Recertification: 06/2021
simpressive maps the awarding, implementation and management of purchasing processes on an online platform (SaaS) and is meant to be used by clients and their service providers. It is a job management tool that includes the whole service, from requirements planning and purchasing to invoicing.
Product/Version
simpressive v2.2
Function as provided in December 2020
Qualification: IT product and IT-based service (processor service)
View the simpressive certificate
Version of Certification Criteria
Cert. No.
EP-S-T2RUMK
Validity
24/06/2021 – 30/06/2023
Monitoring
02/2022
10/2022
Public Report
simpressive Short Public Report 
Manufacturer/Provider
simpressive GmbH & Co. KG
Karl-Ferdinand-Braun-Straße 5
28359 Bremen
Germany
BEST
simpressive lives up to the principle of data minimisation.
ATTENTION
simpressive facilitates its privacy-compliant use. However, responsibility for the processing of personal data by means of simpressive lies with the users of the service who qualify as controllers whereas simpressive GmbH & Co. KG acts as a processor on behalf of the users. Where present and applicable, users must adhere to Member state law providing for more specific rules to ensure the protection of the rights and freedoms in respect of the processing of employees’ personal data in the employment context (cf. Art. 88 GDPR).
SUMMARY
Via simpressive, customers place their requirements for an order (for example, supplier guidelines) and manage the entire purchasing process. Per dashboard, orders can be created and viewed, content can be administrated and reports can be created. Electronic approvals can be signed (simple or qualified signature). Authorised users can communicate per chats in closed groups. Service providers can record project times and deposit hardskills (proof of professional competence) that may be required for the assignment of an order. Each user has an individual profile that can be viewed by authorised users.
DETAILS
Recertification 06/2021:
simpressive GmbH & Co. KG moved to new premises in December 2020. The new address is Karl-Ferdinand-Braun-Straße 5, 28359 Bremen, Germany. A document analysis and interviews showed that simpressive implemented appropriate technical and organizational data protection measures for the new location. Due to the pandemic restrictions, an on-site audit was not possible during the re-evaluation period. An on-site audit will take place at a later stage. Since the move, the office IT has been largely managed by simpressive GmbH & Co. Co. KG itself.
The programming of simpressive with the assistance of Salt & Pepper Software GmbH & Co. KG (since 08/2020 slashwhy GmbH & Co. KG) was terminated as of August 2020. The support contract ended in January 2021.
The ToE and its documentation changed slightly between the initial certification and this recertification. For details, please cf. the short public report.
Initial Certification 04/2019:
The ToE includes:
- The IT product and IT-based service simpressive as well as the interface from the ToE to Mentana-Claimsoft GmbH (for details, please cf. the short public report)
It does not include:
- Training, workshops and consulting offered by simpressive GmbH & Co. KG
- The implementation of the software by simpressive GmbH & Co. KG
- Mobile apps and other software products offered by simpressive GmbH & Co. KG
- Special procedures of Mentana-Claimsoft GmbH (authentication via TAN, hardware token, video-ident as part of FP-Sign) as well as individual interfaces to user systems
Technical + Legal Evaluator
Dr. Irene Karper
Konsul-Schmidt-Straße 88a
28217 Bremen
Germany