Organization settings define your company’s identity within LowerPlane. These details appear throughout the platform, in generated policies, audit packages, and your Trust Center.

​
Company Details

Navigate to Settings > Organization to manage your company profile.

​
Basic Information

1

Navigate to Settings

Click Settings in the main sidebar, then select Organization.
2

Update company details

Edit any fields that need updating. All fields are optional but recommended for a complete compliance profile.
3

Upload your logo

Click the logo area to upload a new image. Recommended formats: SVG or PNG with transparent background. Minimum size: 200x50px.
4

Save changes

Click Save to apply your updates. Changes take effect immediately across the platform.
Your company name is used in generated policy documents. Ensure it matches your legal entity name or the name you want to appear on compliance documentation.

​
Industry Selection

Selecting your industry helps LowerPlane:
  • Recommend relevant compliance frameworks
  • Prioritize controls based on industry-specific risks
  • Contextualize risk assessments with industry benchmarks
  • Pre-fill industry-specific policy content
Common industries include: Technology, Financial Services, Healthcare, E-commerce, SaaS, Professional Services, Manufacturing, and Education.

​
Products

Products represent the services or applications your organization offers. Managing products in LowerPlane helps:
  • Scope compliance programs to specific products
  • Map controls to the product they apply to
  • Generate product-specific audit packages
  • Track compliance readiness per product

​
Managing Products

1

Go to Settings > Organization

Scroll to the Products section.
2

Add a product

Click Add Product and enter the product name, description, and relevant details.
3

Link to frameworks

Specify which compliance frameworks apply to each product. Not every product needs to be in scope for every framework.
If your organization has a single product, you may not need to configure multiple products. The default organization-level scope works for most single-product companies.

​
Organization Settings and Compliance

Your organization settings directly impact compliance in several ways:
Changes to your company name will not automatically update previously generated policy documents. Re-generate policies after a name change to ensure consistency.

​
Data Retention

Organization-level settings also include data retention preferences:
  • How long to retain evidence after it expires
  • Audit log retention period
  • Backup data retention
These settings should align with your Data Retention Policy and any regulatory requirements (e.g., GDPR Article 5(1)(e) storage limitation principle, HIPAA 6-year retention requirement).

​
Who Can Access Organization Settings

Only users with the Owner or Admin role can modify organization settings. Other roles can view but not edit these settings. See Users & Roles for more information about role permissions.