Enterprise-Grade Security, Built on Zero-Trust Architecture
Projectant safeguards your sensitive PMO portfolios, financial budgets, RAID logs, and executive reports with Google Cloud infrastructure, database-level tenant isolation, and strict cryptographic access controls.
SOC 1 / SOC 2 / SOC 3
Google Cloud Infrastructure
ISO/IEC 27001 & 27018
Certified Data Centers
AES-256 Encryption
Data Encrypted at Rest
TLS 1.3 + HSTS
Encrypted in Transit
PCI DSS Level 1
Stripe Billing Infrastructure
UK GDPR & GDPR Ready
Full Data Portability & Erasure
Defense-in-Depth Security Architecture
Every layer of Projectant—from physical data centers to individual database queries—is engineered to protect enterprise confidentiality.
- Hosted in ISO/IEC 27001, ISO 27017, ISO 27018, and SOC 1/2/3 certified Google data centers.
- Multi-zone redundancy with automated failover and high-availability serverless scaling.
- 24/7 physical security, biometric access controls, and continuous infrastructure monitoring by Google.
- Automated edge DDoS mitigation and bot-probe blocking via middleware inspection.
- At Rest: All Firestore documents and Cloud Storage attachments are encrypted automatically using AES-256.
- In Transit: All traffic is strictly served over HTTPS using TLS 1.2/1.3 with HTTP Strict Transport Security (HSTS preload).
- Hardened HTTP Headers: Enforces X-Frame-Options: DENY (anti-clickjacking), X-Content-Type-Options: nosniff, and strict Referrer-Policy.
- Zero Plaintext Secrets: All API keys and service credentials are isolated in server-side Secret Manager stores.
- Declarative Firestore & Storage Security Rules evaluate every read/write request against the caller’s verified JWT token.
- Cross-Service Verification: File storage rules perform live database lookups (firestore.get()) to verify project membership before serving or accepting any attachment.
- 4-Tier Role-Based Access Control (RBAC): Granular Owner, Admin, Collaborator, and Viewer permissions per project.
- Strict schema validation rules enforce field type safety, string bounds, and immutable ownership fields.
- TOTP Authenticator App 2FA: Native support for Microsoft Authenticator, Google Authenticator, 1Password, and Authy.
- Cryptographically Signed Trusted Devices: Option to trust computers for 30 days with SHA-256 hashed device tokens, secure HttpOnly cookies, and instant remote revocation.
- Mandatory Step-Up Verification: Sensitive actions—such as changing passwords or modifying 2FA settings—require re-authentication and MFA code verification.
- Out-of-Band Security Alerts: Instant email notifications are dispatched whenever a password is changed.
- Corporate SSO: Support for Google Workspace and Microsoft Entra ID (OAuth 2.0 / OpenID Connect) sign-in.
- No Training on Customer Data: Your project descriptions, risks, financials, and notes are NEVER used to train public or foundation AI models.
- Ephemeral Execution: AI prompts are processed statelessly in memory via Google Genkit / Gemini Enterprise APIs and returned directly to your workspace.
- User-Initiated Only: AI features only run when explicitly triggered by an authorized project member.
- Role-Restricted: AI generation and executive email dispatches respect workspace RBAC permissions.
- Append-Only Audit Trail: Project modifications are recorded in an immutable auditLogs subcollection where client updates and deletions are denied at the database level.
- Actor Attribution: Every log records the verified user UID, email address, timestamp, action category, and change details.
- Webhook SSRF Protection: Outbound Slack, MS Teams, and Discord webhooks enforce HTTPS-only URLs and block private IP ranges, loopback addresses, and cloud metadata endpoints.
- XSS & Injection Defense: Parameterized NoSQL queries eliminate SQL injection, and all outbound HTML emails sanitize dynamic content.
Subprocessor & Data Handling Transparency
We partner exclusively with industry-leading, audited infrastructure providers to process and store application data.
| Provider | Role & Data Processed | Certifications & Controls | Infrastructure |
|---|---|---|---|
| Google Cloud / Firebase | Application hosting, NoSQL database (Firestore), file storage, and identity authentication | SOC 1/2/3, ISO 27001/27017/27018, AES-256, TLS 1.3 | Google Global Cloud Infrastructure |
| Google Cloud Vertex AI / Gemini API | AI Task Breakdown, content summarization, and Executive Steering Committee briefings | Zero data training guarantee, TLS 1.3 encrypted API transport | Google Cloud Platform |
| Stripe, Inc. | Subscription billing, invoicing, and payment processing (card data never touches Projectant) | PCI DSS Level 1 Certified Service Provider, SOC 1/2 | United States / Global Edge |
| Resend | Transactional security emails, project invitations, and task alert notifications | TLS encryption, DKIM / SPF / DMARC domain authentication (projectant.co.uk) | AWS Cloud Infrastructure |
Enterprise IT & InfoSec FAQ
Direct answers to standard security assessment questions from IT Directors, CISOs, and Procurement teams.
No. Every project and organization is logically isolated at the Google Cloud Firestore and Cloud Storage engine layer. Even if a malicious actor attempted to query a project ID directly via API, Firebase Security Rules verify that request.auth.uid is an explicit member of that project before reading a single byte.
Never. Projectant uses Google Genkit with commercial Gemini API endpoints. Under Google Cloud data governance terms, customer inputs and outputs are strictly confidential and are never used to train, fine-tune, or improve foundation models for other customers.
Projectant never stores raw or reversible passwords. Authentication is handled by Firebase Authentication (Google Identity Platform) using industry-standard salted cryptographic hashing (scrypt) and short-lived RS256 signed JSON Web Tokens (JWTs). Users can enforce TOTP 2FA, and any password update requires both current password re-authentication, 2FA verification, and triggers an immediate security confirmation email.
No. All payment details are collected and processed directly by Stripe (a PCI DSS Level 1 certified processor). Projectant only stores a read-only subscription status synchronized via cryptographically signed Stripe webhooks.
Yes. You retain 100% ownership of your data. Project Owners can export a complete, machine-readable JSON backup of their entire project workspace (or export tables, budgets, RAID logs, and timesheets to CSV) at any time. Deleting a project or account permanently purges the associated records and cloud storage folders.
All outbound webhook dispatches pass through a server-side validator that enforces HTTPS-only endpoints, validates payload schemas, and blocks Server-Side Request Forgery (SSRF) against localhost, loopback, link-local, private RFC1918 networks, and cloud metadata IPs.
We believe enterprise customers should never be locked in. Project Owners can export complete, structured JSON backups of their projects or export financial budgets, RAID logs, and timesheets to CSV on demand.
If you choose to close your account or delete a workspace, all associated Firestore records and Cloud Storage attachments are permanently purged.