PANTHEON On-Premises Security

Installing PANTHEON on-premises offers full control over the system’s infrastructure, data, and security—ideal for companies that require strict internal governance.
This setup places the responsibility for infrastructure and security directly on the organization, and is often preferred by manufacturing firms with in-house servers, healthcare institutions, or public sector entities where local data storage is required by law or policy.

Below is an overview of the key security elements that protect your data and access to the system.

1. Infrastructure and Environment

• The PANTHEON application runs within the company’s secure internal network.

• The organization maintains full control over servers, databases (e.g., Microsoft SQL Server), and networking.

• The system can be completely air-gapped—disconnected from the public internet—to prevent unauthorized remote access and protect against large-scale cyberattacks such as ransomware or DDoS.

• Regular data backups and recovery tests are highly recommended.

• It is also advised to use antivirus software, keep the operating system updated, and configure firewalls for perimeter protection.

2. Network and Connectivity

• All communication can be limited to the secure local network only.

• If remote access is needed, it should be provided through VPN or other secure access mechanisms.

3. Access and Authentication

• The PANTHEON desktop application supports login through Windows domain authentication, enhancing login security by removing the need to manually enter usernames and passwords.

• The system allows detailed permission management based on user roles, helping prevent unauthorized access to sensitive data and system functionalities.

• It is recommended to use local or domain-level security policies for centralized user management.

4. Data Management

• All data is stored on local servers, under the full control of the company.

• Organizations are free to implement internal security policies without the limitations typically present in cloud-hosted environments.

5. Updates and Maintenance

• The organization controls the timing and rollout of software updates and security patches, minimizing disruption risks.

• Updates are performed manually, requiring careful planning and testing to ensure operational continuity.

6. Regulatory Compliance

• Since data remains within local jurisdiction, it is easier to comply with GDPR, ZVOP-2, and other local data protection laws.

• Organizations can define their own internal security policies and procedures aligned with regulatory and internal governance requirements.

7. Audit and Access Logging

• PANTHEON logs all significant activities, including data entry, modifications, and deletions.

• Full traceability and audit logs are available to monitor and review critical user actions.

8. Business Continuity and Disaster Recovery

• Organizations retain full control over business continuity planning, including system topology, backup strategies, disaster recovery plans, and overall security policy—customized to their operational environment and risk tolerance.