We take information security seriously. ActionPlanner is built on a foundation of security best practices, continuous monitoring, and industry-recognized certifications.
ActionPlanner is hosted on Microsoft Azure in Europe, benefiting from Azure’s SOC 2 Type II, ISO 27001, and GDPR compliance certifications.
Our systems are protected by Microsoft Defender with continuous monitoring and threat detection.
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
Each customer’s data is logically separated with unique encryption keys, ensuring complete isolation between customers.
We support multiple authentication options to meet your security requirements:
Your data is backed up every 4 hours plus daily, with backups retained for up to 30 days.
In the event of an issue, we target full recovery within 1 day.
ActionPlanner supports your GDPR obligations including data export, anonymization, and deletion.
Our only subprocessor is Microsoft. A Data Processing Agreement is available on our GDPR page.
For detailed security information, including our vulnerability management process and response commitments, please contact your ActionPlanner representative or email security@actionplanner.com.
ActionPlanner supports the newest versions of Chrome, Safari, Edge, and Firefox.