Trust Center
Data protection you can verify
Panaceum processes personal data on your behalf as a processor under Art. 28 GDPR, in Poland also under RODO. Here are the agreements, regions and technical controls.
Art. 28 GDPRRODO · UODOEU-only processingNo transfers outside the EEA
Data map
Every field has a place, a term and an owner
Pick a data category to see where it is stored, who can open it, how long it lives and what leaves your installation.
Never collected, never transferred
enforced in code, not in policyFull card numbersEntered on the provider page, we only keep the last 4 digits.
Plain passwordsStored as a one-way hash, nobody can read them back.
Your turnoverRevenue is never reported to us or to anyone else.
Staff real namesClients see agent pseudonyms such as Delta or Gamma.
Data outside the EEANo transfers, no remote sessions from third countries.
Agreements
Signed before the first import
Data processing agreement
Purpose, data categories, duration, security measures and deletion.
Confidentiality
Staff obligations survive the engagement, access is per role.
Incident notification
Breaches reported within 24 hours of detection.
Regions
Where the data lives
Production
Frankfurt and Warszawa, fixed per tenant and visible in the admin panel.
Backups
Encrypted, in the same region, with a documented retention period.
Support access
From inside the EU only, no sessions outside the EEA.
Data subject rights
Requests and deadlines
You stay the controller; Panaceum executes on your instruction and confirms in writing.
Request
Mechanism
Deadline
Access
Machine-readable export of the client record
5 business days
Rectification
Direct edit in the admin panel with an audit entry
immediate
Erasure
Scheduled deletion with retention exceptions listed
30 days
Portability
JSON or CSV export per client or tenant
5 business days
Restriction
Account and service freeze without deletion
immediate
Technical controls
Enforced in the product
Access audit log
Every view, export and change is recorded.
Two-factor authentication
Mandatory for staff, sessions revocable centrally.
Least privilege
Named scopes for roles and API keys.
Encryption
TLS in transit, secrets encrypted with keys kept outside the database.
Pseudonymisation
Clients see agent pseudonyms, never real names.
Retention
Automatic deletion when the period ends.