Projectant is built with security as its primary requirement. We leverage Google's global enterprise infrastructure to provide a level of security typically reserved for large corporations.
Every project, user profile, and file attachment is isolated. We enforce strict Firestore & Cloud Storage Security Rules with cross-service membership checks (`firestore.get()`) so only verified project members can read or upload project data and attachments.
Data is protected by 256-bit AES encryption at rest and TLS 1.2/1.3 (HTTPS) in transit, reinforced by enterprise HTTP security headers (`Strict-Transport-Security`, `X-Frame-Options: DENY`, `X-Content-Type-Options: nosniff`, and `Referrer-Policy`).
Your payment details never touch our servers. We use Stripe, a PCI Level 1 Service Provider. We only store a read-only subscription status synced via verified webhook signatures.
Cloud Firestore eliminates classic SQL injection, all outbound emails sanitize HTML entities against XSS, and Enterprise Webhooks enforce strict HTTPS-only SSRF filtering that blocks private IPs, loopback ranges, and cloud metadata endpoints.
Multi-Factor Authentication, Audit Trail & Data Sovereignty
We believe your data belongs to you. Projectant provides enterprise authentication, auditability, and full export capabilities:
- Authenticator App 2FA (TOTP) & SSO: Users signing in with email and password can enroll any TOTP Authenticator App (Microsoft Authenticator, Google Authenticator, 1Password, or Authy) in Account Settings → Two-Factor Authentication, alongside federated Google and Microsoft Entra ID SSO support.
- Append-Only Audit Logs: Project changes are recorded in an immutable `auditLogs` subcollection where client updates and deletions are cryptographically denied at the database layer.
- Full JSON & CSV Portability: Download complete machine-readable JSON project backups or export budgets, RAID logs, and timesheets to CSV at any time.
- Right to be Forgotten: Deleting your account permanently purges your user profile, owned organization record, and owned projects from Firestore and Firebase Authentication.
Projectant includes both an in-app Notification Center and automated Transactional & Digest Emails so team members never miss critical updates:
- In-App Notification Bell: Located in the top header of your Dashboard and the top-right of your Project Sidebar. It separates items into two tabs:
- Action Required: Live alerts for tasks or sub-tasks that are Overdue, Due Within 48 Hours, Blocked, or Open Questions awaiting your answer.
- Team Updates: Real-time activity feed when tasks are assigned, marked Done, flagged Blocked, or when questions and timesheets are updated.
- Use the "Assigned to me only" switch to focus purely on your own deliverables, or click any alert to jump straight to that item.
- Automated Email Alerts: Whenever a team member assigns a task or sub-task to someone else, marks a task Done or Blocked, or raises/answers a Question, Projectant automatically sends a formatted email alert with a direct link to the project. (Note: Projectant automatically skips emailing you for actions you perform yourself to prevent inbox clutter.)
- 1-Click Overdue & Due-Soon Email Digests: When overdue or due-soon tasks are detected in the Notification Bell under Action Required, click "Send Reminders" to email each assignee a consolidated briefing of all their overdue and upcoming tasks across your projects.
- Customizing Your Email Preferences: Go to Account Settings → Email & Alert Preferences at any time to toggle individual email categories (Assignments, Completions/Blocked, Questions, or Overdue Digests) on or off.
Enterprise PMO projects can broadcast real-time alerts (task assignments, completions, blocked escalations, Q&A updates, and AI Executive Briefings) straight into a Slack, Microsoft Teams, or Discord channel.
1. Connecting a Slack Channel
- In Slack, open the channel where you want Projectant alerts to appear, click the channel name at the top, and select Integrations → Apps (or visit
api.slack.com/apps). - Add the Incoming WebHooks app (or create a Slack App and enable Incoming Webhooks → Activate Incoming Webhooks → Add New Webhook to Workspace).
- Select your target Slack channel and click Allow.
- Copy the generated Webhook URL (it starts with
https://hooks.slack.com/services/...).
2. Connecting a Microsoft Teams Channel
- In Microsoft Teams, hover over the channel where you want updates posted, click the ••• (More options) menu, and select Workflows (or Connectors in classic Teams).
- Search for and select the template "Post to a channel when a webhook request is received" (or Incoming Webhook).
- Name the workflow Projectant PMO Alerts, confirm the Team and Channel, and click Add workflow / Create.
- Copy the generated HTTP POST URL (it typically contains
webhook.office.com,logic.azure.com, orpowerplatform.com).
3. Connecting a Discord Channel (or Custom JSON Webhook)
- In Discord, click the gear icon (Edit Channel) next to your channel, go to Integrations → Webhooks → New Webhook, and click Copy Webhook URL.
- For custom automation tools (Zapier, Make, n8n, or internal servers), copy any HTTPS endpoint URL—Projectant will send a structured JSON payload containing
project,title,details,actor,category,url, andtimestamp.
4. Activating the Webhook in Projectant
- Open your project in Projectant and click Settings at the bottom of the left sidebar (available to the Project Owner).
- Scroll to the Channel Integrations (Slack / Microsoft Teams / Webhook) card.
- Ensure Enable Outbound Channel Alerts is toggled on, and paste your Webhook URL into the input box.
- Click Send Test Alert to verify that the test card appears in your Slack, Teams, or Discord channel, then click Save Integration.
Instead of manually compiling weekly status reports, you can generate an objective Steering Committee briefing from live project telemetry:
- Open your project's Overview page and click AI Executive Status Report in the top-right header (available on Pro & Enterprise).
- Projectant's AI Copilot analyzes your WBS task completion rate, overdue tasks, blocked items, milestones, budget contingency, and open RAID risks/decisions to produce an Overall, Schedule, Budget, and Risk RAG assessment along with Key Highlights, Critical Escalations, and Recommended Next Actions.
- Click Copy Markdown to paste the report into documents, or on the Enterprise plan click Email Stakeholders to automatically send a formatted HTML Executive Briefing email to all project members (and post the summary to your connected Slack/Teams webhook channel).
The "Q & Clarifications" section is designed to capture and resolve uncertainties within your project.
- Raising a Question: Click "Raise Question" to submit a query. You can select whether it is a General project question or specifically Task-related.
- Linking to Tasks: If a question is task-related, you can link it directly to an item from your To-Do list. This helps provide context for why the question is being asked.
- Ownership: You can assign an "Owner" to each question. This person is responsible for hunting down the answer and updating the resolution field.
- Deadline Tracking: Use the "Required Date" field to signal when an answer is needed to avoid project delays.
Accurate budgeting is about more than just listing costs; it's about managing uncertainty and variance.
- Contingency Buffer: In Project Overview, you can set a contingency percentage (Prince2 recommends 10-15%). This is your "insurance policy" against scope creep and unexpected risks.
- Base vs. Contingency: Your dashboard shows your "Base Working Budget." If your actual spend exceeds this, the bar turns orange to warn you that you are consuming your risk buffer.
- Variance Analysis: The "Variance" column in the budget tracker shows the gap between your Allocated (Planned) cost and Actual (Spent) cost.
Inviting a user to your project is a simple one-step process:
- Send the Invitation: In your project, go to the 'People' page. Use the 'Invite Collaborators' form to add the person's email address and click 'Invite'.
An email will be sent to them containing a link. When the user clicks the link, they will be prompted to sign up or log in. If they use the same email address you invited, they will automatically gain access to the project and appear on your dashboard as a project member.
The "People" section allows you to assign roles to users, controlling what they can see and do.
- Owner: The project creator. Has full control over everything, including project settings and permanent deletion. There can only be one owner.
- Admin: Has full edit access to all project content and settings, just like the owner. The only thing an Admin cannot do is permanently delete the project.
- Collaborator: A standard team member. Collaborators can create and edit content like notes, tasks, events, and data tables.
- Contact: This is an informational role only. People assigned as 'Contact' are listed in the 'People' section for reference but have no access to the project itself.
Project deletion is a two-step process to prevent accidental data loss.
- Schedule for Deletion: In 'Project Settings', only the project owner can choose to 'Schedule Project for Deletion'. This marks the project for deletion but does not remove it immediately.
- Recovery Period: Once scheduled, the project enters a 7-day recovery period. It will appear in the "Recently Deleted" section on your main dashboard.
- Permanent Deletion: After 7 days, the project is permanently and irretrievably deleted.