Data Security

 

Panalyt helps organizations make sense of their sensitive people data, therefore we treat security as central to every decision we make at Panalyt. 

 

APPLICATION SECURITY

Panalyt's robust backend infrastructure is built on the Google Cloud Platform (GCP) and, together with compliance with GCP's customer security best practices, ensures your people data remains safe and secure. 

GCP’s physical infrastructure is hosted and managed within Google's secure data centers and utilises GCP managed services technology. Panalyt's infrastructure is compliant with ISO 27001, SOC 1 and SOC 2/SSAE 16/ISAE 3402 (Previously SAS 70 Type II),  PCI Level 1, FISMA Moderate and Sarbanes-Oxley(SOX). 

​

See our FAQs on our system security here.

​

INTERNAL PROCESSES

Panalyt's backend infrastructure is accessible only to our authorised staff and employee-level client data is accessed by our staff only when support is requested or for maintenance purposes, and only after receiving prior approval from our customers.  Access logs record all direct access to client employee-level data.

See our Data and Cyber Security policies.

​

IDENTITY BASED ROW-LEVEL SECURITY

Panalyt's row-level security measures allow customer administrators to control other users' data access, referencing the attributes recorded in the customers own data, ensuring that users only see the data pertinent to their job role.

 

SINGLE SIGN ON

Panalyt integrates with your organization's existing SSO system such as OneLogin or GSuite to ensure secure user authentication and authorization. 

 

TWO-FACTOR AUTHENTICATION (2FA)

Panalyt supports 2FA via company email, to increase the security of customer user login.  Customer administrators may activate this facility to ensure secure user authentication and authorization.