How Secure Is Your Software? This Is How vPlan Protects Your Data

Why Cloud Security Matters More Than Ever

We’re working in the cloud more than ever. That means your data isn’t stored locally on your computer, but on external servers in specialised data centres.
It’s great for collaboration — but it also raises important questions:
Where is my data stored? Who has access to it? And what happens if something goes wrong?

Working securely in the cloud means your data is protected against loss, misuse or unauthorised access — without any extra effort from you.

At vPlan, we take these concerns seriously. Security isn’t a side issue; it’s a core part of everything we do. Whether you use vPlan for planning, project management or productivity, your data is always in safe hands.

What to Look For in Software Security

When choosing software for planning, project management or collaboration, it’s important to look beyond just features or ease of use.
Especially if you’re handling sensitive information, you want to be sure the provider truly prioritises security.

Here are the key things to consider:

1. Data centres and data location

Always ask where your data is stored.
Choose software that is hosted within the EU in data centres certified with ISO 27001 or SOC 2.
This ensures your data is protected under the GDPR and European law.

2. Data encryption

Check that data is encrypted, both during transmission (using TLS) and when stored (with AES-256 encryption).
Without encryption, your data is vulnerable to third-party access.

3. Back-ups and disaster recovery

Reliable software creates automatic back-ups and has a tested disaster recovery plan.
Ask how often back-ups are made, how long they are kept, and whether they are tested regularly.

4. Access control and user permissions

Good software lets you decide who can access what.
Features like Single Sign-On (SSO) and user roles help keep sensitive information restricted.

5. Audits and certifications

Look for certifications like ISO 27001 or independent security audits.
The more certifications a provider has, the more consistent their security practices are likely to be.

6. Privacy and GDPR compliance

Check whether the provider has a clear privacy policy and is fully GDPR-compliant.
You should always remain the owner of your data and stay in control of how it is used.

How vPlan Keeps Your Data Safe

Hosted in secure data centres

All vPlan systems run in secure data centres operated by Previder and AWS in Europe.
These locations are certified with ISO 27001 (and more), meaning they meet the highest international standards for information security.
Your data always remains within the European Union, fully protected by the GDPR.

Always encrypted — in transit and at rest

vPlan encrypts your data on multiple levels:

• During transmission: at least TLS 1.2 with modern encryption protocols
• At rest: sensitive data is encrypted with AES-256, the same standard used by banks
• Passwords: securely hashed with salt, making them unreadable even internally

In short: everything you store in vPlan remains confidential. Always.

Daily back-ups and disaster recovery

vPlan creates daily encrypted back-ups of customer environments, stored across multiple, geographically separated locations.
These back-ups are retained for one month — and we regularly test that they can be restored reliably.

We also test our full disaster recovery plan every year, so our team knows exactly what to do in case of a major disruption. This means your data can be restored quickly and securely.

High availability and 24/7 monitoring

Downtime is frustrating. That’s why vPlan uses infrastructure with multiple layers of redundancy, so if one system fails, another takes over.
This reduces the risk of disruptions and ensures better uptime.

Our environment is monitored around the clock for performance, errors and potential threats.
This allows us to respond quickly — often before you even notice there’s an issue.

Security starts with people

Security is more than just technology. Our people play a crucial role.
Everyone at vPlan follows strict security procedures and only has access to the data required for their role.

Our offices are protected with access control and alarm systems.
For support, we use a temporary Support Token — this gives us temporary access to your environment without needing your password.
All activity using this token is logged, and you remain in full control.

Quality and Security in Every Release

Every change to our platform goes through a strict process:

• Segmented environments
• Segmented data (fake data in tests; production data stays in production)
• Automated tests
• Manual code reviews
• Testing in a secure staging environment

Only then is the update rolled out to the live environment.
For sensitive features, we carry out additional security reviews — keeping new functionality safe and reliable.

Audits, Penetration Testing and ISO 27001 Certification

Security is an ongoing effort.
We regularly perform peer reviews, penetration tests and both internal and external audits of our Information Security Management System (ISMS).

vPlan is officially ISO 27001 certified — the international standard for information security.
This means we meet strict security standards in a consistent and verifiable way.

See the certificate at vplan.com/security

Flexible User Roles and Access Control

In vPlan, you decide who gets access to what.
With flexible roles and permissions, only the right people can see or change specific data — keeping your information safe inside your team.

Privacy — You Stay in Control

At vPlan, privacy is a core principle. You remain the owner of your data at all times.
We only process what is necessary to operate the platform, and we never share anything with third parties without your permission.

All integrations with other tools use secure APIs, and our privacy policy is fully GDPR-compliant.

Read more in our Privacy Policy

Resilient, Transparent and Future-Proof

Our systems for threat detection, logging and alerts continuously monitor for suspicious activity.
If an incident occurs, our security team acts immediately, following clear procedures and open communication.

For us, security isn’t a one-time task — it’s a continuous promise.

Security Is Not a Luxury — It’s Our Standard

At vPlan, we combine ease of use with robust security.
Whether you’re planning, collaborating or managing projects, you can trust that your data is safe — and will stay that way.

You focus on productivity. We keep everything running securely in the background.

Let’s do more — safely, reliably and with confidence.

🚀 Ready to work securely?
Want to experience how secure and efficient working with vPlan can be?
Try it free at vplan.com/en/create-account