Is this your company? Buyers are checking Planning Pod here. Claim planningpod.com free to control the listing, earn the badge buyers trust, and see who's evaluating you.
Claim free
Planning Pod
Trust level
Listed
Unverified
Listed
Domain
Report
Live
Sourced from public information. Not yet verified by the company.
Planning Pod is SOC 2 Type II compliant.
About
Security is at the heart of everything we do—our software, team, infrastructure, and processes—so you can feel confident knowing your data is always safe.
Compliance & infrastructure
Data handled
Customer personally identifiable informationEmployee personally identifiable informationCredit card informationPersonal health information
Compliance leadership
The person who leads Planning Pod's SOC 2 isn't listed yet. Claim this profile to add it.
Penetration test
Unknown. Planning Pod's penetration test vendor isn't listed yet.
Claim this profile to add it.
This listing is partial
3/11 details · 27%SOC2C shows the verified essentials. 8 details are not yet provided by the company. Trust centers list more, so we invite the owner to fill the gaps here.
- Auditorraises trustAdd the CPA firm that issued your SOC 2 so buyers can verify who signed it.
- Report dateraises trustAdd your most recent report period so buyers see how current your SOC 2 is.
- Renewal dateAdd your renewal window so buyers know your coverage is active.
- Other certificationsList your other frameworks (ISO 27001, HIPAA, PCI DSS) the way your trust center does.
- DocumentsList the documents you share (SOC 2 report, SOC 3, pen-test summary, DPA) and whether each is public or on request.
- SubprocessorsList your subprocessors so buyers can assess fourth-party risk, the way your trust center does.
- HostingAdd where you host (AWS, GCP, Azure) and data residency.
- Security controlsConfirm key controls (encryption, MFA/SSO, annual pen test, BCP/DR) buyers screen for.
Claim free to control your listing
Verify your work email to take ownership, earn the badge buyers trust, and add the details that win deals.
Frequently asked
Is Planning Pod SOC 2 compliant?
Planning Pod is SOC 2 Type II compliant. On SOC2C this listing is Listed.
Is Planning Pod SOC 2 Type I or Type II?
Planning Pod is SOC 2 Type II compliant. A Type II report covers how security controls operated over a period (typically 3 to 12 months), a stronger signal than a point-in-time Type I.
Can I use Planning Pod's SOC 2 for a vendor risk assessment?
Yes. Planning Pod's SOC 2 status, frameworks, auditor, and renewal timing are on SOC2C for vendor risk and security reviews. Request the underlying report through SOC2C to complete your third-party risk file.
Is Planning Pod penetration tested?
Planning Pod hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests; the company can add who performed theirs.
Is Planning Pod secure?
Security isn't a single yes/no, but Planning Pod is SOC 2 Type II compliant. SOC2C verifies its compliance posture and shows how strongly each fact is proven.
Does Planning Pod have a bug bounty or vulnerability disclosure program?
Planning Pod hasn't listed a bug bounty or vulnerability disclosure program on SOC2C. Many companies accept security reports at security@planningpod.com or via a /security page (Planning Pod lists a security contact).
Who are Planning Pod's subprocessors?
Planning Pod's subprocessors aren't listed on SOC2C yet. The company can add them so buyers can assess fourth-party risk.
Where does Planning Pod host or store data?
Planning Pod's hosting and data-residency details aren't listed on SOC2C yet. The company can add where it hosts (AWS, GCP, Azure) and which data it handles.
Where is Planning Pod's trust center or security page?
Planning Pod's trust center is at https://trust.planningpod.com. Its verified SOC 2 status, frameworks, and documents are summarized on its SOC2C profile.
Answers published by Planning Pod
Reproduced from Planning Pod's own trust center. These are the company's statements about its security practices — SOC2C has not tested or verified them, and they may have changed since we last read the page. Check the source ↗
Do you encrypt data at rest?
YES! Leveraging Amazon Web Services (AWS), encryption at rest is managed seamlessly using AWS Key Management Service (KMS) and other built-in encryption features. Data stored in AWS services is encrypted using AES-256 encryption. AWS KMS handles the generation and management of encryption keys, ensuring they are stored securely and rotated regularly.
Is Planning Pod SOC 2 Type 2 compliant?
Yes. Planning Pod has successfully completed a SOC 2 Type II audit in accordance with the AICPA Trust Services Criteria. Our controls were independently audited by Johanson Group LLP. Copies of our SOC 2 Type II report are available upon request through this Trust Center.
Where are your servers located?
Planning Pod's infrastructure is housed within the Amazon Web Services Environment (AWS). We utilize the US-West and US-East AWS regions as primary and disaster recovery regions. These regions ensure recovery of data and assets even in the event of a physical issue occuring in a single region.
Do you support Single Sign-On (SSO)?
Not at the moment, but we expect to support SSO sometime in 2025.
Do you support Multi-Factor Authentication?
YES! MFA can be enabled at any time, utilizing either email or SMS as the secondary verification source.
How does the Planning Pod email integration work?
Planning Pod’s email integrations (Outlook, Exchange, Google Workspace, etc.) are powered by Nylas. When you connect your email, Planning Pod only requests the minimum access needed to make the integration work — following the Principle of Least Privilege, a best practice for keeping your data secure. We only need permission to read incoming emails and send emails on your behalf. What Happens Behind the Scenes When a new email arrives in your account, Nylas securely notifies Planning Pod. Our system then runs a quick, automated check to decide if the message belongs in your Planning Pod Communications Inbox. - Is it in your Inbox? (Drafts, Sent, or Archived emails are ignored.) - Is the sender a contact in Planning Pod? (If yes, the email is added to your Communications Inbox; if not, it’s ignored.) Privacy and Security Although the system can technically access your mailbox to perform these checks, no one at Planning Pod ever views, stores, or saves your emails. Everything happens automatically — Nylas alerts us, we check if the email is relevant, and then either ignore it or import it. The permissions (or “scopes”) granted through Nylas are limited strictly to what’s needed for functionality. Your privacy and data security are always our top priority. Permissions (Scopes) required by each service: Microsoft Exchange - `ews.message` - `ews.calendars` - `ews.contacts` Microsoft Outlook (Office 365) - `offline_access (required)` - `profile (required)` - `userinfo.profile` - `openid (required)` - `User.Read (required)` - `Mail.Read` - `Mail.ReadWrite` - `Mail.Send` - `Mail.Read.Shared` - `Mail.ReadWrite.Shared` - `Mail.Send.Shared` Google Workspace - `gmail.compose` - `gmail.modify` - `gmail.send` - `userinfo.profile (required)` - `openid (required)` - `userinfo.email (required)`
Business & Industrial peers that completed SOC 2
Newsworthy.ai
newsworthy.ai · United States · Business & Industrial
SOC 2 Type IIRenewal not public
Octopus Deploy
octopus.com · United Kingdom · Business & Industrial
SOC 2 Type IIRenewal not public
1099-Prep
1099-prep.com · United States · Business & Industrial
SOC 2 Type IRenewal not public
Ask Ai
ask-ai.com · Business & Industrial
SOC 2 Type IIRenewal not public