Security

At SandPlane, we take the security of your financial data with absolute seriousness. Even as a bootstrapped project, we employ enterprise-grade security practices to ensure your data remains private and secure.

Infrastructure

Our infrastructure is built on world-class providers. We utilize AWS (Amazon Web Services) and Vercel to ensure high availability and physical security of our servers.

Data Isolation

We use Row Level Security (RLS) in our PostgreSQL databases as a defence-in-depth control for strict tenant separation. Application authorisation and tenant-scoped database transactions provide additional isolation controls.

Encryption

All data is encrypted at rest using industry-standard AES-256 encryption. Furthermore, we enforce HTTPS everywhere to ensure all data in transit is encrypted using SSL/TLS.

Secrets Protection

Sensitive information, such as API keys or credentials that you enter into the platform, are additionally encrypted using AES (Advanced Encryption Standard) before being stored in our database. This ensures an additional layer of protection for your most sensitive assets.

Network Security

Our database connections are restricted to our Virtual Private Cloud (VPC) and require SSL. This prevents any direct access from the public internet.

Access Control

We have strict internal rules regarding who can access customer data. Currently, as a solo founder, only I have access, and it is strictly limited to support and maintenance purposes. We follow the principle of least privilege for all internal operations.