NIST 800-53 Planning Compliance for Private Mendix Platform

Last modified: May 22, 2026

Introduction

Documents in this section provide more information about Private Mendix Platform's compliance with the Planning (PL) category of the NIST 800-53 security framework. For each applicable control, we have listed which party (Mendix or the customer) is responsible for which component or aspect.

In general, Mendix is responsible for the Private Mendix Platform, Mendix Operator, Mendix Studio Pro, Mendix Runtime, and so on. Customer responsibilities are related to infra and organization processes. For more information, refer to detailed documentation below.


PL-01 - Security Planning Policy And Procedures

Documents the Private Mendix Platform's compliance with the PL-01 control of the NIST 800-53 framework.

PL-02 - System Security Plan

Documents the Private Mendix Platform's compliance with the PL-02 control of the NIST 800-53 framework.

PL-02 (03) Plan Coordinate With Other Organizational Entities

Documents the Private Mendix Platform's compliance with the PL-02 (03) control of the NIST 800-53 framework.

PL-08 Information Security Architecture

Documents the Private Mendix Platform's compliance with the PL-08 control of the NIST 800-53 framework.

PL-08 (01) Defense In Depth

Documents the Private Mendix Platform's compliance with the PL-08 (01) control of the NIST 800-53 framework.