIN/OWNER only — compliance and vendor review
Organization export (login required) →Trust center →

Your GDPR Rights

You have several rights regarding your personal data

Right of access (Article 15)

You can request a copy of all personal data we hold about you.

Export my data →

Right to rectification (Article 16)

You can correct or update your personal data at any time from your profile.

Edit my profile →

Right to erasure (Article 17)

You can request the deletion of all your personal data.

Delete my data →

Right to portability (Article 20)

You can obtain your data in a structured and commonly used format.

Download my data →

DPO Contact

For any questions regarding compliance or security

Our Data Protection Officer (DPO) is available to answer all your questions regarding the processing of your personal data.

DPO Email

dpo@simpleworkload.com

Data Location

Your capacity data — teams, projects, allocations — is hosted and processed in the EU, in accordance with GDPR.

  • • Host: Vercel — EU region
  • • Database: Managed PostgreSQL — EU region
  • • Backups: Managed infrastructure backups (PostgreSQL)
  • • Transfers: Capacity data stays in the EU. Payments (Stripe) and transactional email are separate processing, with listed subprocessors.

For more information, see our Privacy Policy and our Terms of Service.