Security & Privacy
at Pandorian.
We are committed to protecting your data with strong security controls, privacy-first practices, and continuous monitoring across our platform.
A few words
from our CISO.
Pandorian is built for organizations where security, control, and accountability are non-negotiable.
From day one, we’ve designed our platform to meet the expectations of large engineering organizations, where access control, data isolation, auditability, and operational rigor are required, not optional. These principles shape how we build, operate, and continuously validate our systems.
Security at Pandorian is not abstracted or delegated. I’m directly responsible for the controls and practices that protect our customers’ data, and my team is available to engage deeply during any security review.
If you’re evaluating Pandorian, we’re set up to support that process directly.
Tomer Amarani,
Chief Information Security Officer
to security and privacy
Pandorian maintains SOC 2 Type II compliance, with independently audited controls covering security, availability, and confidentiality.
We comply with GDPR and CCPA requirements, ensuring proper handling, processing, and protection of personal data across all regions we operate in.
All customer data is encrypted in transit and at rest using industry-standard encryption protocols and best practices.
We enforce strict role-based access controls, ensuring only authorized personnel can access sensitive systems and data.
Customer data is logically isolated to ensure strong tenant separation and prevent unauthorized access between environments.
All actions within the platform are logged and traceable, enabling full auditability and supporting security investigations and compliance requirements.
Security is embedded into our development lifecycle, including code reviews, dependency monitoring, and continuous security validation.
Our infrastructure is hosted on secure, industry-leading cloud providers with built-in redundancy, monitoring, and protection mechanisms.
Pandorian is designed to operate without requiring unnecessary access to sensitive data, reducing risk and exposure by default.
Pandorian is built for high availability, ensuring reliable performance and continuous access across all environments.
Subproceccors
Pandorian engages a limited number of trusted subprocessors to deliver its services. Each subprocessor is carefully evaluated for security, privacy, and compliance, and is only used where necessary to support core functionality.
Hosting provider, infrastructure, storage, and encryption services
Cloud Region: US (primary)
AI services provider supporting certain data processing capabilities
Cloud Region: US
Monitoring, logging, and system performance analytics
Cloud Region: US
Authentication and identity management
Cloud Region: US
Repository integration for code scanning (customer-authorized access only)
Cloud Region: Depends on customer configuration
Customer support and ticketing system
Cloud Region: Depends on customer configuration
Resources
Questions?
For any security and privacy related inquiries, please reach out to security@pandorian.ai
