1c46763d6310b745d9b4d2b1730c91cb539d200bcaea215fb5e1c4357d8638e5ff787ba378aee128e88352f6d211978d25f7b6504b26cc1c2e85cd76321259684f0eea602d9dea893083c83245ba45e6b4e46201fd3bcd903963d402c1f793

62b3ec31933ebb3ed04b73457cced4b5b9d32e2ea8b685c5e6bc4fe9c22d106af7f4d730e68ee422eebcabcbc2282f21920de914f80e273233b641667033b1935cfba16a4c714438a1c9f3eac57909b0fea39a9432319ca2bc6d0cce01ea4a

bd6c3dc511a9a437c17538b6906fd7f2b3bd2a5ab234fa666fd6c9778978c56a7a6a23c7ac625ed25cec10abefd5c8ac76716ba8f616708be871ec4e2a1bcdb38197f4c59cc3e606ba2801aafea6cdd60362cd2cbc707022f2c2df15d56592

5801b1454db47a7ec4c78b12814f70efbfddf66cbb1b8703614f290c8f1571db34c0c91c710da6c200b6d62d77e019c950cdb13cd4f601569d9cf0739e266087a0756907ae88da7cf2b8835c7afa3c276f8cddaacb6458d90e264561999a83

d83a282cf11377aea65a27c574dfc8f566769f9e3392cabc3cda6f8b6d3cf75e7696839cb421c8ca1422b5fe33e394ce0f1f9cd8f314ded739c87926cdde160a0de20e67cfc11317a03731ceb8ab36fae1f284d21e8e0312dee85114408b8e

8baa868bd5db68efa14976a47645ad1c5e668c2cf350ea4fc07897fd5fe5f9956ea2f4298d3dac28bc8325ec274ff93b41fd851c9c6af64310b9ff8ed95c87b394c11cafddb3aff8a53c1e85be48819858c3b3ca711e69f9e1e5ff27458b44

116a4ac1a2115a1b3d56e4bf69268bae4a6cd3a385902fea09bb225a602630da3a80574f7cabce46aa146932d47c332a86dd30a46dc03b30324fee4682198ec2b731f2acbc8c7eca51b24fab8c173aee10bed06e0b14950e778cd8e8f0d74a

e208cea9083c46994b624d6c9083e2fd1bfd5b3d08722682f90101c64293dd99c9e4ef0c5d0ec54ed1d67044a5625fed6e11745798c311be08764c68412c91d7b23514d355e88eb063b8740ec48ee8dabfd1cf38dffccd495637337c8dd4a7

475f8a870795720e8300403e0ce11405923a76a9825241b967dd42ad0921d9e1fb87bcfaebb676e324a144ca9d7cd9da8686300bd51f0618874e8c31b2eb0e8e1988289f28240dd79d017ef49bb8acbbaceeac022aad6a199a1b4eabd9df44

47be3bdbda10f15782b419724af97c84f0c6a0a7ee30829fca211dc0baa18badaec43065b1a9f9ff70c516f9417d33cd06fafc0567eb7476286559e3d3a145f9881e26ef69a5a90c6529a023a0839f36d17312f8c94ada3b0472cd9e224811

633d2cbee843d38e96a0cf2387caee5be1b7122334110395b862b6cf98cae31d4e9c6d20c44ce68794d6bd0147beb8cfd68ac259faf804aee64576c722fd814e0b8564362ade447b4413af1b1a18c117a5b1f96299f75d776f76b8302a21a8

bcd0afe86e28b802c74f96953826f57f4fd9970197988e44cf44299ca553985c22a3b83fb64282fd4e9b9cc7abf2700d739a0a10f2ebc499db616fb2439949c934b0a8866dcf0faafa8629560620d2862dbdc69572fb2ed73a2fea39830a50

ed01ca0a9e6ccc18ba063bba73d458e7f4ae46298068964463cb0ade8a35f7cfd98727f42744f082b25c119c43bafe3d4070d6a32a488aa11c41e086b98dfadcfe87f32bfb33cb661922dfb21fdd51de6f6e4618a3bad2b450f12db1c0ea50

b5492fcaa864b62d9caed42720aeac178dfc0e8ce7b6a67dfbc9fe294965330a9a56f3bc205a546756ce0aaedd1aaf55dd7e0583bb09a967ebcda8d566dc20dc54ab25bfaf02424606767f3a2d0e4cc566142292181bc1548c73c604fd61e4

16869a8664c38427f7bbdeaa01065d0bc38f2795f3ed1c788d2a9b5d434ef353296050a8f357b7204abdb5edd8f99db3bed073ed6c2d80075ae90dfcc6f79a4f9e93d5237ba1f76e0241081bae5c4359e5ccd80baf56e8eeffe862697d8498

ab895cea062d2f40f9cf87599df9e045a1b55d937a18231875255d63e18e2615e29a1de21eaf87b9cf413da652254699c1f7bd57eb5966d556d635114cf38a8494c5e57b2ce774c7d9da8df88559290b85e5607463a6b3dcb97c79e31d2539

b3f8fab800cbef3fcae21b593fe5c02470c9918861c3d7122261f4fb0ec7c0884acd7b9512e89d50c32b728f3dee4c37c8056d7ce56e2a2222c17a7dbb8908dbca8c874827b0a5bff73a73bc3ad3f15481950989fa4861f8ab0f83002709ce

22fffebbf2596ba47c8b20fcd63280dd0a916d4ea00dc2f165ddd19c6e777720da5474202af57138af5ed959478d1ab1dc4191d46795d80d20c2bfd0e54f1941168e55a9c385d3369cae98f55e9e32bb7c3f2b9a96dba84fba18ac2ef70a33

6a58c236efc14df5cd2e99d2fe314d224104bcc8df2ee7bcf27a630c792997e43d4990b0fff6ea6decfe0aa49856fcf918aaa79d4865ee8877d719b8863d111c9e8428f5d4f2ebf3294881747a08febc4f0a9f5d1b6ea6440b7666ccee1878

bb1c296d47ab203c385e9a9ebff24699b1d5b0f109cece7843384ab780c8c30dc8f530991b076e89fe0d32da489f0a72b3708e6f9129ed76bf7cd94c46fc1eec8baed72b478b7fc58224cec3d92760c2579bb34b560706bcab7b55241eb0c0

46e4bd36b07a55dfa2e7f5109f84339ba955a0f5325c60e50314e853e2637cb096c8d3dda9b59e6002d85a0c5f4e1b6c4065af93f3e7db010e669e2b46cbe28f08ac344cb2edb8ff13af11d1b74116ff40575876a41a69c9ae529a21e5dac1

14d3e83cd27939582256b9d727df9e76e62bdfb6bf148375e22e7f63834dd894c679a5db3091b0e72040f31a37aef1c30a74d2c2e00985ef074eeaf7d262177ad20ee299325286707d111af1e42ad55e32dca1f6769bcd8e92bc759ebaeb6a

19a427c0dd1bacbaf93aecb939cd2db4027367ce55d18c8f71303e74738ea2d7fc4179816cc9bfdbd1a24223feaaf488dd50c27b23561beb83ba24621057d04cc329e504bacfc469ea03f04bf2f2c2b0566d21fcf46fbc6dc3516b9e442b4f

b302a5f4ae7e11c3992a75b5840e82fc8806498d632a1a57e38dc36fa564777885e11ee3362f80f4862bff2a86c52901eae244c0ca98514111b514a6096699be666d43f8c53b9ba839c6cd51018dceca4c0534c48ee54f097c31e4d10e2d13

6beebc74f917468c6d873d29a382d44026219a570befb43d7cee7c8563d5eb9562fbc5cd3689e1f637c402365d3f72e67216354d87c5d9ec7f2f17d35ff7a591be1f10ae30c84d2438d7f1f93fe735d73b5287d2d280dc8d46ee9213caf227

dc3a876630c65a55135145c86f2d089e00add458fa572d483f20cd994d95e02b3a09f5935952952b37b8da17cab69989f18e39909da46bebf3ba11c9c1171e7de930de00898397eb28e744ed2acc007668e8746513459d004407ca92fee1d3

b27db6ffb24fb1439a7e21097385e87e652a61cdf6efa8ed732285a1282481b924b3722fa14e049695c8ef56ec4ffde001fa73b2a37ea19d5601ef2a1bf66820f6d9b11f759187302a73050bb0b5d2be2ba18cece8d3218c6b43a92c56991e

f6ec9515b65f60fa4ae98d9793d99f3b7561c0d7280ce9ee8a6ea0c87b7aeffb58f3c833ae352099cd5cd71933aaaefcd4998051b0cbf84b5aceb022808cad3c5743ed1764b139c44e7dfda9d3f43ac1237c78c8965c291046f655d71903a8

1b8bdfe0da34c76b2821097bc86353832ded9172a3eddb03c6ad313fce5e84d3af9cf93d54825d13f7b0de9506d6d644d667a5a3e8dc7dcd347fda483b789e8e0ff7fb78017b9cb1cc7034bbbcee7dc61bffbfdc7d30c93eab6b4b0138d0e1

b8a7202582c281412a1eb5f51ca856b41ba9d813ec355e490f579627c3abbf65a84f7854dc15083bb822582c49f76ab1cb050ac75d874d2b07877bff59036bec3be13a51f20ed5fa09e5af698591518c6522b443389ac278eb808712c2b051

3d7db56f39c830ec00340155360a47355448926a8fb3d097692249801292ba9cada085c53b8e0bacd77d342f1565721fd5d3533c433e1e2334113ed6c555d04c05433c201b852804a5469e1cbc7ba6102ec972b3bd04a24642459fcd166fe3

c4948451201275af8b71b55afe0da6acec6a3be70465a2c72c1010f62a7cf307a4139e2168bfdf06f3918a31bc3e2348c7c3b8a6326acd5b1f0cdca3d287df13ca61febcfd8b18ca7de59b2e4514bfcfe84f33daacc5c8b2bca5472864f3b9

1100c313faf7c8e7fbf4dd89ae9708c9d1bfaad437b9eb0cc5ab224fddaa5d5dd3b00f54205b0a78c096506175b947dc2c6db9b4b0739c56575597ec049f867683b70fecbe4228e614b24f687f5c28c705f44f3ce85edf06fb6b455912d8d5

7bb4ee8907790e895990caeba4226fb8b4a01651d6538679b1b9c5e8acaad2cdfc45e0205fe3a41da77be7212e78d1667f9d1df81a805da93ed771a4e2f38d56d54d7caa35ed43d64dd1f06c2a1607e5e7365115dcf20442165fc22e4bb7b4

6704604cb39729889496f2c454c5c0a507541a3bbab309e4a7cd16fb49f23392b541edf29248c5a8e8a70bd1e91622dafda8eaeef12db3d6b9c4e66702a1ee148368b6f50ec1661eca2448f9f5564e51d2c03183590fa901aa79d639fe20a5

e2e8e00fefdac3b785ba0f108cbd8f5520ea42bb85f77534f64f9f77e02bded8341abe6d05cd2865f1e22603d8d4a3414aab4d64943e4aeec9a86e2664c71de12b1bb88a866ba262b07e60a0750c07d4030f730dcb3fd06483df8d36623e28

07ffb4c2ec893406fcecf5c71bc69e0f01bdcf6507e4a735d022b3d40b013c73ac68841f7eb4e041bd822e1256c174f5a6b6868329cf30b314f4d66f0444ead5c8e5acfa74a7e6e1859a3ac49284f00c6cc96a49a1909e14fcb3f446faf809

bc7b3d5b7abd1a6a42f8b524b48d5fa35b56314e49f554e5c3f43a18c900e95104bd91dfa7d365344a8e7dd149cd152b11861ffa5da0f04c5ca2de16260a382b6c210bc3f75327fef7810c8de24f7b5f36a5567976537069ed251578600035

a3a2f43e944901415c1d07ee63297d9c3e7c6ac772a37378217e6e1f95f8e07f9bd96d6089dbfe75e8b19340f824512db0cfd883f466fbd936742917bfe6c9aa3c6ad6163ed442294c33dd7f1ba572515a6170570014b256cacf222b141ef1

78619e32f1d2e936bf141ce56389a574a75edd3634d9678ccb94d3615460491871b523ab5367c9c933a611ad35ae2fb3482b81ba94feb502d29b0c9619c0c7e6b732be3fac3ffed142716b03ff55dfc83e64fd17587521802a005f7d223390

Security at every layer

Your data is encrypted with AES-256 at rest and TLS 1.2+ in transit, hosted in secure data centers in Ashburn, Virginia, and protected by Cloudflare's global edge network. We comply with GDPR, CCPA, and never sell your data.

Certified compliant.

PCI DSS

Level 1 Compliant

GDPR

EU Data Protection

DPF

Data Privacy Framework

Encryption everywhere
TLS 1.2+ enforced on all endpoints in transit. AES-256 encryption at rest for all stored data. API keys and tokens are cryptographically hashed — never stored in plaintext.
Privacy by design
We never sell or lease your data. Information is shared only with sub-processors required to deliver our services, protected by data processing agreements and Standard Contractual Clauses.
Access controls
Role-based access controls with multi-factor authentication on all infrastructure. Vault stores sensitive documents like KYC, bank credentials, and license keys in isolated encrypted storage.
Secure infrastructure
Hosted in SOC 2 and ISO 27001 certified data centers in Ashburn, Virginia. Deployed on AWS and Akamai with Cloudflare edge protection for DDoS mitigation and WAF filtering.
Breach response
Documented incident response procedures with 72-hour breach notification as required by GDPR. Automated monitoring and alerting across all systems for real-time threat detection.
Compliance
PCI-compliant payment processing with full compliance with GDPR, CCPA, and OFAC sanctions. Identity verification required before payouts are enabled.

How we protect your data

Our security practices are designed to exceed industry standards and protect merchant data at every stage.

Encryption at Rest & Transit

TLS 1.2+ enforced on all public and private endpoints. AES-256 encryption for all data at rest. API keys and bearer tokens are cryptographically hashed — never stored in plaintext.

Vault Storage

Sensitive data including KYC/AML documents, bank credentials, and license keys are stored in Vault — our isolated encrypted document system with strict role-based access policies and audit logging.

Sub-processor Governance

All sub-processors are bound by data processing agreements with strict security and confidentiality requirements. A full list is available in our Data Processing Agreement.

Access Controls & MFA

Role-based access controls across all infrastructure. Multi-factor authentication required for all privileged access. Automated backups ensure data availability and disaster recovery.

Breach Notification

Documented incident response with 72-hour breach notification as required by GDPR. Notifications include the nature of the breach, data categories affected, consequences, and remediation measures.

Data Subject Rights

Full support for GDPR and CCPA rights — access, correction, deletion, export, restriction, and objection to processing. Contact privacy@pandabase.io to exercise your rights at any time.

Tier 1 Cloud Infrastructure

All data is hosted in secure data centers in Ashburn, Virginia on SOC 2 and ISO 27001 certified infrastructure. International data transfers are protected by Standard Contractual Clauses and EU adequacy decisions.

Edge Protection

All traffic is routed through Cloudflare's global edge network for DDoS mitigation and Web Application Firewall protection, keeping your storefronts online and secure.

Security FAQ

Common questions about our security practices. Can't find what you're looking for? Contact our security team.

Vulnerability

Disclosure Program

We believe security is a shared responsibility. Our vulnerability disclosure program awards security researchers up to $5,000 USD for responsibly reporting qualifying vulnerabilities, assessed using the CVSS scoring framework.

Discover

Find a vulnerability

Report

Send details to our team

Get rewarded

Up to $5,000 USD

Security at every layer

Certified compliant.

Encryption everywhere

Privacy by design

Access controls

Secure infrastructure

Breach response

Compliance