Data protection you can verify, not just read about
Panaceum processes personal data on your behalf as a processor under Art. 28 GDPR, in Poland also under RODO with the UODO as supervisory authority. This page lists the agreements, the subprocessors, the regions and the technical controls behind those claims.
Paperwork signed before the first import
DPA under Art. 28 GDPR describing purpose, categories of data, duration, security measures and deletion. Polish counterpart: umowa powierzenia przetwarzania danych osobowych.
Staff are bound by confidentiality obligations that survive the end of the engagement; access is granted per role and revoked on change.
Personal data breaches are reported to you without undue delay and in any case within 24 hours of detection, with the facts known at that point.
Current subprocessor list
Every subprocessor is named with its role and processing location. Changes are announced 30 days in advance and you may object in writing; if the objection cannot be resolved, you may terminate the affected service.
Where the data lives
Frankfurt and Warszawa. The region is fixed per tenant and is visible in the admin panel.
Encrypted backups stay in the same region as production, with a documented retention period.
Support works from inside the EU only. No access from third countries, no remote sessions outside the EEA.
Requests and how they are executed
Every request is tracked with an identifier, an owner and a deadline. You stay the controller; Panaceum executes on your instruction and returns written confirmation.
What is enforced in the product
Every view, export and change of personal data is recorded with account, time and object, and is available to you.
Mandatory for all staff accounts; sessions are server-side and revocable centrally.
Role-based permissions with named scopes; API keys are limited to the endpoints they need.
TLS in transit, encryption at rest for backups, secrets stored outside the application database.
Staff appear to clients as pseudonymised identities; real names and photos are never shown.
Documented retention per data category, with automatic deletion once the period ends.