DATALAB Cloud Security

DATALAB Cloud ensures reliable hosting and system management.

This robust foundation also powers PANTHEON Web, enabling secure and modern ERP access anytime, anywhere.

Below is an overview of the key security elements that protect your data and access to the system.

1. Infrastructure and Environment

• PANTHEON Cloud is hosted in secure data centers with 24/7 monitoring and restricted physical access to servers.

• Redundant power supply, cooling, and internet connectivity ensure uninterrupted system availability.

• Certified according to standards such as ISO 27001, SOC 2, and Tier III/IV for high security assurance.

• Users only need the PANTHEON application, which connects to the cloud database over a TLS-encrypted channel.

• All external communication with the PANTHEON Automation Server (PAAS) is routed through a secured IIS server.

2. Network and Connectivity

• All data transmissions between clients and servers are encrypted using TLS 1.2 or higher, preventing interception and misuse.

• Protection is provided by advanced firewalls, IDS/IPS systems, and DDoS mitigation solutions.

• Network permissions are managed based on the principle of least privilege.

3. Access and Authentication

• Login to PANTHEON requires a username and password.

• Multi-factor authentication (MFA) can be enabled, using SMS for added verification.

• Access is tightly regulated with role-based permissions, limiting access to sensitive data.

• Rights and permissions are assigned based on user roles, ensuring secure access to data and functionality.

4. Data Management

• All communication between application components is protected with modern TLS (1.2 or higher) encryption.

• Regular data backups are performed with fast recovery capabilities.

• Personal data protection is ensured through legal and technical safeguards, including data processing agreements.

5. Updates and Maintenance

• Software is regularly updated with security patches to reduce vulnerability risks.

• Maintenance and upgrades are automated and centrally managed to minimize human error.

6. Regulatory Compliance

• Full compliance with GDPR, ZVOP-2, and relevant local regulations is ensured.

• Through contractual agreements, we guarantee that all services meet the highest standards of legal and ethical compliance in Slovenia and the EU.

7. Audit and Access Logging

• All system access and activities are logged for audit and forensic purposes.

• Users can view login history, access logs, and system changes.

• Alerts are in place for unusual or suspicious activity.

8. Business Continuity and Disaster Recovery

• Regular data backups and infrastructure redundancy are in place.

• Business continuity and disaster recovery plans ensure rapid recovery in case of incidents or outages.