Security

Security

Planhat is built to keep your data safe. We put privacy and security front and centre, so you don’t have to.

Planhat is built to keep your data safe. We put privacy and security front and centre, so you don’t have to.

Protocols,
not protections.

To us, security means eliminating every possible threat to data while it is within – or interacting with – Planhat. Since both our technologies and the threats to them are evolving continuously, our Security approach is equally continuous and proactive – underpinned by robust protocols rather than static protections. For this reason, every Planhat user benefits from always-on, enterprise-grade Security – ranging from 24/7 threat monitoring through to granular field-level permissions across role or team.

Protocols, not protections.

To us, security means eliminating every possible threat to data while it is within – or interacting with – Planhat. Since both our technologies and the threats to them are evolving continuously, our Security approach is equally continuous and proactive – underpinned by robust protocols rather than static protections. For this reason, every Planhat user benefits from always-on, enterprise-grade Security – ranging from 24/7 threat monitoring through to granular field-level permissions across role or team.

Protocols, not protections.

To us, security means eliminating every possible threat to data while it is within – or interacting with – Planhat. Since both our technologies and the threats to them are evolving continuously, our Security approach is equally continuous and proactive – underpinned by robust protocols rather than static protections. For this reason, every Planhat user benefits from always-on, enterprise-grade Security – ranging from 24/7 threat monitoring through to granular field-level permissions across role or team.

FAQ

Do you encrypt data both in transit and in rest?

Yes. All data in transit is encrypted using TLS 1.2 or 1.3 and data at rest is encrypted with AES-256 encryption, ensuring confidentiality and integrity.

Is there an Incident Response Plan in place?

Yes.

How often is my data backed up?

Daily.

Do you have a defined Business Continuity and Disaster Recovery (BCDR) Plan?

Yes, for more information you can refer to www.planhat.com/legal/dpa

Do you have a Data Processing Agreement (DPA) in place?

Yes, the current list of sub-processors can be found on www.planhat.com/legal/dpa

Do you use sub-processors?

Yes, the current list of sub-processors can be found on www.planhat.com/legal/subprocessor-disclosure

Do you conduct employee security awareness training?

Yes.

What security compliance standards do you follow?

SOC 2 type II and ISO 27001:2022. Report and certificate available upon NDA.

Is Planhat GDPR compliant?

Yes, for more information please refer to www.planhat.com/legal/gdpr-commitment

Do you conduct third-party penetration testing?

Yes, we conduct penetration testing annually and we maintain an active bug bounty program.

Do you have a Vulnerability Disclosure Policy (VDP)?

Yes, for more information you can refer to www.planhat.com/legal/vulnerability-disclosure-policy

FAQ

Do you encrypt data both in transit and in rest?

Yes. All data in transit is encrypted using TLS 1.2 or 1.3 and data at rest is encrypted with AES-256 encryption, ensuring confidentiality and integrity.

Is there an Incident Response Plan in place?

Yes.

How often is my data backed up?

Daily.

Do you have a defined Business Continuity and Disaster Recovery (BCDR) Plan?

Yes, for more information you can refer to www.planhat.com/legal/dpa

Do you have a Data Processing Agreement (DPA) in place?

Yes, the current list of sub-processors can be found on www.planhat.com/legal/dpa

Do you use sub-processors?

Yes, the current list of sub-processors can be found on www.planhat.com/legal/subprocessor-disclosure

Do you conduct employee security awareness training?

Yes.

What security compliance standards do you follow?

SOC 2 type II and ISO 27001:2022. Report and certificate available upon NDA.

Is Planhat GDPR compliant?

Yes, for more information please refer to www.planhat.com/legal/gdpr-commitment

Do you conduct third-party penetration testing?

Yes, we conduct penetration testing annually and we maintain an active bug bounty program.

Do you have a Vulnerability Disclosure Policy (VDP)?

Yes, for more information you can refer to www.planhat.com/legal/vulnerability-disclosure-policy

FAQ

Do you encrypt data both in transit and in rest?

Yes. All data in transit is encrypted using TLS 1.2 or 1.3 and data at rest is encrypted with AES-256 encryption, ensuring confidentiality and integrity.

Is there an Incident Response Plan in place?

Yes.

How often is my data backed up?

Daily.

Do you have a defined Business Continuity and Disaster Recovery (BCDR) Plan?

Yes, for more information you can refer to www.planhat.com/legal/dpa

Do you have a Data Processing Agreement (DPA) in place?

Yes, the current list of sub-processors can be found on www.planhat.com/legal/dpa

Do you use sub-processors?

Yes, the current list of sub-processors can be found on www.planhat.com/legal/subprocessor-disclosure

Do you conduct employee security awareness training?

Yes.

What security compliance standards do you follow?

SOC 2 type II and ISO 27001:2022. Report and certificate available upon NDA.

Is Planhat GDPR compliant?

Yes, for more information please refer to www.planhat.com/legal/gdpr-commitment

Do you conduct third-party penetration testing?

Yes, we conduct penetration testing annually and we maintain an active bug bounty program.

Do you have a Vulnerability Disclosure Policy (VDP)?

Yes, for more information you can refer to www.planhat.com/legal/vulnerability-disclosure-policy