Product/Version

simpressive v2.2

Function as provided in December 2020

Qualification: IT product and IT-based service (processor service)

View the simpressive certificate

Version of Certification Criteria

Cert. No.

EP-S-T2RUMK

Validity

24/06/2021 - 30/06/2023

Monitoring

02/2022

10/2022

Public Report

simpressive Short Public Report  

Manufacturer/Provider

simpressive GmbH & Co. KG

Karl-Ferdinand-Braun-Straße 5
28359 Bremen
Germany

BEST

simpressive lives up to the principle of data minimisation.

ATTENTION

simpressive facilitates its privacy-compliant use. However, responsibility for the processing of personal data by means of simpressive lies with the users of the service who qualify as controllers whereas simpressive GmbH & Co. KG acts as a processor on behalf of the users. Where present and applicable, users must adhere to Member state law providing for more specific rules to ensure the protection of the rights and freedoms in respect of the processing of employees' personal data in the employment context (cf. Art. 88 GDPR).

SUMMARY

Via simpressive, customers place their requirements for an order (for example, supplier guidelines) and manage the entire purchasing process. Per dashboard, orders can be created and viewed, content can be administrated and reports can be created. Electronic approvals can be signed (simple or qualified signature). Authorised users can communicate per chats in closed groups. Service providers can record project times and deposit hardskills (proof of professional competence) that may be required for the assignment of an order. Each user has an individual profile that can be viewed by authorised users.

DETAILS

Recertification 06/2021:

simpressive GmbH & Co. KG moved to new premises in December 2020. The new address is Karl-Ferdinand-Braun-Straße 5, 28359 Bremen, Germany. A document analysis and interviews showed that simpressive implemented appropriate technical and organizational data protection measures for the new location. Due to the pandemic restrictions, an on-site audit was not possible during the re-evaluation period. An on-site audit will take place at a later stage. Since the move, the office IT has been largely managed by simpressive GmbH & Co. Co. KG itself.

The programming of simpressive with the assistance of Salt & Pepper Software GmbH & Co. KG (since 08/2020 slashwhy GmbH & Co. KG) was terminated as of August 2020. The support contract ended in January 2021.

The ToE and its documentation changed slightly between the initial certification and this recertification. For details, please cf. the short public report.

Initial Certification 04/2019:

The ToE includes:

• The IT product and IT-based service simpressive as well as the interface from the ToE to Mentana-Claimsoft GmbH (for details, please cf. the short public report) 

It does not include:

• Training, workshops and consulting offered by simpressive GmbH & Co. KG
• The implementation of the software by simpressive GmbH & Co. KG
• Mobile apps and other software products offered by simpressive GmbH & Co. KG
• Special procedures of Mentana-Claimsoft GmbH (authentication via TAN, hardware token, video-ident as part of FP-Sign) as well as individual interfaces to user systems
  

Technical + Legal Evaluator

Dr. Irene Karper
Konsul-Schmidt-Straße 88a
28217 Bremen
Germany