Security

Separation of data

• Each company is its own organisation. Database rules check membership on every read and write, so one company can never see another's records.
• Personal household data belongs to the household, not the employer. Coworkers and company admins cannot see it.
• Meetings, transcripts and email are private to the person who connected them unless they choose to share.
• When calendars are shared, hidden titles, notes and locations are removed on the server before anything is sent.

Access and roles

• Roles (owner, admin, executive, manager, member, viewer, developer) are stored separately from profiles and checked on the server.
• Owners and admins manage people, roles and invites. The last owner cannot be removed or demoted.
• Removing someone takes away their access straight away.

Encryption and connections

• All traffic uses HTTPS. Data is encrypted at rest by the hosting provider.
• Google sign-in tokens for Calendar and Gmail are encrypted again before they are stored.
• Gmail access is read-only. ProjectPlan.life never sends, deletes or marks mail as read.
• Calendar changes happen only when a person approves them.

Audit and data controls

• Owners and admins see an audit log of who created, changed or deleted Business records, and of every data export. It can be downloaded as a spreadsheet.
• Admins can export their company's Business data at any time.
• Admins can choose to clear meeting transcripts automatically after 30, 90, 180 or 365 days.

AI

• The AI suggests; people decide. Tasks, invites and calendar changes the AI suggests wait for review.
• Only the text needed for each request is sent, and the assistant is told never to invent facts.

Services we use

Data processing agreement and reports

Companies can ask the Provider for a data processing agreement and a security questionnaire response. The Provider does not yet have a SOC 2 or ISO 27001 certification.