Security

Our Security Approach

Planstead uses widely adopted web-security safeguards: authenticated account access, household-scoped permissions, private file storage and encrypted web connections. These layers work together to protect household information.

Account Protection

Account access uses verified email accounts and password sign-in or recovery. Email confirmation and password recovery use a Continue step before an email link is consumed, helping protect links from automatic email scanners. Authentication requests are subject to provider rate limits.

Use a unique password, protect access to your email and sign out on shared devices. A signup request is not a password reset. We do not ask you to send a password or verification link to support.

Household Access

Household membership and role permissions are checked by the application and database-enforced household boundaries. Owner, Admin, Contributor and Viewer roles have different capabilities. A Viewer cannot edit household planning information.

Naming a beneficiary, guardian or professional contact does not give that person an account or access. Review the permissions before inviting someone; an application role does not create legal authority.

Encrypted Web Connections

The public service uses HTTPS. Browser protections include a Content Security Policy, frame restrictions, content-type protections and a restrictive permissions policy. These reduce specific browser risks; they are not a guarantee against every attack.

Private Documents and Media

Household files use private storage, with authorization checked before access. Access is checked against household authorization; customer files are not offered as public objects. Keep passwords, access codes and unnecessary sensitive identifiers out of files as well as form fields.

A copy downloaded by an authorized person can exist outside Planstead. Keep required originals and an independent copy of essential records. Planstead is not a password manager.

Support and Privileged Access

Ordinary support tools are limited by their permissions. Separately, authorized technical personnel may have infrastructure access for operation, security, recovery or legal needs. We do not claim that administrators are technically unable to access stored information.

Operational and security records support troubleshooting and selected events. Planstead does not claim a complete audit trail of every action or access.

Service Providers

Report a Security Concern

Contact support@myplanstead.com with “Security concern” in the subject. Describe the affected page, time and behavior without sending passwords, active links, private keys or customer documents. Do not access another household or disrupt the service to demonstrate an issue.

Security concerns may require investigation, access restrictions or recovery work. Any legally required notices depend on the facts and applicable law. This page does not promise a response deadline, continuous staffed monitoring or a particular recovery time.

Security Transparency

Planstead does not currently represent itself as SOC 2 certified or HIPAA compliant. Our security descriptions distinguish safeguards available today from future capabilities.