On Jan 16th, 2025, Plane became compliant with SOC 2 Type II, the last in the four we had aimed for in 2024. Along with ISO27001:2022, GDPR, and HIPPA, Plane is now more enterprise-ready, especially for healthcare and wellness companies in the EU.

Why this matters

As one of the last self-hosted alternatives to cloud-first project management software, Plane is extremely popular in regulated industries with strong adoption in Defense, Healthcare, Pharma, Telecom, and Finance. These four certifications offer the assurance businesses in these and other regulated industries and geographies need with staple software like ours.

Here's what these four independently-verified categories of controls translate to.

• With the SOC2 Type II certification,** our robust framework of control now stands verified against the stringent standards of security, availability, confidentiality, and data integrity most of our customers expect adherence to.
• Our certified adherence with GDPR offers the assurance customers and users in the EU have looked for in the collection and processing of data by Plane in line with the standards laid out in the General Data Protection Regulation.
• With our HIPAA certification, healthcare, wellness, and pharma businesses can now operate with the fullest confidence that Plane handles protected health information (PHI) in line with the strict standards of the Health Insurance Portability And Accountability Act.
• Our ISO 27001:2022 certification further verifies our handling of your data privately and securely within the trifecta of technology, policies, and people.

Earning your trust

At Plane, your trust in our ability to govern and protect your data is paramount. While these certifications go a long way in offering the assurance you need, we go beyond the scope of these certifications to ensure your trust is earned and kept everyday.

• See our Security page to learn more about how Plane handles your data across self-hosted and Cloud workspaces.
• Check out our Airgapped offering that offers compliance and privacy out of the box and get in touch with us to know more.
• Request access to any of our certifications.

Ask us anything

If you have questions about our journey to these four certifications, our overall compliance with the strictest standards of data protection, or need additional documentation to support your own security audits, reach out to us at security@plane.so.

Thank you for trusting us to be your system of record for all work data! To being your partner in all things progress, 🥂

Custom deployments for your unique compliance needs
Have unique security and compliance requirements? Talk to Sales for tailor-made implementations.

/