Security at Planet Price

At Planet Price, we are deeply committed to protecting your data and ensuring the integrity of our platform. Security is foundational to how we build, operate, and continuously improve our systems. We follow industry best practices and maintain a formal security program aligned with SOC 2 requirements. Our team actively monitors our environment and regularly evaluates our controls to maintain a secure and resilient platform.

Visit our Trust Centre https://trust.planetprice.io

We’re serious about security

Planet Price maintains a security program designed to safeguard customer data, keep the platform resilient, and ensure trust. Our controls align to SOC 2, and we continuously review and enhance our security posture.

Infrastructure & Data Protection

  • ‍Planet Price is hosted on Microsoft Azure, leveraging Azure’s secure, globally recognized cloud infrastructure.
  • All data is encrypted at rest and in transit.
    - Data at rest is encrypted using AES-256 with Azure-managed encryption.
    - All data in transit is encrypted using TLS 1.2+.Encryption keys and secrets are managed securely using Azure Key Vault.
  • Sensitive data is stored using Azure services that include native role-based access control (RBAC) and audit logging.
  • Access to production systems is restricted, monitored, and protected using multi-factor authentication, Just-In-Time access, and least-privilege principles.

Scalability & Availability

  • Our platform uses serverless and containerized services within Azure, enabling automatic scaling to handle increased workload demands.
  • The system is deployed using a redundant, highly available architecture designed for resilience and continuity.
  • We maintain automated infrastructure provisioning and configuration management to ensure consistency and reliability.

Monitoring, Audits & Vulnerability Management

  • We engage independent third-party penetration testers to assess our platform and infrastructure.
  • Continuous vulnerability scanning is performed across our application and supporting services.Code changes undergo review and automated security scanning as part of our Secure Development Lifecycle (SDL).
  • We leverage Azure Monitor and Defender for Cloud for real-time detection, alerting, and incident response support.

Reporting a Security Concern

We take responsible disclosure seriously. If you believe you’ve discovered a potential security issue:

‍Email: security@planetprice.ioWe will review your report promptly.

View our Trust page at trust.planetprice.io to find out more about the controls and policies we have in place.