Security & trust

Your devices hold your company. We treat them that way.

Paneo handles employee data and the devices your business runs on. Here’s how we keep both safe, in plain language.

EU data hosting
Customer data is stored in data centres in the EU.
[TODO: confirm hosting provider and region]
Encryption in transit and at rest
All traffic uses TLS. Stored data is encrypted at rest.
[TODO: confirm encryption standards]
Single sign-on
Admins and employees can sign in with Google or Microsoft on Growth and Enterprise.
Role-based access
Give IT, People and Finance access to only what they need. Employees only see their own devices and orders.
Certified data wiping
Every returned device is wiped by a service partner, and the wipe record is attached to the device.
[TODO: confirm wiping standard, e.g. NIST 800-88]
Audit trail
Orders, approvals, assignments and returns are logged with who did what and when.
Data you control
Export your data at any time. If you leave, we delete it according to our data processing agreement.
[TODO: confirm retention period]
Vetted partners
Leasing is provided by regulated financing partners and insurance by licensed insurers. We only share the data they need.

Compliance

GDPR, by default

We process personal data on your behalf under a data processing agreement, and only use it to run the service you’ve chosen.

Available to every customer. [TODO: link DPA]

A full list of the services that process data for us. [TODO: publish sub-processor list]

We describe our practices rather than claim badges. [TODO: list certifications only once obtained]

Tell us first, and we’ll work with you to fix it quickly. Email security@paneo.io.

Need our security answers for a vendor review? Request them here.

Set up your shop in minutes. Free when you lease, with no setup fee and no long contract.

Set up in minutes · No credit card to start · Cancel anytime