Company NewsJanuary 20, 2021

Planful Attains SOC 2 Type 1 Certification and Enhances GDPR Support

PFrom Planful Team

Your financial data deserves more than a checkbox. Here’s what we’re doing about it.

Finance and accounting teams sit at the center of some of the most sensitive data in any organization, including forecasts, consolidations, workforce costs, and board-level reporting. The systems that house that data carry real responsibility. And as regulatory scrutiny intensifies and AI enters the picture, the bar for what “secure enough” means is rising fast.

At Planful, security and privacy have never been afterthoughts. They’re built into the foundation of how we operate. Today, we’re proud to share two milestones that reflect that commitment.

Learn more about our privacy policy at planful.com/privacy-policy.

SOC 2 Type 1 certification: third-party validation of what we’ve always believed

Planful has been issued a SOC 2 Type 1 certification, an independent, third-party audit that verifies our controls around security, availability, and confidentiality meet the rigorous standards set by the American Institute of Certified Public Accountants (AICPA). This builds on our existing SSAE16 SOC 1 and SOC 2 compliance and adds formal, external validation to what our team has practiced since day one.

What does that mean in practice for your team?

Data in motion is protected using 128-bit encryption and VeriSign/Symantec SSL certificates.
Data at rest is encrypted using Microsoft SQL Server Transparent Data Encryption (TDE).
Our master data management capabilities, including validation checks, data mapping, and role-based access controls, ensure that data flowing through Planful is accurate, protected, and only accessible to the right people.

Rules built into our integration processes automatically flag missing master data and validate that trial balances reconcile correctly, controls that matter deeply to finance teams operating under tight close cycles and audit requirements.

Enhanced GDPR support: built for global finance teams

For customers operating in or with the European Union, Planful now offers a cloud presence within Europe, giving EU-based customers the ability to host their data entirely within EU borders.

This is a requirement that matters increasingly to both legal and finance teams navigating cross-border data obligations under GDPR. Our privacy documentation covers how we handle and protect personal data across the full Planful platform, including how we manage data across jurisdictions for customers subject to GDPR requirements.

Why SOC 2 certification matters for finance leaders

Security certifications can feel like IT concerns. But for CFOs, VPs of Finance, and Finance Directors, they’re directly relevant to three things that matter to your role: risk, trust, and readiness.

Risk: Finance systems that don’t meet compliance standards, including SOC 2, GDPR, and increasingly the EU AI Act, expose organizations to audit findings, regulatory penalties, and reputational harm. Knowing your financial planning and consolidation platform has passed an independent security review removes one more risk from your plate.
Trust: When you present to the board, close the books, or share consolidated financials across the organization, the integrity of that data matters. Planful’s security controls, including encryption, access governance, and output validation, are designed so you can stand behind the numbers with confidence.
Readiness: As AI becomes part of the finance workflow, the question of where your data goes and who controls it becomes critical. Planful’s security-first foundation means you can explore AI-powered capabilities without compromising the governance standards your organization depends on.

Security is a commitment, not a milestone. These certifications reflect where we are today, and they’re the foundation for everything we’re building next.

_______________________________________

Planful is a platform you can trust.

See it for yourself. Get a demo today.