Panop is built with security, privacy and operational reliability at its core.
Our platform is designed to meet the requirements of modern enterprise environments through mature security controls, trusted Swiss infrastructure, secure engineering practices and governance processes designed to evolve alongside regulatory, contractual and operational requirements.
Security is a core component of our platform, operations and culture. Our security program incorporates governance, risk management, secure engineering practices, operational controls, employee security awareness and training, continuous monitoring and compliance practices designed to protect customer data, ensure service availability and support regulatory and contractual requirements.
We maintain documented security policies, standards, and procedures that establish the governance framework for our information security program and guide how security is implemented, managed, and continuously improved.
Policies are reviewed regularly and updated to address evolving threats, business requirements and regulatory obligations.
Security is integrated throughout Panop’s software development lifecycle.
Software artifacts are generated through controlled build pipelines and cryptographically signed before deployment where applicable.
Panop is designed to support reliability, resilience and operational continuity through:
Service availability and operational status can be monitored at:
Panop StatusPanop applies administrative, technical and organizational safeguards designed to protect customer information throughout its lifecycle.
This includes:
Access to systems and customer data is restricted to authorized personnel who require access to perform their job responsibilities. Access requests are reviewed, approved and periodically reassessed according to documented procedures.
Privacy considerations are integrated throughout the platform lifecycle and operational processes.
Confidential information is handled according to documented security policies and data handling procedures.
Customer information is protected through multiple layers of security controls.
Encryption in transit is enforced using industry-standard protocols such as TLS, while customer data stored within our systems is protected through strong encryption mechanisms at rest.
Encryption key management processes are implemented to support the confidentiality and integrity of protected information.
Customer data is hosted in Switzerland and benefits from enterprise-grade physical and logical security controls, certified data centers and a shared responsibility model that clearly defines infrastructure security responsibilities between providers and customers.
Our infrastructure partners develop and maintain compliance frameworks incorporating:
Their infrastructure is independently audited and aligned with internationally recognized regulatory and security frameworks, including:
Swiss Federal Data Protection Act
This approach combines Swiss data residency with enterprise-grade operational practices designed to support strong security, resilience and data protection requirements.
In our cloud environment, security and compliance is a shared responsibility between Panop, our cloud service providers and our customers. The division of responsibility is as follows.
Security of the cloud
Security in the cloud
Security of your environment
| Responsibility | Cloud provider | Panop | Customer |
|---|---|---|---|
| Infrastructure | Cloud provider | ||
| Software | Cloud provider | ||
| Physical security | Cloud provider | ||
| Data | Panop | ||
| Applications | Panop | ||
| Access management | Panop | ||
| Configuration | Panop | ||
| User data | Customer | ||
| User access management | Customer | ||
| User configuration | Customer | ||
| Customer-managed scanners | Customer |
Scanners deployed, hosted or operated by customers in their own environment remain the customer’s responsibility. This includes installation, configuration, credentials, access control, maintenance, updates and the security of data processed by those scanners.
By understanding and adhering to this shared responsibility model, we can ensure a secure and compliant cloud environment.
Panop is built and operated in Switzerland, supported by Innosuisse Initial and Core Coaching and Trust Valley, and developed in partnership with leading Swiss AI research institutions.
As part of a trusted Swiss ecosystem, Panop gives you full control over data sovereignty: your exposure intelligence, the most sensitive data your organisation generates, never crosses a border you have not explicitly chosen.
The Swiss Innovation Agency. Panop is supported through Innosuisse Initial and Core Coaching, backing applied research and the development of sovereign security technology in Switzerland.
Western Switzerland’s cybersecurity and digital trust cluster. Panop is backed through Tech4Trust, alongside research institutions and operators building trusted digital infrastructure.
The Cloud Security Alliance (CSA) Security, Trust, Assurance and Risk (STAR) program is a globally recognized framework that promotes transparency in cloud security.
Our CSA STAR Level 1 registration demonstrates our commitment to openly documenting our security controls and aligning them with the CSA Cloud Controls Matrix (CCM), enabling customers to assess our cloud security practices with confidence.
Panop’s infrastructure, operational controls and governance processes are designed around industry-recognized security principles and modern enterprise expectations.
Formal certification processes are currently underway, with additional audit and compliance milestones planned over the coming months.
While certifications are in progress, our platform, infrastructure and operational practices have been designed from the outset to align with the security, privacy and governance standards expected by enterprise organizations.
Additional security documentation, compliance information and supporting audit materials can be provided upon request.
