Snapshot 200111
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security Planhat is built to keep your data safe. We put privacy and security front and centre, so you don’t have to. Protocols, not protections. The Infinite Frontier To us, security means eliminating every possible threat to data while it is within – or interacting with – Planhat. Since both our technologies and the threats to them are evolving continuously, our Security approach is equally continuous and proactive – underpinned by robust protocols rather than static protections. For this reason, every Planhat user benefits from always-on, enterprise-grade Security – ranging from 24/7 threat monitoring through to granular field-level permissions across role or team. secure Your built-in contingency plan. Planhat maintains best-in-class data security protocols across both platform and services. We provide constant monitoring, enterprise-grade SIRP and dedicated security support as standard. Talk to our experts 24/7 Monitoring Planhat uses an industry standard security solution to monitor all systems 24/7 and trigger alerts based on event logs. Our global team is on-call to address threats and resolve incidents as soon as they arise. Dedicated Security Team Planhat has a dedicated squad of security specialists as part of its global platform team. They conduct regular security reviews and risk assessments and can provide targeted protocols and SLAs to meet unique security needs. Reliable and secure infrastructure partners Planhat uses Google Cloud Platform (GCP) and hosts services within its own secure cloud environment. Read about our partnership here. ISO27001 Planhat’s commitment to exceptional security standards and policies has been independently validated through ISO 27001 certification. Robust SIRP Planhat has developed an Incident Response Plan to manage security events with efficiency and precision. Critical issues are addressed immediately, while less pressing concerns are prioritized for resolution within our standard development and release cycles. Always on Planhat is built for uninterrupted access. Our infrastructure is designed for maximum availability, and we publish real-time system health transparently so you always know where things stand. Click here to check our status page. PROTECTED Data made indestructible. Planhat stores all your data in secure, distributed, and fully redundant databases through scheduled daily and intraday backups. Our encryption protocol – in transit and at rest – is virtually impenetrable. Talk to our experts SOC 2 Type II Planhat’s is SOC 2 Type II certified, guaranteeing protection of sensitive data and adherence to global regulatory requirements. Daily & Intraday Backup Put nothing at risk with near-continuous backup of your entire Planhat environment and database. Secure Multi-Location Storage We mitigate correlated risk by storing all backups in geographically separate locations to our main warehouse. Redundancy as Standard Planhat is architected to ensure no system or device has a single point of failure. Data is always written to two locations when stored. TLS in-transit Planhat forces HTTPS on all connections and encrypts data in-transit with TLS 1.2 or 1.3 (browser dependent) to ensure in-transit data remains private and secure. AES-256 at-rest All data at-rest is secured using AES 256-bit encryption, a best-in-class standard designed to safeguard sensitive information. PRIVATE Hidden in plain sight. Planhat supports SSO, SAML and advanced login configurations, and allows you to restrict access down to individual fields by role, team and portfolio. We’re committed to industry-leading compliance standards. Talk to our experts GDPR & CCP compliance Committed to compliance with Europe’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). Login Restrictions Non-SAML users can restrict which login methods (Google SSO, Email login) are permitted in their workspace as an additional security layer. SAML Planhat offers SAML 2.0 standard with Okta, Azure AD, GSuite, ADFS and Custom SSO. Across these, we support both Service Provider (SP) initiated and Identity Provider (IdP) initiated flows. Admins can configure whether to use IdP or both. Single sign-on (SSO) Users can authenticate themselves into Planhat using SSO. Session length and time-based log-out restrictions can be configured to mitigate the probability of unauthorized access. Property-action permissions Permission specific actions like view, create, update and export at the level of the object, all the way down to individual object properties. Allow different roles to access different subsets of your customer database by individual portfolio, team or specific customer segments. Granular user roles Create an infinite number of fully custom user roles with highly granular permissions on property access, features like customer conversations and revenue, and account portfolios. Restrict access to system-level privileges with designated Admins. FAQ Do you encrypt data both in transit and in rest? Yes. All data in transit is encrypted using TLS 1.2 or 1.3 and data at rest is encrypted with AES-256 encryption, ensuring confidentiality and integrity. Is there an Incident Response Plan in place? Yes. How often is my data backed up? Daily. Do you have a defined Business Continuity and Disaster Recovery (BCDR) Plan? Yes, for more information you can refer to www.planhat.com/legal/dpa Do you have a Data Processing Agreement (DPA) in place? Yes, the current list of sub-processors can be found on www.planhat.com/legal/dpa Do you use sub-processors? Yes, the current list of sub-processors can be found on www.planhat.com/legal/subprocessor-disclosure Do you conduct employee security awareness training? Yes. What security compliance standards do you follow? SOC 2 type II and ISO 27001:2022. Report and certificate available upon NDA. Is Planhat GDPR compliant? Yes, for more information please refer to www.planhat.com/legal/gdpr-commitment Do you conduct third-party penetration testing? Yes, we conduct penetration testing annually and we maintain an active bug bounty program. Do you have a Vulnerability Disclosure Policy (VDP)? Yes, for more information you can refer to www.planhat.com/legal/vulnerability-disclosure-policy Solutions Platform Explore Customers Log In Request a Demo planhat About Pi Careers News Contact Legal Security Capabilities Data Intelligence Collaboration Action Governance Integrations Features Solutions Sales CRM Software Customer Success Platform Professional Services Software Customer Success RFP Template AI Deployment Cisco 360 Processes Resources Pricing Events Frontier Partners Help Center Developers Brand Guidelines Customers Our Impact Planhat for Enterprise Planhat for Scale Ups Planhat for Start Ups Planhat for SaaS Planhat for IT Planhat for Security Guides Services Automation Project Profitability Time Tracking & Timesheets Resource Management Project Management B2B CRM Agentic Sales CRM Recognized as a world-leader by 950+ reviews Planhat is built to keep your data safe. We put privacy and security front and centre, so you don’t have to. © 2026 Planhat inc. Status Terms of Service Privacy Policy Cookie Policy Follow us