Security at iForecastPlan

Encryption

Data is encrypted in transit with TLS and encrypted at rest. Traffic to the platform and this website runs over HTTPS, and secrets are stored in managed, access-controlled stores rather than in application code.

Access control

We follow the principle of least privilege. Access to production systems is limited to staff who need it, protected by strong authentication, and reviewed regularly. Within the platform, role-based permissions keep each user to the data they are meant to see.

Hosting and isolation

The platform runs on reputable cloud infrastructure with network isolation, managed firewalls and regular patching. Customer environments are logically separated so that one tenant cannot reach another’s data.

Data ownership

Your data is yours. We process it only to provide the service, never sell it, and can delete or export it on request. Evaluation data can be removed at the end of a trial. See our Privacy Policy for the detail.

Monitoring and backups

We log and monitor for unusual activity, and take regular, encrypted backups so data can be recovered if something goes wrong. Recovery procedures are tested rather than assumed.

Security is a practice, not a checkbox. We keep reviewing how we build and run iForecastPlan as the threat landscape changes.

Responsible disclosure

If you believe you have found a vulnerability, please tell us before sharing it publicly. Email info@vedanshis.com with the details and steps to reproduce. We will acknowledge your report, investigate, and keep you updated. We are grateful to researchers who help us keep customers safe.

Questions from your security team

Running a vendor review or need answers to a security questionnaire? We are happy to help. Reach out and we will work through your requirements.