What we do to keep your team's work private, and how to check it. If you need something that isn't here, ask and we'll answer in writing.
Microsoft 365 (Entra ID) or a one-time code sent to your email. We never store a password, so there's none to leak.
Four roles and per-project access. Restricted projects are invisible to people without access, including in search, Insights and exports.
TLS 1.2+ for everything in transit. Databases, backups and uploaded files are encrypted at rest with AES-256.
Point-in-time recovery for the database, with daily backups kept for 30 days. Restores are tested before every major release.
Role changes, invites, removals, access changes, and sign-in settings are recorded with who and when, and visible to Admins.
Export tasks, pages and history at any time. Deleted items stay in Trash for 30 days. A deleted team is recoverable for 30 days, then erased.
Production is isolated from staging. Secrets live outside the code. Dependencies are scanned on every build, and access to production is limited to named engineers with hardware keys.
Email security@getplanbook.com. We reply within two working days, keep you updated, and credit researchers who want it.