Skip to main content
    S
    SimpleLoan

    Trust & Security

    This page is maintained by SimpleLoan to answer common security and privacy questions about our Canadian personal-finance comparison platform. It describes the controls we currently have enabled — it is not an independent certification or audit report.

    Security is a shared responsibility between SimpleLoan, our hosting and infrastructure providers, and the people who use our site. The sections below describe what each side is responsible for.

    Authentication & access

    • Sign-in uses email + password or Google OAuth, provided by our managed auth platform.
    • Passwords are hashed and stored by the auth provider — SimpleLoan staff never see them.
    • Administrative access to the SimpleLoan admin panel is restricted to a single approved owner account, enforced server-side.
    • All authenticated app traffic is served over HTTPS.

    Data protection

    • User-specific data (saved calculations, quiz results, reviews, support threads) is protected by row-level access rules so that users can only read and modify their own records.
    • Database traffic between our application and the database is encrypted in transit.
    • Sensitive operations (payments, AI generation, outbound email) run inside server-side functions with verified credentials, never from the browser.

    Hosting & infrastructure

    SimpleLoan runs on managed cloud infrastructure. Our platform providers handle physical security, network protection, OS-level patching, and database backups. SimpleLoan is responsible for the application code, access rules, and how data is used inside the product.

    Privacy, retention & your rights (PIPEDA)

    • We collect only the information needed to operate calculators, comparisons, and account features.
    • Anonymous quiz results are automatically purged after 90 days.
    • Email subscribers can unsubscribe from every marketing message we send, and suppression lists are respected.
    • Canadian residents can request access to or deletion of their personal information under PIPEDA by emailing us.

    Subprocessors & integrations

    We rely on a small number of trusted vendors to deliver the service. Categories include:

    • Managed application hosting and database
    • Authentication provider (email + Google sign-in)
    • Payment processing for paid plans
    • Transactional and marketing email delivery
    • Generative AI providers used for content tools and the financial advisor chatbot
    • Analytics and Google AdSense on public marketing pages

    What we are not

    SimpleLoan is an educational comparison platform — not a lender, broker, or licensed financial advisor. We do not currently advertise SOC 2, ISO, PCI, or HIPAA certification. For major financial decisions, verify details directly with the lender and consult a licensed Canadian professional.

    Reporting a security or privacy issue

    Found a vulnerability or have a privacy request? Email info@simpleloan.ca with the details. Please do not exploit the issue or access data that does not belong to you while investigating; we aim to acknowledge reports within a few business days.

    Last updated: June 2026. See also our Transparency, Editorial Policy, and How We Make Money pages.