Security & Compliance

Enterprise-Grade Security for Human Services, Healthcare, and Government

planstreet-trust-center

At PlanStreet protecting your data is one of our highest priorities.

At PlanStreet, Organizations trust us to manage sensitive client, health, housing, financial, and program information every day. That's why security, privacy, and compliance are built into every layer of the PlanStreet platform.

From secure cloud infrastructure and role-based access controls to independent security audits and continuous monitoring, PlanStreet is designed to help organizations confidently protect the information of the communities they serve.

FedRAMP
FedRAMP Moderate Ready
CJIS
Compliant with the Criminal Justice Information Services (CJIS) Security Policy for handling criminal justice information.
CCPA
Compliant with the California Consumer Privacy Act (CCPA) for consumer data privacy and rights.
FERPA
Compliant with the Family Educational Rights and Privacy Act (FERPA) for protecting student education records.
HIPAA
Compliant with the Health Insurance Portability and Accountability Act (HIPAA) for safeguarding protected health information.
TXRAMP
Compliant with the Texas Risk and Authorization Management Program (TX-RAMP) Level 2 requirements for secure cloud services used by Texas agencies.
SOC 2 Type 2
SOC 2 Type II Service Organization

Trust Center

Security transparency is an important part of our commitment to customers.

The PlanStreet Trust Center provides prospective and existing customers with access to security documentation, compliance information, policies, certifications, and vendor security resources.

Through our Trust Center you can:

  • Request the SOC 2 Type II Report
  • Review compliance documentation
  • Access security policies
  • View penetration testing summaries
  • Review vulnerability management practices
  • View our subprocessor list
  • Complete vendor security reviews
  • Monitor security status

Security Built into Every Layer

PlanStreet combines enterprise-grade cloud infrastructure with layered application security to protect sensitive information.

Cloud Infrastructure

Microsoft Azure, redundancy, disaster recovery.

Encryption

Data at rest and in transit, and secure API communications.

Role-Based Access Controls

SSO support, Microsoft Entra ID integration, Google authentication.

Secure Development

Code reviews, vulnerability management, security testing.

Continuous Protection

Monitoring, backups, and incident response procedures.

Customer Security Support

Security reviews, compliance documentation, and shared responsibility.

Questions About
Security or Compliance?

Whether you're completing a vendor security assessment, evaluating compliance requirements, or reviewing our security program, our team is here to help.

Schedule an introductory call