Snapshot 55030
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Security Updated May 2026 Accelo values the trust its Subscribers’ place in its platform when relying on it to safeguard critical business information and provide consistent support for their operations. To uphold this responsibility, Accelo maintains a structured approach to key areas such as operations and security. While certain details cannot be disclosed to protect both Subscribers and the platform, the following information provides an overview of these practices. Reference to Accelo’s Terms of Service and Privacy Policy are incorporated herein. Any capitalized terms not defined within this Policy are defined within Accelo’s Terms of Service. Compliance & Audits Accelo maintains a confidential SOC 2 Type 2 report attesting to its commitment to meeting rigorous industry standards, established by the American Institute of Certified Public Accountants (AIPCA), through controls governing the availability, confidentiality, and security of data. A copy of this report is available to existing subscriber and is available to prospective subscriber upon execution of a mutual non-disclosure agreement (MNDA). Please contact an Accelo account executive or account manager for additional details. External auditors assess Accelo’s security annually by examining the following key areas: External vulnerability assessments, including penetration testing Cloud security Policies and procedures The significant overlap between the security controls required for SOC 2 compliance and those mandated by many global regulations and frameworks ensures that Accelo is well-positioned to meet the security expectations of its diverse customer base. Data & Security Encryption in Transit & at Rest In addition to encrypting data in transit between Subscribers and Accelo, all stored data is encrypted. Encryption at rest is implemented using the industry-standard AES-256 encryption algorithm, securing data on the hosting servers. This measure ensures that data remains accessible only within Accelo’s controlled systems environment. In the event of unauthorized access to physical storage devices, the encrypted data remains protected and cannot be accessed without the decryption key. The security and quality control embedded into Key Management Service (KMS) Accelo use have been validated and certified by the following compliance schemes: AWS Service Organization Controls (SOC 1, SOC 2, and SOC 3) Reports. You can request a copy of these reports from AWS Compliance. PCI DSS Level 1. For more details on PCI DSS-compliant services in AWS, you can read the PCI DSS FAQs. ISO 27017. For more details on ISO 27017 compliant services in AWS, you can read the ISO-27017 FAQs. ISO 27018. For more details on ISO 27018 compliant services in AWS, you can read the ISO-27018 FAQs. ISO 9001. For more details on ISO 9001 compliant services in AWS, you can read the ISO-9001 FAQs. In the evaluation for FIPS 140-2. For more details, you can view the FIPS 140-2 Implementation Under Test List. See Accelo’s Terms of Service and Privacy Policy for additional information. Backups Accelo’s systems incorporate two forms of backup: hot failover for real-time systems, ensuring seamless transition in the event of a primary system failure, and data backups to restore information in case of accidental deletion. Backup snapshots are taken daily, with a separate weekly backup retained for an extended period. Access Controls Accelo provides multiple security controls to help organizations enforce best practices for data access and account protection. To enhance account security, Accelo supports Two-Factor Authentication (2FA), requiring both something the User knows (a password) and something they have (such as a smartphone) to prevent unauthorized access, even if a password is compromised. Strong Password Policies enable administrators to enforce password complexity requirements, including minimum length, character combinations, and restrictions on reusing or changing passwords too frequently or infrequently. For organizations using Google Workspace (formerly G Suite), Accelo offers delegated access control, requiring authentication through Google’s secure sign-in infrastructure, centralizing access management under Google’s security protocols. Additionally, Accelo implements automated account lockout to mitigate brute-force attacks. If an incorrect password is entered more than five times within 30 minutes, the account is locked for 30 minutes, requiring administrator intervention or a password reset to regain access. People & Processes Like our Subscribers’ businesses, Accelo’s business depends on the integrity and capabilities of our people, operating with the support and coordination of our processes. Personnel When it comes to Subscriber data stored in Accelo’s cloud infrastructure, access is tightly controlled. Access to production systems is limited to a select group of engineering personnel and is controlled by SSH keys centrally managed by an orchestration infrastructure. Operationally, development environments are separated completely from production systems, ensuring tight control on access to Subscriber data and that development work can't touch or interact with production data. If developers require access to debug something specific, an encrypted export of a subset of data is requested, transferred via an encrypted channel (SSH 2.0 protocol using SHA-256 keys), and worked on in development environments that are also encrypted at rest. Development environments are actively managed by Accelo’s DevOps team, ensuring consistency and tightly managed control. Policy Access to any account via the Accelo application is logged, showing the User and the timestamp of the login/use. This is the only manner through which support staff access Subscriber accounts, and it is limited to support staff replicating or confirming/resolving issues reported by a Subscriber. Per industry privacy and confidentiality standards, all team members sign stringent confidentiality agreements before starting with Accelo, and any abuse of access is grounds for immediate termination. See Accelo’s Terms of Service and Privacy Policy for additional information. Reliability & Continuity Accelo's setup, choice of vendors, and operating position are strong, ensuring resilience and continuity into the future. Reliability Accelo engages Amazon Web Services (AWS) as our cloud infrastructure provider. AWS is the world's largest cloud provider with more than twice the market share of the next three largest Infrastructure as a Service (IaaS) providers combined. Accelo utilizes AWS services in multiple global regions. Within each, Accelo uses multiple independent systems that provide load balancing, compute power, scalable and redundant databases and object storage that underpin the services it provides. Accelo also make use of the distributed DNS service, system monitoring services and security key generation and storage services offered by AWS. When it comes to maintaining system uptime, key services like our Accelo’s databases are always running in a replicated, dual-instance configuration so that if one database becomes unavailable, its identical twin is already running and available to take over automatically. The Accelo platform also implements automatic scaling strategies so that, as more users log on to its product and start using it, its systems will automatically increase the hardware resources allocated to keep performance reliable and consistent for everyone at all times. Continuity Accelo has been a leader in the professional services automation space for over a decade, and looks forward to empowering its Subscribers into the future. In addition, all Subscribers retain full ownership of their data and can export it for their own use and retention. Accelo is committed to ensuring that data is accessible and extractable at your discretion. Data Residency Accelo Forecast PSA is hosted on Amazon Web Services (AWS) infrastructure in the EU (Ireland), with backup infrastructure in the EU (Germany). Your data stays within the European Union by default. For firms with data residency requirements - whether driven by regulatory obligations, client contracts, or internal policy - this means your operational data never leaves EU jurisdiction. Data residency options by product: Product Primary region Backup region Accelo Forecast PSA EU (Ireland) / eu-west-1 EU (Germany) / eu-central-1 Accelo EU (Ireland) / eu-west-1 United States / us-west-2 Australia / ap-southeast-2 Dependent on region GDPR Readiness Accelo Forecast PSA is built on infrastructure and controls designed to support GDPR compliance. Our primary hosting region is AWS EU (Ireland), with backup infrastructure in EU (Germany), meaning your operational data stays within EU jurisdiction by default. The following controls are in place: Personal data is processed only within the EU on AWS infrastructure in Ireland. A Data Processing Addendum (DPA) governing the terms of data processing is available at accelo.com/company/data-processing-addendum. Data subjects may exercise rights of access, erasure, and portability through your account administrator. Accelo does not sell or share personal data with third parties for their own commercial purposes. For data privacy questions, contact [email protected] or refer to the DPA linked in the footer. Table of Contents 555 17th St., #1500, Denver, CO 80202 USA 3rd Floor, 1 Ashley Road, Altrincham, Cheshire WA14 2DT United Kingdom 4th Floor, 6-8 Regent St., Wollongong NSW 2500 Australia Company About UsCareers Get Started Book a DemoWhy AcceloPricing Customer Support Accelo Help CenterAccelo Community ForumForecast Help Center © 2026 Accelo, Inc. All rights reserved. Terms of ServicePrivacy PolicyFair Use PolicyDPASecurity x 1,000+ reviews Book a 1:1 demo Schedule time to meet with an Accelo representative. Meet with our product experts With Accelo, you can: Forecast capacity gaps before they hit your delivery schedule. Run fixed-fee projects and ongoing retainers side by side, in one tool. Find where you're leaking revenue and stop it. See which clients, projects, and retainer agreements actually make you money. Trusted by professional services teams