Quality assurance
ISO 27001 certification
Data encryption
- For traffic encryption, we use at least TLS 1.2 with modern cipher suites.
- Sensitive information is encrypted at rest with AES-256 or better.
- Login credentials are hashed using a modern hash function that uses a salt.
Emergency recovery and backups
Our emergency recovery plan is tested at least once a year to assess its effectiveness and to align our teams with their responsibilities in the event of a service interruption.
Privacy
Security at the vPlan office
Support
vPlan never asks for your login details. Our support team may request a Support token. You can provide this temporary token, giving our support team temporary access to your environment. This often allows us to help you even faster.
Events performed via a support token are logged with a unique identifier, making it clear that this action was not performed by the regular user.
Security features
Data security
Our people and systems can only access the data needed for their work. We store your data at Previder data centers. These data centers use leading physical and environmental security measures.
Penetration testing and audits
We assess our software and infrastructure through peer reviews and penetration tests for security issues. We also conduct annual internal and external audits of our Information Security Management System (ISMS).
High availability
We are committed to keeping vPlan continuously available. Our systems have built-in redundancy to withstand failures and are constantly monitored to keep your work uninterrupted.
Encryption
We keep your data secure during transport and at rest. During transport, data is only accessible via TLS/SSL, and at rest, data is encrypted with AES-256 or better.
Monitored and resilient
Our threat detection, logging, and alerting systems notify our response teams of potential incidents.
User roles and permissions
Users can be assigned different roles, allowing them to do what is necessary. You can set access to plan boards and views.
Phased releases
We only release software after it has been qualified in development and staging environments.
Backup policy
We back up your environment daily. Backups are encrypted and distributed to different locations, where they are stored for one month.