You can control how users access Anaplan data through standard web-based login and Single Sign-on. The logout and timeout behaviors ensure users know they've successfully logged out and ensure Anaplan is not left idle and unattended for too long.

Encryption

Data in Anaplan is encrypted using one of the following methods, depending on the status of the data.

• Data in transit uses HTTPS with 2048-bit certificates, using TLS 1.2.
• The session key length is negotiated by the user's browser, which uses the strongest available encryption.
• Data at rest uses AES-256 full disk encryption.

Certifications

The following security and privacy-related frameworks, audits, and certifications are applicable to Anaplan:

• Service Organization Control (SOC) reports
• TRUSTe Privacy Seal
• EU – US Privacy Shield
• Cloud Security Alliance STAR

See our Privacy Shield status on the Privacy Shield Framework website .