Security

Your customers' prices, your employees' files, your invoices — Plantlinen holds the data your laundry runs on. Here is how we protect it, in plain terms and without marketing words.

Built by a software house that also does cybersecurity

Plantlinen comes from YOMACAMA, a software house with 25 years in software services and cybersecurity consulting. In that work a system is judged on three things: it does not go down, every action is traceable, and nobody sees what they are not entitled to see. Plantlinen was engineered to the same standard.

Your data is yours, and it is isolated

• One database schema per laundry. Each customer runs in its own isolated schema. There is no shared table where one laundry's rows sit next to another's; a query for one laundry cannot reach another's data by design.
• You own it, you can take it. Full export at any time and on cancellation. We never sell, share or mine customer data.
• Data lives in the United States. Application and database are hosted on enterprise cloud infrastructure in the US (AWS regions), with automated daily backups and point-in-time recovery.

Encrypted everywhere

• In transit: every connection — browser, portal, truck app, API — is TLS-encrypted. Plain HTTP is not served.
• At rest: the database and its backups are encrypted on disk by the provider.
• Credentials: passwords are stored only as salted hashes (never recoverable, not even by us); integration secrets (messaging, e-mail, AI) are kept as environment secrets, never in the codebase.

Sign-in protection

• Two-factor authentication for staff accounts: a code from an authenticator app (Google/Microsoft Authenticator, Authy) on top of the password. A stolen password alone does not open the system.
• Brute-force lockout. Five failed attempts lock the account for 10 minutes; five more for 30; five more for an hour; after that the account is blocked until an administrator sets a new password. Every attempt is logged.
• Password policy. At least 10 characters with uppercase, lowercase, a number and a symbol — enforced on every password set in the system, staff and portal alike.
• Hardened sessions. HttpOnly, Secure, SameSite cookies; cross-site request forgery blocked by origin verification; strict security headers (HSTS, CSP, no framing).

Who can see what

• Role-based permissions, per laundry. Owner, manager, finance, office, production, driver — and custom roles. Each screen and action checks a named permission; a driver sees his route, not the price list.
• Audit log, append-only. Every sign-in (successful or not), password change, permission change, price change, invoice, payment, billing decision, employee change and settings change is recorded with who and when. Nobody — not even an administrator — can edit or delete an entry. Owners see it under Settings → Audit log.
• Customer portal accounts are separate from staff accounts. A hotel's user sees only that hotel's orders, invoices and inventory.
• Sensitive employee documents (IDs, work-authorization papers) are restricted to the HR permission and are never exposed to the portal or the apps.

Engineering discipline

• Modular architecture with enforced boundaries. Each module owns its tables; cross-module access goes through defined interfaces, verified automatically on every release — so a change in one area cannot silently reach another's data.
• Every release passes an automated end-to-end test suite covering login, permissions, portal, orders, production, logistics, invoicing, complaints and maintenance before it can be deployed.
• No card numbers, no bank accounts stored. Payments are recorded as references; card data never touches Plantlinen.
• Truck tracking is scoped. The tracker records position and driving events only while a route is active, and nothing else on the phone.

What we will do for you

We answer security questionnaires from your customers' IT departments, sign a data-processing agreement, and can provide a per-laundry data export on request. If you find a vulnerability, write to security@plantlinen.com — we respond within one business day.