Question 1

What is SOC 2 and why does it matter?

Accepted Answer

SOC 2 is an independent framework developed by the AICPA to assess how companies manage customer data. It verifies that we’ve designed strict security controls across our systems, infrastructure, and policies. For enterprise teams, it means you can confidently assess Palm’s security posture without guesswork.

Question 2

What does Palm’s SOC 2 Type II certification cover?

Accepted Answer

Our certification covers the AICPA’s Trust Services Criteria for Security. It confirms we’ve implemented controls across access management, vulnerability detection, incident response, employee onboarding, change management, and more — and, as a Type II report, that those controls are not only well-designed but have been operating effectively over an extended period, as verified by an external auditor.

Question 3

Is Palm GDPR compliant?

Accepted Answer

Yes. Palm is fully aligned with the General Data Protection Regulation (GDPR). We operate under a data minimization model, store customer data in EU-based data centers, and offer contract-based retention, deletion, and subject access processes.

Question 4

Where is customer data stored?

Accepted Answer

By default, all customer data is hosted on Google Cloud Platform in EU-based data centers. Data is encrypted both in transit and at rest, and logically isolated per customer.

Question 5

Who can access our data?

Accepted Answer

Access is limited to authorized personnel only — primarily engineering staff — and granted based on job role and business need. All access is logged, reviewed quarterly, and revoked immediately upon employee exit. Management approval and multi-factor authentication are required.

Question 6

How does cash forecast scenario planning work?

Accepted Answer

Scenario planning in Palm lets you apply percentage-based adjustments to any forecast category — like "-5% on collections" or "+10% for seasonal payroll" — and see the impact instantly across your cash position. Adjustments preserve your underlying weekly and daily patterns, so a 5% reduction distributes intelligently across your existing forecast shape rather than flattening the line. You can create named scenarios (base case, conservative, aggressive), compare them side by side, save them for board reporting, and track how assumptions change over time.

Question 7

Does Palm replace my TMS?

Accepted Answer

No. Palm sits on top of your existing TMS and ERP infrastructure as an intelligence layer. Your TMS continues to handle payments and bank connectivity while Palm adds AI-powered forecasting, variance tracking, and scenario planning on top of the data flowing through your existing systems. You don’t need to migrate, rip-and-replace, or run complex integration projects. Palm uses a read-only architecture, and most teams are live in weeks.

Question 8

What ERP and data source integrations does Palm support for forecasting?

Accepted Answer

Palm integrates with major ERPs including NetSuite, SAP, and Microsoft Dynamics, plus banking platforms via API and accounting systems. Batch uploads from Excel and CSV are supported for any source without a direct integration — tax payment schedules, talent cost forecasts, and similar category-specific data. Your existing data infrastructure stays intact, and Palm’s read-only architecture means no changes to your ERP or banking setup.

At Palm, security is a core commitment

How Palm is built for security

SOC 2 Type II Certified

What this means for you

Cloud Infrastructure, Hardened by Design

Security in Practice

Frequently asked questions

Get started with Palm