PANTHEON DMS Security

All documents in PANTHEON DMS are stored securely.

Below is an overview of the key security elements that protect your data and access to the system.

Users can choose between three types of electronic archiving:

1. eDocumentation

eDocumentation is a cloud-based electronic document storage service hosted on secure infrastructure, part of the PANTHEON DMS (Document Management System). It serves as a central repository for all documents created, received, and exchanged with business partners and other entities.

Infrastructure and Environment:

• Storage on secure servers as described in the Cloud Security section.

Network and Connectivity:

• Encrypted data transmission via HTTPS/TLS.

Access and Authentication:

• Authentication through the PANTHEON system.

• Role-based access control.

Data Management:

• Encrypted filenames (7z format).

• Secure document storage.

Updates and Maintenance:

• Centralized system management.

Regulatory Compliance:

• Compliant with GDPR and data protection regulations.

Audit and Logging:

• Support for audit trail access.

Recovery and Business Continuity:

• Regular backups of all documents.

2. Certified eDocumentation

A legally compliant, certified electronic archiving service provided by ZZI, approved by the Archives of the Republic of Slovenia.

Infrastructure and Environment:

• Documents stored on ZZI’s secure servers.

• Infrastructure certified by the national archive authority.

• Document backups are in place.

Network and Connectivity:

• All transfers encrypted via HTTPS/TLS.

• Archive connections protected by digital certificates.

Access and Authentication:

• Access managed via PANTHEON and ZZI systems.

• Role- and permission-based authentication.

• Additional protection includes digital signatures and time stamps at entry.

Data Management:

• Documents are digitally signed, timestamped, and encrypted.

• Long-term readability ensured with certified formats.

• Supports both original digital and digitized paper documents.

Updates and Maintenance:

• System managed by ZZI in compliance with national standards.

Regulatory Compliance:

• Fully compliant with document and archival law and GDPR.

• Certified by the Archives of the Republic of Slovenia.

Audit and Logging:

• Full traceability of document operations.

• Integrated audit trails required by law.

Recovery and Business Continuity:

• Backups created for every archived document.

• DR and availability plans in place.

3. Local eDocumentation

On-premises electronic document storage for companies with strict internal rules or poor internet connectivity.

Infrastructure and Environment:

• Local storage within the user’s environment.

Network and Connectivity:

• Limited exposure to the internet.

Access and Authentication:

• SQL Server with authentication and role control.

Data Management:

• Encryption possible at database/table level.

• SQL-level audit logs.

Updates and Maintenance:

• Updates managed by company administrator.

Regulatory Compliance:

• Locally customizable compliance setup.

Audit and Logging:

• SQL audit logs for access and changes.

Recovery and Business Continuity:

• Internal backups on company infrastructure.