Plans are the client's work product. We treat them that way.
This page says what ChkPlan does with a plan set from upload to issued letter, in the words we would use in a contract. Anything not listed here, ask.
Hosting
Hosted in the United States (Virginia region). Each customer runs in its own environment with its own encrypted storage volume. No shared databases between customers.
Encryption
TLS on every connection; HTTPS is forced. Storage volumes are encrypted at rest. Session and reset secrets are held as platform secrets, never in code or configuration files.
Accounts and sessions
Invitation only. Roles: administrator, reviewer, user. Sessions are server-side records that expire after seven days and after a day idle, and an administrator can end any session. Password reset tokens are single-use and expire in thirty minutes; a reset signs out every other session.
Model use
Sheet images and extracted text are sent to the model provider's API to evaluate checklist items. The provider's API terms exclude training on customer data and retain requests for a short period for abuse monitoring. ChkPlan records every request and response in the run's own audit folder, so the review is reproducible without the provider.
Before any model call
Each PDF is checked for integrity, encryption, page count and a readable text layer. Encrypted or corrupt files stop before any sheet leaves the environment. Duplicate, unreadable and unnumbered sheets are reported as package findings.
Audit trail
Every verdict, confidence, model, timestamp, reviewer decision and override is recorded per rule. Decisions form a hash-chained log; every issued file (letter, spreadsheet, PDF) is recorded with its SHA-256 so a later copy can be checked against what was issued.
Retention and deletion
Runs stay in your environment until you delete them. On request we delete a customer's environment, including the storage volume, and confirm in writing. Pilots that cannot send plans off-site can run ChkPlan on a single machine under the firm's control.
Access by us
ChkPlan staff do not open customer plan sets except to resolve a support request you have made, and that access is logged like any other session.
What we will put in writing
Customer plan sets are confidential work product. They are not used to train any model, not shared with other customers, and not used for marketing or product screenshots. Every screen on this site shows a synthetic demonstration plan.
What we do not yet have
ChkPlan does not hold a SOC 2 report today. We will say so plainly in any security questionnaire, and we will share our controls, our hosting provider's attestations and our audit design with any customer who asks.
Reporting a security issue
Write to [email protected]. We acknowledge within two business days.