Security and AI governance
Security for your financial data
Encryption in transit and at rest, per-person permissions, periods that really close and an AI bound by the same rules as your team.
Aurora governance
Aurora follows the same rules as your team.
Available
- Reads with each person's permissions.
- Writes under the same rules: closed periods and locks.
- What it writes is applied only with your approval.
- Figures with their source; anything unverified, flagged.
- Enabled per organisation.
- Declared AI provider.
- Controls aligned with SOC 2 and ISO 27001.
Early access
- A record of every Aurora run.
Controls
Security in every layer of the model
The same controls protect your team's work and Aurora's.
- 01
Encryption in transit and at rest
Your financial data travels and is stored encrypted.
- 02
Role and per-person permissions
Define who can view, edit or approve each part of the model.
- 03
Approval record
Each budget version is approved with its justification, and there is a record of who approved what.
- 04
Period locking
A closed period stays closed: nobody writes to it, Aurora included.
- 05
Aurora with your permissions
Aurora reads with each person's permissions, and what it writes is applied only with their approval.
- 06
AI enabled per organisation
Aurora is enabled per organisation, at each customer's request, and the AI provider is declared.
Compliance
Controls aligned with recognised standards
OnePlan is designed to help you meet your obligations. In the demo we go through the requirements of your case with you.
Standards we follow
OnePlan is designed and operated with controls aligned with SOC 2 and ISO 27001.
- SOC 2Security and data protection controls designed around the SOC 2 Trust Services Criteria.Aligned
- GDPRThe European data protection regulation applies to what we process. The website is covered by the Privacy policy; your data in the application, by your contract and in the demo.Applicable
- ISO 27001International standard for information security management.Aligned
Controls aligned with SOC 2
We design and operate OnePlan following the SOC 2 Trust Services Criteria: Security, Availability, Processing Integrity, Confidentiality and Privacy.
- Per-person permissions
- Period locking
- Approval record
- Encryption in transit and at rest
GDPR and privacy
OnePlan processes data for companies subject to the GDPR. In the demo we explain how your data is processed and which AI provider Aurora uses.
Want to review security with us?
Book a demo focused on security and AI governance, with your team's questions.
Questions? Write to us at sales@oneplan.tech