Data Security

  • Our servers are hosted and managed in secure data centers in the United States by Amazon AWS.
  • The data center operations have been accredited under:

          ISO 27001

          SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)

          PCI Level 1

          FISMA Moderate

          Sarbanes-Oxley (SOX)

View the full list of Amazon AWS certifications here 

  • The website uses financial-grade SSL encryption of the data.
  • ProductPlan encrypts data-at-rest using AES-256, block-level storage encryption on the server giving you greater security.

Roadmap Security

  • ProductPlan personnel do not have access to your roadmap unless you share it with us.
  • You have full control of how and when you share a roadmap. Sharing a roadmap with another user requires a secure login. By default all roadmaps are restricted to only the people you explicitly share them with.
  • We provide the ability for a roadmap owner to create a private link that can be shared with others. This link does not require a log in. However, as the roadmap owner you are in control whether this feature is used, and the link can be deactivated at any time.
  • We do not share your roadmap data with third parties.
  • We back up our servers regularly to ensure against loss of information.

Penetration and Vulnerability Testing

  • ProductPlan uses a combination of automated and 3rd party penetration testing and threat assessments to ensure that our systems are hardened against intrusion. 

Global Compliances

  • ProductPlan is Privacy Shield Certified and is committed to adhering to GDPR. For more on our Privacy information, you can see that here.  

Enterprise Grade Security 

Our Enterprise Subscriptions include additional security features geared towards larger accounts:

To report security or privacy issues that affect ProductPlan or our web servers, please contact security@productplan.com.

Did this answer your question?