d3d7ad3d1dd84053b19b84db895c79ffe1c95d5e84e15ca5941b720185c0b0d115958a12c2bbe30a4b9c376f4222c3a6e37b6bc4a297726957a11a90bfdb73db34fb0b9f6ceecf93a18b9ccefdca3da4033dd73cfeb998d1544e5ce29cd56c

458fd4f1b6c35cd0ea7c6b3e4b4511daed87ae11dc40e1f4add6c805c85c0d1a2176fdbf772f4f58986b566da6e736eaa818c48e2c02e375531f3d95bf53900141e2acc5d54667cbcadf9d4260f53a09eaf83a190a2041e1e6da015c380b46

c89e7877ad8cda5a82e5a7174aebe1371f92c788346ee9b6102cf98ca5f48fb33bd09bf037aa2925e24aeba7de5c78df162baa9d216ee7b612653cc8358bc824238254dab5755aa5c4888c9e2c83053b0ddb7883b9b1cee8539f5cb37158a4

d4e7bbbd993c02131f4561ecee955bb9504e447b70422944560276d558fdb9a2b39610c4a002d0166e21ffb20b52908d515aa0cd343af9586104b558bcb7b5d0b01092864b2463ba7b81fb2e9c51f33f5ae020f6021affe005179483d0a0c4

b0a8d4f1fd44a86c84141dfd3e932a8a24d275a02702f503a36ec74a40af88a0eec18efc38037950050138dc3e99089a38553cb65db027ef17366769c4769c164498743d4df384bc2a07dca86ca7b48a2c0d628ee53746cec4f83dbd2cd92a

f5dec7d8bdce5d3a951175ddd815ca0752636f586ddc739465f68d6bd4b38281819f58b49ddba154ab411dfd3bfa028534f4106cf504283a639096f171dccc7cae684d1005e6788054ac3ff0277260962f722997210b9f6624fd4c2773aa37

fab121ccfae99cce8d25134f5fcc0b292c670b83743c265d43f2cfc13f40c865286b0187697631ec676401d32d346eb1463b9890f6cbd14f2d4eb33f5817b1b066dafcd23bf5dcdb9124174091f03b72703435b57d242a3ef665f4bc2cc16e

9ed9e5ed8bb4f706ac2c65cf6e0fa0e79087950d321fb3e119ef4e6baafa4a91ab6848fbc38826c65f4936e81d57051f55e338dcb1da1df8a75b3bedf154a3da685ab34ef4118a8908cc510ae403138b75a70f5dce6443aad7165c66e48c0f

55cb0f7052f45a90f0f20981420f4c1d77a67f5ae699ad2d9ea7b952c562d2c731a8a18e310ce403dda16a4077fbc893f9998bc0d9aa2cd3774c986b7f65b952e2f6bd13a1e6279f466e6458640d7ecfe4cca3322fa3e2665155453ee9376d

7e1be80378b8df0299ef2efc6b08cfa8c062b2d8c26920ef85e3a51bf1b914927ae00ea8de9032b48d4d4583dcb09e39217995b3a5d772577ea5594e6c2e83033fa599b1bf0b5493e9fed4ac27346b6afb2fbb6d96033d946a5db765346d01

0a6d51f1441c9dd3757eb290090e6f2619edaa4aea48dc2f1bef4aa8a8f95c684471a5c92e1784e90a216136f9b1e0f59ecec044ab4ca926fc426d62dd3f6d8b8852b5368e60363e708a59e295dc9f1f8ff841a1bb100acac562179232320a

df8bbc7fdd7fc62b27e356d904def09280fd6d4b76f660ccaa280a3c87c0889b62a9423c2fe03ffb8ce183e4182e3e3dec01ea68e41d559124dd6bfce5b37b94ea048b12e0953f4285dff5bee908804639c96620e7e3999803e3a59943f7be

8bd8f37a0ce0d960ec39a2f81ac4942f114061331cd75f0f569a5f4d4db98e9c0e6f3be7499ff4753af90cde9620ad57b2360e572b38e4216168782c4fd662a30f54cb58518c03388f09fed2208b8b73ba3dbf3ea5d66d68d854396f1737e3

20922d8c78d02e6266bc6dff3924f05f93129fa87c6b4b15dbcba7a350b4b165b49afa4aca36a9875898754a92aebb34e20b089c2df2e2f7807cf872d97b8dc7d0b9b940b5e25677013cbc8aaddd808d3b92c54fdcf6cee107bf1409c19f60

29cd47c1d32450b50ddded122860a6fe80dbc96aab096e43715ade8a2fdfd5b2a9057e067a395176f8c108b1d7cfdb76564f5f3bbb952e43c61f5f3972b7ddf85b1ff3d99706d6370371a40da0a138f75414403c3c36b48c0cdaa94b775846

8ab3b778f78c0741091cf75be57ea6e42175937f62ff56d7c19e76f5e795f8f1e64b1537a1d5dc913cbea30259722b65c641d8dc0fb99e78b6809e00dcfa2535fdde1b8b3479dbfed618c56ba86ca720c5d2fa91aac4bbc92ad57ad487dc66

2222b5f98eb7bb48c8692407b51d10df3472096417d82cef3c1397ca997ec09a1581149482cf33bb45bec381487b7ee05878d86a89911ce35e76634c81a4e41139bd928c8518f44fd9638d3583bbeacd2692be686fbaa640dcf829c08b85b7

2821fa365d3691054c8fd38391036b7d7d8ea643c2b9d8396f0ceef6dadab86c62250e85dd9fcec9c524f645fa3cafe4b0063db3d2fd9146429898667d28c8a259f8bc0f2cdfbc42a5d78270610dde3e5795f07940678623fd0c1574e6f175

6f5974d9dc901c1f8710441f71c95cd5979e54f619ee976c627ebbbe72083d14251042a0d24caefb6f9949f319f026780da51f7dbc7f89f344d1ece04d22f7a6812d3255bf12486c72fd6d9ce12a36460d0007b8f65edef090c6cd1a44ff52

f799f67a2996a435a4b3526018507e2cbe4a59881ee4a3f56ad070efd2ec790f819ae4d213168d7de8de12b25e0e53ef6f50327f2c29ce25b911397d314e52c8257ef9c3f057dd976af8f0e7529bd7cef0ef7ad067f8720f1c1c8f682628fd

e68d8a0403d2dec052ec4e7b3da92884e4b28d2af5f120fe9595ee901698428a5077071afe516e2f98712ac2a9d502e7c6fb5499850ad947a35ed36ba627d3d70dcc73b3b8a7eaba2275eb979714f6a864476b8f737c9fb67026ee27ddaba7

07b201525e25807dd2a44a84e3023487743fbcaa940b3f097d410d684e4e7eef66d775de0107644769136c5e2f75bbb69b632dd773c8a1ca42532767140221e6a696692ae6c098571c52fcaed1712df2c4354e793e0470c2c05cc04f937ede

8a8629853e809266a4a7e1cfd59dd1072f6c38789f39d78c8c4ec477351011398feb2e9d887528d4d433aed9f29ea266f11788003b12f6f84a5650239ec769244209739c646e57e3225a2fb7c481fb52cfbc2bc36b768f5379c3fe015ba9bd

2322bf2b0eee7804aa5b4f02fc399beb8aaa0d4396c13533c7818d4a15e3eb409562a00fd8d614cc000600c4c2a1015bcf034275146c2805412fc21f72662b86a583605e4c59cf85ac3e0f5b6836fb8308da9c8b60bbdb0c510b0db89d7927

8e94bf4a3b469c9a64524f0f00b2e3b5decc81be4a5c38da3c9cd94d04b89a34cf995032aabb77788f056d40f79556e447bd6ef4a2c109e2171acf3a812cb11bfe20ed89cc6cb6bf01a5d4c70c34a7d8e29a5a70f65a867d93ca85a3813c06

0f8146d8e2aeaf461dd28b58bb0c0eb90e0a2f6907f058deb58d2d2931daa3d87d338059b6ffd37cacc78a225848f76cf9d338dc6b0f41656d29f681b201866875256ffda879c07378d2e6b33f0da28aa6193cdb214cb9425b7353582f81fd

6c36dc5610d1b55da5ea4998da6f2efd72b35bb7cfc403cd904b8cdcb19ee14d524390b5302227ad76ad5f61f1f49f9707c350463cca5503124f28bed6b21b2ddb6903b8d25cc3af1aab236290369e091d58c7fa3f996b88d4ec572354620a

5344850abd4b70c5cc232cae5dcd15dfd46fba71e2e82adb16586bcabb05d411d3f6e59914ebc4b5c52d436ed471dd0285f81786e2882042c9e38ff40be7d8ddc2355c77862f0b9f34650fd98817daf962d072b12dd2897cf786c42d035ed9

dafe98cfb67c2701b1ca05bbb72f37ab0dadee134bafe68c41d3318e7787be5dd642bf3fc7cf6e285ecb9866241a62a6c1adf0b2bd84ad3c4b8f9b5c1a4aa5eb5a4904b4eb50deb90fa9f2c0d035750eeb7eaa5e2957e2fa81ec6473d5a4be

4b6fd9ff0f2456aed7bafc030bbb84afbc051f467957669a69387bfdfe9661291db9aee4e2b9c73c57b57acfb1df2d74a285778a3a88e61b480a412108781c0c927da4afe045f159aee0e30e3a5b37d7f7323bb28b68a7a49f3c946a58e896

b206f7b52d6d4541ccece5d40aebf10fbfaa1887d72c54c045df28d9e281043ef88036b366198e64260e4e7ffe57524a3b490cb77c1917a47b5bd31fdacf9eff6db78b33809cc063299fd5edbe4104e87648170c7cf7aa039d824c97297341

c5e57612eeef7b43749d690ce600f0a9c72873aa3288d9ccfa5ed4210c4ccba22c7efae3f4a4d7a276d2d3cd1ea17ec15488ab01a17bd13342f2411a61c60e99ab1156e2c41cd5d05a2a950b6db474702e54cb3ce14f00d8de5dbf532ad9ef

859fb7bcf239a0e1d4df556dc49042aef920b62ea847d3d6acd6090e0e325c91678a6c18f0e45787e8b326aeda21534ea7811cecefe41a522e9abebfb64b35bcd2c522d96f30439563a5f766cce5a9c6cef4d20a9c6c4d1947c62fdffd7352

8141ff2af037fd9972d7b6849e4617a3051e532c7dde7aa22f080f9cf7258fc1a7844f0f8857daa9c84a84c7eb30ff5cd28b6688b8968fbfc0e67deaf82895acebddef179312c818e461faed6b3ab34f7855816a817cbacfdb8336e405adbc

f4ae2a57c1ce9f9e300e970ba0967f7c110cbda1aa873f286ac67d09211c2a12f6a3883b60e35794f11f1085cedb6ca0c4201f46f20e21ae62580494c398885558de0134147637badf31cd9e0f0b965809b96fd2dc567bd3f61ee4f5207c53

c5eb1f359a4014d7e53f6b0ee87289e8e80bb80877bdf9a64ea6d528e0090af9233f4c189e00ee35ff6f1ef5425f27f58ed35912a8afb2ca9387707d283916fd4845a18f20a8c8f2fe5084d4f839aca2bb0276c59c1b5d75288cdefe3ee1c1

6f638b02feec9148da2b3a90cb6a83a11d7a57198917c4e057116e82c4038ee676d485a562eb8f64d1405feeca203b704bc202720f5a704774317219ffa4b56aa253240332245af0cd41020478e69fab2ac19e944955b6e61f849a4eef1fe2

5e5148e646ae9fa96956ca3a94dc758c017ed002ba60a4c232cdc3b036080eb008931ac3a23b9992dd712e85da42c78541ba0a9ada1140ead67cffe2cc58c7fb65bb6bdd93d5dd6bbe03e66ac5a3b32c4d62213f514bc650752107d407e414

895da4e4708cf1fd63030ac3ef27fcc2f0de8471f3737a3205cd868108858902d557f7336d993fed1aecde0c0c5b68bc2c355bb9594357cb5ae7f1daebf3545245f3b8b165cf8cc5f505c16d45dc851b83111a712e5b779c1f0a28a681a5e0

8a5cd4bb5b97110b623ddd317f0e238cfc22d55a71f984866d4715785a4a724798a915a7f2d3c65c8055403040c7e7f958aeeb142eae9afb55b34bef1a4e769c91db9c85a18cd8b0c6335d97460d57da1bb0a7e4be5f36c9058d5f52fd4985

Security at every layer

Your data is encrypted with AES-256 at rest and TLS 1.2+ in transit, hosted in secure data centers in Ashburn, Virginia, and protected by Cloudflare's global edge network. We comply with GDPR, CCPA, and never sell your data.

Certified compliant.

PCI DSS

Level 1 Compliant

GDPR

EU Data Protection

DPF

Data Privacy Framework

Encryption everywhere
TLS 1.2+ enforced on all endpoints in transit. AES-256 encryption at rest for all stored data. API keys and tokens are cryptographically hashed — never stored in plaintext.
Privacy by design
We never sell or lease your data. Information is shared only with sub-processors required to deliver our services, protected by data processing agreements and Standard Contractual Clauses.
Access controls
Role-based access controls with multi-factor authentication on all infrastructure. Vault stores sensitive documents like KYC, bank credentials, and license keys in isolated encrypted storage.
Secure infrastructure
Hosted in SOC 2 and ISO 27001 certified data centers in Ashburn, Virginia. Deployed on AWS and Akamai with Cloudflare edge protection for DDoS mitigation and WAF filtering.
Breach response
Documented incident response procedures with 72-hour breach notification as required by GDPR. Automated monitoring and alerting across all systems for real-time threat detection.
Compliance
PCI-compliant payment processing with full compliance with GDPR, CCPA, and OFAC sanctions. Identity verification required before payouts are enabled.

How we protect your data

Our security practices are designed to exceed industry standards and protect merchant data at every stage.

Encryption at Rest & Transit

TLS 1.2+ enforced on all public and private endpoints. AES-256 encryption for all data at rest. API keys and bearer tokens are cryptographically hashed — never stored in plaintext.

Vault Storage

Sensitive data including KYC/AML documents, bank credentials, and license keys are stored in Vault — our isolated encrypted document system with strict role-based access policies and audit logging.

Sub-processor Governance

All sub-processors are bound by data processing agreements with strict security and confidentiality requirements. A full list is available in our Data Processing Agreement.

Access Controls & MFA

Role-based access controls across all infrastructure. Multi-factor authentication required for all privileged access. Automated backups ensure data availability and disaster recovery.

Breach Notification

Documented incident response with 72-hour breach notification as required by GDPR. Notifications include the nature of the breach, data categories affected, consequences, and remediation measures.

Data Subject Rights

Full support for GDPR and CCPA rights — access, correction, deletion, export, restriction, and objection to processing. Contact privacy@pandabase.io to exercise your rights at any time.

Tier 1 Cloud Infrastructure

All data is hosted in secure data centers in Ashburn, Virginia on SOC 2 and ISO 27001 certified infrastructure. International data transfers are protected by Standard Contractual Clauses and EU adequacy decisions.

Edge Protection

All traffic is routed through Cloudflare's global edge network for DDoS mitigation and Web Application Firewall protection, keeping your storefronts online and secure.

Security FAQ

Common questions about our security practices. Can't find what you're looking for? Contact our security team.

Vulnerability

Disclosure Program

We believe security is a shared responsibility. Our vulnerability disclosure program awards security researchers up to $5,000 USD for responsibly reporting qualifying vulnerabilities, assessed using the CVSS scoring framework.

Discover

Find a vulnerability

Report

Send details to our team

Get rewarded

Up to $5,000 USD

Security at every layer

Certified compliant.

Encryption everywhere

Privacy by design

Access controls

Secure infrastructure

Breach response

Compliance