PortfolioPlane

Proof, not status.

How to reach us

Routed by what you need rather than by department, because there are not enough of us to have departments. Every route below works today. The one that does not exist yet is named at the bottom rather than left for you to discover by writing to an address that bounces.

Last reviewed 2026-08-15Published by LockedIn Labs

You want to evaluate the product

Start it yourself — it is faster than we are. Creating a workspace gives you 30 days of the Team plan with no card, and what you record during those 30 days stays readable afterward on the evaluation tier rather than being held hostage. If you would rather see it before you sign anything, how it works walks the whole register with real screens, and the comparison hub puts it beside the eleven products you are probably already licensed for, including a section on where this one loses.

Someone here already sent you here

Reply to them. A named person who already has your context is the fastest channel this company has, and routing around them through a general address would only put your message back in front of the same person a day later.

You have found a security problem

Start at /.well-known/security.txt, which carries the disclosure policy in the machine-readable form your tooling expects. Tenant isolation is the finding we most want and the one we will act on fastest. The security page already lists our standing gaps in full — standing operator access to tenant data, no documented incident runbook, no on-call rotation, a backup nobody has restored from — so reading it first will save you writing up something we have already written up ourselves.

A useful report contains the URL or endpoint, the exact steps, what you observed versus what you expected, and the time you observed it. Please do not access, modify or retain another organization’s data to demonstrate an issue; describing the path is enough, and we can reproduce it ourselves against a fixture tenancy.

You are running a third-party risk review

The security page is the packet. It is written for your role rather than for a buyer, it leads with the attestations we do not hold, and every figure on it was measured by a script against the production database rather than typed — each one carries the date it was measured and how many days ago that was. It covers tenant isolation and the refusal proof, encryption, the handling of clinical and payment data, trail retention and deletion, incident response, what our own staff can reach, availability and backups, and the full subprocessor list.

If your questionnaire asks something that page does not answer, assume the answer is one we have not written down yet rather than one we are withholding — and ask through whoever introduced you. Answers that turn out to be generally useful get added to that page rather than emailed to one reviewer.

Your network blocks this site

This happens, and it is usually not about us specifically: a corporate proxy or a secure web gateway holds unfamiliar domains in a default-deny or quarantine state until the domain has been categorized. Your IT or security team can clear it in minutes if you give them the right facts. These are the ones they will ask for.

  • Domain. portfolioplane.com, including www.portfolioplane.com.
  • Operator. LockedIn Labs.
  • What it is. A business-to-business software product — enterprise portfolio and project management, used from the browser by a named, authenticated employee.
  • Suggested category. Business, Technology, or Software as a Service. It is not a file-sharing service, a URL shortener, a redirector, an advertising network, or a site that hosts public user-generated content.
  • What it needs. Ordinary HTTPS on port 443. No inbound connections, no installed agent, no browser extension, and no additional ports.
  • Corroboration. The about page states the same facts in a form your reviewer can read directly, and the security page is the deeper packet if they want one.

A domain that was registered recently sits in that quarantine even when nothing about it is suspicious — one major vendor holds newly registered domains for 32 days by default and another for 30. If the block persists after your team has categorized it, that clock is the likeliest reason, and it expires on its own.

The route that does not exist yet

There is no published mailbox at this domain today. portfolioplane.com carries no mail record, so an address printed here would not reach anyone — it would fail silently, which is the worst way for a contact route to fail. It is not printed for that reason and for no other. A monitored address is the next thing to stand up here; when it exists it will be at the top of this page and in the disclosure file rather than announced.