Yes, Simplecast is GDPR compliant. Please see our privacy policy: https://simplecast.com/privacy/, our standard form DPA: https://simplecast.com/dpa/ and our public list of subprocessors: https://simplecast.com/subprocessors/.

Our servers are located within the US. GDPR does not require in EU data residency. We abide by GDPR Chapter 5, Articles 44-50 for “Transfers of personal data to third countries or international organisations” to ensure that our subprocessors must be under a legally binding obligation to follow GDPR data protection principles or the equivalent.

We have not undergone Privacy Shield certification, but generally abide by the framework except in instances in which it differs from GDPR.

We cannot provide you with legal advice with respect to whether the Cloud Act affects your organization. However, we can confirm that we are organized under the laws of the US State of Delaware. 

Here is our statement on our response to lawful requests for information from our customers from our terms https://simplecast.com/terms-conditions/:
​
​You understand and agree that we may disclose your information to if required to do so by law, court order, legal process, or subpoena, including to respond to any government or regulatory request, or if we believe that such action is necessary to (a) conform to the law, comply with legal process served on us or our affiliates or partners, or investigate, prevent, or take action regarding suspected or actual illegal activities; (b) to enforce our Master Terms (including for billing and collection purposes), take precautions against liability, to investigate and defend ourselves against any third-party claims or allegations, to assist government enforcement agencies, or to protect the security or integrity of our site; and (c) to exercise or protect the rights, property, or personal safety of our company, our users or others. 

​Still have questions? We'd be happy to answer them. You can reach our Support Team at support@simplecast.com!