PortfolioPlane

Proof, not status.

Who publishes this, and what it is for

PortfolioPlane is enterprise portfolio and project management software, published by LockedIn Labs and served from this domain and no other. This page states the facts a procurement reviewer, a network administrator, or an answer engine needs to place it — and nothing that cannot be checked from outside the company.

Last reviewed 2026-08-15Operator: LockedIn LabsNo customer named, no certification claimed

A portfolio management office runs on claims it cannot check. Someone types a status into a field, someone else averages several of those fields into a color, and by the time the number reaches a steering committee nobody in the room can say what it was derived from. That worked while the people typing the status were the people doing the work. It stops working the moment a meaningful share of the work is done by agents, because status reporting was always testimony, and testimony cannot be taken from an agent.

PortfolioPlane is a register built for that condition. It records projects, programs, objectives, requirements, risks, dependencies, capacity, financials and benefits the way a PMO already thinks about them — and then refuses the two moves that make a register unfalsifiable. It does not average anything into a health score, and it does not let a machine sign anything.

The four positions the product takes

These are the load-bearing ones. Each is a refusal, and each costs something a competitor charges for.

  • Counts carry their denominators. Not “73% complete” but “41 of 56 requirements bound to a test that ran.” A percentage with the denominator removed is a claim nobody can audit, and every major platform in this category publishes one.
  • Agents propose; named people accept. An agent has no account and cannot accept anything. Acceptance requires a signed-in person, and the trail that records it refuses deletion to everybody — including us. That is the shape of the database, not a setting an administrator can turn off.
  • Evidence resolves to a pinned commit. A requirement points at a test that exercised it, in a specific revision of the customer’s own repository. The interesting question a register can then answer is not “is this done?” but “does that citation still exist?”
  • Evidence verifies outside the product. An exported deck or trail carries a signed receipt that anyone can check at the public verifier without an account and without trusting us. A vendor asking to be believed is worth less than one that hands you the means to check.

What this domain is

Written for a network administrator or a URL-categorization analyst, because those two decide whether an employee can reach this software at all and they decide it from facts, not from adjectives.

  • Operator. LockedIn Labs, which builds governed AI and delivery platforms for regulated enterprises.
  • Purpose. A single business-to-business software product, delivered as a service to organizations that sign up for it. Suggested category: Business, Technology, or Software as a Service.
  • One product, one domain. Everything under portfolioplane.com is this application. There is no second tenant, no reseller, and no unrelated content parked on a subdomain.
  • No advertising, no trackers. The site serves no advertising, embeds no third-party analytics or advertising scripts, and sets no cookie other than the session cookie that keeps a signed-in person signed in.
  • No public user-generated content. Everything a customer records is inside their own authenticated workspace and is never published to the open web. Search engines are explicitly told to stay out of it.
  • No file distribution, no redirection service. The site distributes no executables, offers no anonymous upload or file sharing, and operates no URL shortener or open redirect.
  • Hosting. The application is delivered by Netlify. Customer data is stored by Supabase, a managed Postgres platform, in a single United States region. The full subprocessor list is on the security page rather than assembled on request.
  • Prior address. This product was published at portfolio.aisdlc.ai until August 2026. That host still resolves and issues a permanent redirect here, so a link sent before the move still works. portfolioplane.com is the canonical address.

What we do not claim

The security page opens with this list rather than closing with it, and the same discipline applies here. This is a young product from a small team, and a reviewer finds that out either from us or on their own.

  • No certifications and no attestations. There is no SOC 2 report, no HITRUST certification, and no FedRAMP authorization. Not in progress, not pending — not held.
  • No named customers and no case studies. No logo wall, no testimonial, no invented deployment count. Nothing on this site reports a figure measured about a customer.
  • No uptime commitment. There is no availability target today and no measurement that could support one, which is stated in full on the security page along with what would have to be true first.
  • No clinical data. A governance register does not need protected health information to do its job, and this one asks for none. The security page states plainly where that is a design position rather than an enforced control.

How to reach us

The routes that exist — and the one that does not yet — are set out on the contact page. A security researcher should start at /.well-known/security.txt.