Security

Honest account of how PlanKeep handles your data — written for buyers, not auditors.

Your data, your customers: we work from data your shop lawfully holds on its own customers — the agreement export you send us. It's used to produce your reports and drafts, and nothing else.
Drafts first, always: no customer is ever contacted without your written approval, per batch, from an address you control.
Payments: checkout and card handling are done by Stripe; card numbers never touch our servers.
No platform credentials: PlanKeep works from a CSV export — we never need your Jobber, Housecall Pro, or ServiceTitan login.
Hosted workspace API: API keys are stored only as SHA-256 hashes and are shown exactly once, on the claim page after checkout; a suspended workspace can still read its data.

We are not SOC 2 certified and have not completed a third-party penetration test. We'll say so plainly until we have.
Deferred-revenue schedules are arithmetic, not tax advice; auto-renewal law specifics are for your CPA/counsel to confirm.

Email don+plankeep@lifeofmorr.com with details. We aim to acknowledge within 2 business days.