PANTHEON Web Security

PANTHEON Web is the browser-based version of the PANTHEON ERP system, providing access to business functionalities without requiring local installation. This simplifies remote work and improves mobility for users.
By using PANTHEON Granules, which also run via the web browser, organizations can customize functionality to their needs—for example, HR records, documentation, and more.

Below is an overview of the key security elements that protect your data and access to the system.

1. Infrastructure and Environment

• PANTHEON Web is hosted on secure servers, following the same security standards as other DATALAB Cloud solutions.

• An IIS server acts as a reverse proxy to centralize and secure web traffic.

• Centralized management ensures regular updates and ongoing system maintenance.

2. Network and Connectivity

• All communication between the user's browser and the PANTHEON Web application is encrypted via HTTPS (TLS 1.2 or higher).

• Communication between PANTHEON Web Services (PAWS) and other applications also uses HTTPS with modern encryption protocols.

• Firewall protection, IDS/IPS systems, and DDoS mitigation are also active for web-based access.

3. Access and Authentication

• Login to PANTHEON Web requires a username and password.

• Multi-Factor Authentication (MFA) is available for added security, including SMS verification.

• Access to PAWS APIs is secured with JWT (JSON Web Tokens), enabling authorized and secure system-to-system communication.

4. Data Management

• All communication between application components is protected with TLS 1.2 or newer encryption.

• Centralized management enables controlled updates and consistent data governance.

5. Updates and Maintenance

• PANTHEON Web is regularly updated to address emerging security vulnerabilities.

• Maintenance is automated and centrally managed across all users.

6. Regulatory Compliance

• Full compliance with regulations and standards such as GDPR, ZVOP-2, and other local data protection laws is ensured.

• Under contractual agreements, Datalab is committed to delivering all services in accordance with the highest standards of compliance, ethical business practices, and applicable legislation within Slovenia and the EU.

7. Audit and Access Logging

• All login events and web activities are logged for precise monitoring and audit purposes.

• Suspicious activity alerting systems are also integrated into web services.

8. Business Continuity and Disaster Recovery

• Regular data backups and infrastructure redundancy are in place.

• Business continuity and disaster recovery plans ensure operational resilience in the event of disruptions or incidents.